Privacy policy

Data controller

VitBit, S.A. (in formation). Contact for any privacy matter: [email protected]. The company is being incorporated: its tax and registry details will be published here as soon as it is registered.

What data we process

This site has no forms, creates no user accounts and uses no analytics or advertising tools.

If you contact us by WhatsApp or email, we will process the data you provide: name, phone number or email, company and the content of your message.

For security reasons, the server logs technical data for each visit (IP address, date and time, requested page and browser).

Purposes and legal basis

Answering your enquiry and, if you ask, preparing a proposal: steps taken at your request prior to entering into a contract (art. 6.1.b GDPR) and our legitimate interest in replying to those who contact us (art. 6.1.f GDPR).

Server logs: legitimate interest in protecting the site against attacks and keeping it running (art. 6.1.f GDPR).

We do not make automated decisions or create profiles.

How long we keep data

Contact data: as long as needed to deal with your enquiry. If no business relationship follows, we delete it within 12 months at the latest. If one does, it is kept for the duration of the relationship and any applicable legal periods.

Server logs: 30 days, unless needed to investigate a security incident.

Recipients and processors

We do not share your data with third parties unless required by law.

The following providers act as data processors to deliver the service: the server hosting provider (European Union), Cloudflare (content delivery and site protection) and our email provider.

If you choose WhatsApp, the communication takes place through WhatsApp Ireland Ltd. (Meta group), which processes data under its own terms and privacy policy.

International transfers

Some of these providers (Cloudflare, Meta) may process data outside the European Economic Area. In those cases, transfers rely on the EU-US Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to [email protected]. We will reply within one month at the latest.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

We apply technical and organisational measures appropriate to the risk: encrypted connections (HTTPS), restricted access to systems, updates and backups, and control over the changes published on the site.

Changes to this policy

If we change this policy, we will publish the new version here with its update date.