Privacy Policy

1. Introduction

RoVitalis is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website or use our services.

This policy complies with the General Data Protection Regulation (GDPR) and other applicable data protection laws in the European Union and Czech Republic.

2. Information We Collect

2.1 Information You Provide

We collect information that you voluntarily provide when you:

• Fill out contact forms or inquiry forms
• Subscribe to our newsletter or communications
• Contact us via email or phone
• Request product information or consultations

This may include: name, email address, phone number, and any information you include in your messages.

2.2 Automatically Collected Information

When you visit our website, we may automatically collect:

• IP address and general location information
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website addresses

2.3 Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience. For detailed information, please see our Cookie Policy.

3. How We Use Your Information

We use collected information for the following purposes:

• Responding to your inquiries and providing customer support
• Processing and fulfilling requests for information about our products
• Sending promotional materials and newsletters (with your consent)
• Improving our website functionality and user experience
• Analyzing website usage patterns and trends
• Complying with legal obligations
• Protecting against fraud and security threats

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities
• Contractual necessity: To fulfill our obligations related to product inquiries and services
• Legitimate interests: For business operations, website improvement, and fraud prevention
• Legal compliance: To meet regulatory and legal requirements

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service providers: Third-party vendors who assist with website hosting, email services, and analytics
• Legal authorities: When required by law or to protect our legal rights
• Business transfers: In connection with mergers, acquisitions, or asset sales

All third parties are required to maintain appropriate security measures and use your data only for specified purposes.

6. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law.

Typical retention periods:

• Contact form submissions: 2 years from last contact
• Newsletter subscriptions: Until you unsubscribe
• Website analytics data: 26 months

7. Your Rights Under GDPR

As a data subject in the EU, you have the following rights:

• Right to access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your personal data
• Right to restrict processing: Request limitation of data processing
• Right to data portability: Receive your data in a structured format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at [email protected].

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure with encryption
• Regular security assessments and updates
• Access controls and authentication procedures
• Employee training on data protection

However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

Your data is primarily stored and processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

Our website and services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a new "Last updated" date.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

RoVitalis
Československé armády 18
460 01 Liberec, Czechia
Email: [email protected]
Phone: +420 485 327 910

13. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority:

Office for Personal Data Protection (Czech Republic)
Pplk. Sochora 27
170 00 Prague 7
Website: uoou.cz