Data Protection Officer: Vitall Bienestar, S.L. has not appointed a Data Protection Officer, as none of the circumstances that make it mandatory apply (article 37 GDPR and article 34 LOPDGDD). For any data protection matter you may write to privacy@vitall.es.
For any privacy matter: privacy@vitall.es
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Managing orders, payments and shipments | Identification, contact, address, billing | Performance of a contract (art. 6.1.b) | Contractual relationship + 6 years (art. 30 Commercial Code) |
| Answering enquiries from the form | Name, email, telephone, message, order or batch number | Consent and legitimate interest (6.1.a and 6.1.f) | Resolution + 1 year |
| Professional enquiries (B2B) | Company, contact, activity, volume | Pre-contractual measures (6.1.b) | While mutual commercial interest exists |
| Club Colmena subscription | Identification, address, preferences, payments | Performance of a contract (6.1.b) | Duration of the subscription + legal periods |
| Commercial communications | Name and email | Consent (6.1.a) or prior sale (art. 21.2 LSSI) | Until unsubscribed |
| Analytics and site improvement | Cookie identifiers, browsing | Consent (6.1.a) | As set out in the Cookie Policy |
| Legal and tax obligations | Billing data | Legal obligation (6.1.c) | Legally established periods |
The data comes from the data subject, through the forms on the Site, the purchase process or direct communication by email. No data is collected from third parties and no profiles are built from external sources.
Data may be disclosed to the following recipients, always in order to provide the service:
International transfers: some technology providers may process data outside the European Economic Area. In those cases the transfer relies on an adequacy decision of the European Commission or on Standard Contractual Clauses, with any additional safeguards that apply. The detail by provider is set out in the Cookie Policy.
You may at any time exercise the rights of access, rectification, erasure, objection, restriction and portability, and withdraw any consent given without retroactive effect.
Write to privacy@vitall.es stating the right you wish to exercise and attaching a copy of an identity document. The request will be answered within a maximum of one month.
If you consider that your rights have not been respected, you may complain to the Spanish Data Protection Agency (aepd.es), C/ Jorge Juan 6, 28001 Madrid.
Appropriate technical and organisational measures are applied to ensure a level of security appropriate to the risk, in accordance with art. 32 GDPR: encryption in transit (HTTPS), access control, activity logging and regular backups.
The Site is not aimed at children under 14. Data on minors is not knowingly collected without the consent of those holding parental authority or guardianship.
