Privacy
Privacy policy
Information on the processing of personal data under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), for website visitors, people who send a request and customers and suppliers of VitaSan Labs. Last updated: 27 October 2026.
Data controller
VitaSan Labs, Via San Michele Arcangelo 30, 95056 Sant'Agata li Battiati (CT), Italy, VAT IT06246720871. For any privacy matter: info@vitasanlabs.com, certified email vitasanlabs@pec.it, phone +39 095 7211344.
Data we process
- Data sent through the website forms: first name, last name, company or institution, email, phone, text of the request, product list and attached files.
- Data you send us by email or phone, and data of customer and supplier contacts needed for quotes, orders, deliveries and invoicing.
- Browsing data: IP address, browser and device type, pages requested, date and time, collected automatically by the systems hosting the website to run and protect it.
- Statistics on website use (page views, clicks, scrolling, in pseudonymous form), only if you give consent in the banner.
We do not ask for special categories of data, for example health data: please do not include them in your requests.
Purposes and legal bases
- Answering requests and preparing quotes: pre-contractual measures (Art. 6.1.b GDPR).
- Managing orders, deliveries, invoicing, support and complaints: performance of the contract (Art. 6.1.b).
- Complying with tax, accounting and legal obligations: legal obligation (Art. 6.1.c).
- Protecting the website, preventing abuse and spam and defending our rights: legitimate interest (Art. 6.1.f).
- Sending customers information on products and services similar to those already purchased: legitimate interest (Art. 6.1.f GDPR and Art. 130(4) of Italian Legislative Decree 196/2003). You can object at any time, also by replying to one of our emails.
- Website statistics with Microsoft Clarity: consent (Art. 6.1.a), which you can withdraw at any time.
Providing data
Providing data is optional, but without the data requested in the forms we cannot answer or prepare a quote. We do not use automated decision-making or profiling.
Who receives the data
Data are processed by VitaSan Labs and its authorised staff, including area agents for customers in their territory. We share them only with those we need for the purposes above:
- IT service providers acting as processors: website hosting, security and form delivery (Netlify, Cloudflare), catalogue database (Supabase), statistics (Microsoft Clarity), email and management of business contacts;
- suppliers, couriers and forwarders, to fulfil and deliver orders;
- banks, tax and legal advisers;
- public authorities, where required by law.
We do not sell or transfer data to third parties for marketing purposes.
Transfers outside the European Union
Some service providers are based in the United States or may process data outside the European Economic Area. In these cases transfers are based on the European Commission adequacy decision for companies certified under the EU-US Data Privacy Framework or on the standard contractual clauses approved by the Commission (Arts. 45 and 46 GDPR).
How long we keep data
- Requests and quotes that do not become orders: 24 months from the last contact.
- Orders, contracts, invoices and accounting records: 10 years, as required by Article 2220 of the Italian Civil Code.
- Data for business information sent to customers: until you object.
- Browsing and security data: for the technical periods of the hosting systems, usually a few days or weeks.
- Microsoft Clarity statistics: up to 13 months.
Your rights
You can ask at any time for access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest (Arts. 15-22 GDPR). You can withdraw consent to statistics from the Cookies link at the bottom of every page, without affecting processing already carried out.
Write to info@vitasanlabs.com or vitasanlabs@pec.it: we reply within one month. You can also lodge a complaint with the Italian data protection authority, Garante per la protezione dei dati personali (www.garanteprivacy.it).
Cookies and similar tools
- Technical, always active because the website needs them: the quote request list, the sector choice and the cookie choice are stored in your browser and are not sent to us.
- Microsoft Clarity statistics cookies (for example _clck and _clsk), set only after you click Accept: they show us in aggregate, pseudonymous form how the website is used, so we can improve it. Microsoft processes them under its own privacy statement (privacy.microsoft.com).
- Map on the Contact page: Google Maps loads only if you click on the map; from then on Google may use its own cookies under its privacy policy (policies.google.com).
We do not use profiling or advertising cookies. You can change your choice at any time from the Cookies link at the bottom of every page, or delete cookies in your browser settings.
Changes
We may update this policy: the version in force is always on this page, with the date of the last update.
