Privacy Policy

Data controller responsible for your personal data:

vitaeco.world
Stephansplatz 8A, 1010 Vienna, Austria
Email: hello@vitaeco.world

We may collect the following categories of personal data:

• Identity data: name
• Contact data: email address
• Technical data: IP address, browser type, device information
• Usage data: how you interact with our website
• Communication data: messages you send us via contact or order forms

We process your personal data for the following purposes:

• To process and respond to your orders and inquiries
• To provide customer support
• To improve our website and services
• To comply with legal obligations
• To send marketing communications (only with your consent)

Under GDPR, we process your data based on:

• Contract performance: processing orders and fulfilling our agreement with you
• Legitimate interests: improving our services, ensuring website security
• Consent: marketing communications, non-essential cookies
• Legal obligation: compliance with tax, accounting and other legal requirements

We retain your personal data only for as long as necessary:

• Order and contact data: up to 7 years for legal and accounting purposes
• Marketing consent data: until you withdraw consent
• Technical and usage data: up to 24 months
• Cookie data: as specified in our Cookie Policy

You have the following rights regarding your personal data:

• Right of access: request a copy of your personal data
• Right to rectification: request correction of inaccurate data
• Right to erasure: request deletion of your data in certain circumstances
• Right to restrict processing: request limitation of processing
• Right to data portability: receive your data in a structured format
• Right to object: object to processing based on legitimate interests
• Right to withdraw consent: withdraw consent at any time where processing is based on consent
• Right to lodge a complaint: file a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde) or your local supervisory authority

To exercise these rights, contact us at the email address above.

We implement appropriate technical and organisational measures to protect your personal data, including encryption (HTTPS), access controls, and secure storage. We do not sell or rent your personal data to third parties.

Your data is processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure adequate safeguards are in place as required by GDPR.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page and updating the "Last updated" date.