1. Who we are
I.D. Francesca Atelier SRL (trade name VitalMarket), CUI RO39363559, Trade Register no. J40/10333/2020, registered office at Str. Valea Cascadelor nr. 21T, hala 6-7, sector 6, 061512 București, România, is the data controller for the personal data processed through the website e-vitalmarket.com ("the Site").
You can reach us on any privacy matter through the contact form on the Site, by e-mail at office@e-vitalmarket.com, by telephone at +40 726 000 008, by WhatsApp at the same number, or by letter to Str. Valea Cascadelor nr. 21T, hala 6-7, sector 6, 061512 București, România. We have not appointed a data protection officer; requests are handled by the company itself.
2. What data we process
Contact and quote requests. When you use the contact form or the assistant's contact form, we process the data you enter: name, email address, phone number, company (optional), the product you are interested in and your message. An email address or a phone number is required so that we can reply.
Assistant conversations. The messages you send to the VitalMarket Assistant, its answers, the page you were on and a random session identifier kept in your browser for the duration of the visit. Do not enter health data or other sensitive data in the assistant; it is not designed for that.
Technical and security data. An irreversible hash of your IP address, used only to limit abuse of the forms and of the assistant, and the record of your cookie choice.
Measurement data. Only with your consent: anonymous usage statistics (pages visited, device type, approximate location) collected through Google Analytics 4 and, if enabled, advertising measurement through Google Ads and Meta. See the Cookie Policy.
We do not create user accounts, we do not process payments and we do not sell online through the Site.
3. Why we process it and on what legal basis
- To answer your requests and prepare quotes: steps taken at your request before entering into a contract (art. 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (art. 6(1)(f) GDPR).
- To operate the assistant and improve its knowledge base: our legitimate interest in providing accurate product information (art. 6(1)(f) GDPR). Conversations are reviewed only to fill gaps in the documentation.
- To keep the Site secure and prevent abuse: legitimate interest (art. 6(1)(f) GDPR).
- To measure audience and advertising: your consent (art. 6(1)(a) GDPR), which you can withdraw at any time from "Cookie settings" in the footer.
- To comply with legal obligations, such as accounting rules or requests from authorities (art. 6(1)(c) GDPR).
4. Who receives the data
We use processors that act on our instructions under data processing agreements:
- Cloudflare, Inc.: hosting, content delivery, the database in which requests and assistant logs are stored, and the AI model that formulates the assistant's answers (Workers AI). Cloudflare operates a global network; its transfers of EU data are covered by the EU-US Data Privacy Framework and by standard contractual clauses.
- Google Ireland Ltd.: Google Tag Manager, Google Analytics 4 and Google Ads, only if you accept analytics or marketing cookies.
- Meta Platforms Ireland Ltd.: Meta Pixel, only if you accept marketing cookies.
- WhatsApp (Meta): only if you choose to contact us through the WhatsApp link; WhatsApp's own terms apply.
We disclose data to public authorities only when the law requires it. We never sell personal data.
5. How long we keep it
- Contact and quote requests: 24 months from the last exchange, or longer if a contract or a legal obligation requires it.
- Assistant conversations: 12 months.
- Cookie choice: 12 months, stored in your browser.
- Hashed IP addresses used for rate limiting: a few days.
- Analytics data: for the retention period set in Google Analytics (14 months) and under Google's and Meta's own policies.
6. Your rights
You have the right to access your data, to have it rectified or erased, to restrict or object to its processing, to data portability and to withdraw consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Send your request through the contact form on the Site, by e-mail at office@e-vitalmarket.com, by telephone at +40 726 000 008, by WhatsApp at the same number, or by letter to Str. Valea Cascadelor nr. 21T, hala 6-7, sector 6, 061512 București, România; we reply within 30 days. You may also lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, sector 1, București, anspdcp.ro.
7. Automated decisions and the assistant
We do not take decisions with legal or similarly significant effects based solely on automated processing. The assistant is an automated tool that answers from our product documentation; its answers may contain errors, are not medical advice and do not replace a consultation with qualified medical staff.
8. Minors
The Site is addressed to professionals and adults. We do not knowingly collect data from persons under 16. If you believe a minor has sent us data, contact us and we will delete it.
9. Security
Data is transmitted over HTTPS and stored on Cloudflare infrastructure, with access restricted to the company. The forms and the assistant are protected by request limits and bot filtering.
10. Changes
We update this policy when the Site or the law changes. The date at the top shows the current version. Material changes will be announced on the Site.