At Vitall Bienestar, S.L. -hereinafter "Vitall", "we" or "our"- we are committed to protecting the privacy and security of the personal data provided by our users, customers and business partners.

This Privacy Policy explains how we collect, use, store and protect personal data when you interact with us through our website, online store, mobile applications, customer service channels, digital marketplaces or any other online or offline sales or communication platform operated by Vitall or on its behalf.

Who is responsible for processing your personal data?

Company name: Vitall Bienestar, S.L.
Tax Identification Number (CIF): ES-B10793826
Registered office: Carretera de Jaén 52, 02006, Albacete, Spain
Email: privacy@vitall.es
Telephone: +34 967 740 125

Vitall acts as the controller of all personal data collected through its commercial, informational and digital channels.

This Privacy Policy is governed by:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, General Data Protection Regulation -GDPR-.
• Organic Law 3/2018 of 5 December on the Protection of Personal Data and the guarantee of digital rights -LOPDGDD-.
• Any other European or Spanish regulations applicable to data protection.

Depending on how you interact with Vitall and, where applicable, based on your consent or another legitimate legal basis, we may collect the following categories of personal data:

• First name and surname.
• Billing and shipping address.
• Email address.
• Telephone number.
• Account login details, where applicable.
• Any information voluntarily provided through forms, emails or customer service channels.

Payment-related data is processed securely through authorised payment service providers and in accordance with applicable regulations. Vitall does not store complete payment card details.

When you interact with our platforms or make a purchase, certain information is generated automatically as part of the normal technical operation of online services. This information is used exclusively for operational, security and improvement purposes, and does not involve unnecessary monitoring of users.

This information may include:

• Basic technical data necessary for secure access and service provision.
• General information about the device and browser used.
• Approximate location data -not precise geolocation-, used only for operational purposes, such as taxation, language selection or delivery estimation.
• Anonymous or aggregated usage data.
• Technical identifiers necessary to maintain active sessions and ensure continuity during browsing or purchasing processes.

For more information on the use of cookies and similar technologies, please consult our Cookies Policy.

When you place an order or contact us in relation to a purchase, we process the information necessary to manage the transaction and provide customer service. This may include:

• Order and purchase records.
• Billing information required by law.
• Order delivery status and logistics updates.
• Information related to returns, refunds or customer service requests.

All such data is processed strictly for contractual, operational and legal purposes, and always in accordance with applicable data protection regulations.

Your personal data may be processed for the following purposes:

Where processing is based on legitimate interest, Vitall will have carried out the corresponding balancing assessments to ensure that such processing does not override the fundamental rights and freedoms of users.

Where processing is based on consent, users may withdraw it at any time.

Personal data will be retained only for as long as necessary for the purposes for which it was collected:

• Active user accounts: for as long as the account remains active.
• Transactional and billing data: a minimum of 5 years, in accordance with tax and accounting obligations.
• Customer service communications: for as long as necessary to manage and resolve requests.
• Marketing data: until consent is withdrawn.
• Incomplete or failed transactions: retained for a limited period, for example 30 days, and subsequently anonymised or deleted.

Vitall may share personal data with trusted third parties that are strictly necessary to provide its services, including:

Authorised financial institutions and payment processors for the secure processing of transactions.

Transport companies for the preparation, management and delivery of orders.

Hosting services, cloud platforms, security services, analytics providers and communication tools.

When Vitall products are sold through third-party marketplaces or platforms, personal data may be shared to the extent necessary to process orders, comply with legal obligations and provide customer service.

All third parties will process the data in accordance with appropriate data processing agreements and in compliance with applicable data protection regulations.

If personal data is transferred outside the European Economic Area -EEA-, Vitall ensures the application of appropriate safeguards, such as adequacy decisions, standard contractual clauses or equivalent legal mechanisms.

In accordance with data protection regulations, users have the right to:

• Access their personal data.
• Rectify inaccurate or incomplete data.
• Request the erasure of data -"right to be forgotten"-.
• Request the restriction of processing.
• Request data portability.
• Object to processing.
• Withdraw consent at any time.

Requests may be sent by email to privacy@vitall.es.

All commercial communications sent by Vitall include a clear and accessible mechanism to unsubscribe or object to future communications.

Users also have the right to lodge a complaint with the Spanish Data Protection Agency -AEPD-.

Vitall applies appropriate technical and organisational security measures to protect personal data, including:

• Encrypted data transmission -SSL/TLS-.
• Secure access controls and authentication mechanisms.
• Restricted access to personal data.
• Regular security updates and monitoring.

Despite these measures, no system can guarantee absolute security.

Vitall reserves the right to update this Privacy Policy at any time to reflect legal, technical or operational changes. Any update will be published on the relevant platforms and, where appropriate, notified to users.