+420 495 00 88 08
Privacy policy background

Privacy Policy

Your privacy is fundamental to our mission of providing premium health and wellness solutions

Last updated: December 15, 2024

Our Commitment to Privacy

At VitalCore Czech, we understand that your personal information is valuable and deserves the highest level of protection. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with our health and wellness products.

We are committed to transparency in our data practices and compliance with applicable privacy laws, including the General Data Protection Regulation (GDPR) and Czech data protection regulations. This policy applies to all users of our website and services, regardless of location.

Information We Collect

1 Personal Information

2 Technical Information

  • Usage Data: Pages visited, time spent on site, click patterns, referral sources
  • Cookies and Tracking: Session cookies, persistent cookies, local storage data

How We Collect Information

We collect information directly from you when you create an account, make a purchase, subscribe to our newsletter, contact us, or use our services. We also collect information automatically through cookies and similar technologies when you visit our website.

How We Use Your Information

Service Provision

  • • Process orders and transactions
  • • Provide customer support
  • • Deliver products and services
  • • Manage your account

Personalization

  • • Customize product recommendations
  • • Tailor health and wellness content
  • • Improve user experience
  • • Develop targeted offerings

Communication

  • • Send order confirmations
  • • Provide important updates
  • • Share wellness tips and advice
  • • Respond to inquiries

! Marketing and Promotions

With your consent, we may use your information to send promotional materials about new products, special offers, health tips, and other marketing communications that may be of interest to you. You can opt-out of these communications at any time.

i Legal and Security

We may use your information to comply with legal obligations, protect our rights and property, prevent fraud and abuse, ensure website security, and resolve disputes. We may also use aggregated, anonymized data for research and analytics.

Data Sharing and Disclosure

We Do Not Sell Your Personal Data

VitalCore Czech does not sell, rent, or trade your personal information to third parties for their marketing purposes. We believe your privacy is too important to compromise.

Service Providers

We work with trusted third-party service providers who help us operate our business:

  • • Payment processors for secure transactions
  • • Shipping companies for order delivery
  • • Email service providers for communications
  • • Cloud storage providers for data hosting
  • • Analytics providers for website improvement

Legal Requirements

We may disclose your information when required by law or to:

  • • Comply with legal processes or government requests
  • • Protect our rights and property
  • • Prevent fraud or illegal activities
  • • Ensure user safety and security
  • • Resolve disputes and enforce agreements

Data Processing Agreements

All third-party service providers are bound by strict data processing agreements that require them to protect your information and use it only for the specific purposes we authorize. We regularly audit these relationships to ensure continued compliance with our privacy standards.

Your Rights and Choices

A Access and Portability

You have the right to access the personal information we hold about you and receive a copy of your data in a portable format.

  • • Request a copy of your personal data
  • • Receive data in a structured, machine-readable format
  • • Understand how your data is being used

R Rectification and Correction

You can request that we correct or update any inaccurate or incomplete personal information.

  • • Update contact information
  • • Correct account details
  • • Modify health preferences

E Erasure (Right to be Forgotten)

You can request that we delete your personal information, subject to certain legal limitations.

  • • Delete your account
  • • Remove specific data points
  • • Request data deletion upon account closure

O Objection and Restriction

You can object to certain processing activities or request that we restrict how we use your data.

  • • Opt-out of marketing communications
  • • Restrict certain types of data processing
  • • Withdraw consent where applicable

C Communication Preferences

You have full control over how we communicate with you.

  • • Unsubscribe from newsletters
  • • Manage email preferences
  • • Opt-out of promotional messages
  • • Control notification settings

C Complaints and Appeals

If you believe your privacy rights have been violated, you can file a complaint.

  • • Contact our Data Protection Officer
  • • File with supervisory authorities
  • • Seek judicial remedies

How to Exercise Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days and may require verification of your identity to protect your privacy.

Note: Some requests may be subject to legal obligations or legitimate business interests that require us to retain certain information.

Data Security Measures

Technical Safeguards

  • • SSL/TLS encryption for data transmission
  • • AES-256 encryption for data at rest
  • • Secure password hashing (bcrypt)
  • • Regular security audits and penetration testing
  • • Firewalls and intrusion detection systems

Access Controls

  • • Role-based access controls (RBAC)
  • • Multi-factor authentication for admin access
  • • Regular access reviews and updates
  • • Principle of least privilege
  • • Audit logs for all data access

Organizational Measures

  • • Employee privacy training programs
  • • Data protection impact assessments
  • • Incident response procedures
  • • Regular security policy reviews
  • • Vendor security assessments

Our Security Commitment

We implement a comprehensive security framework that includes industry-standard encryption, secure development practices, regular security testing, and continuous monitoring of our systems. Our security measures are regularly updated to address emerging threats and vulnerabilities.

Data Breach Notification: In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant authorities within 72 hours as required by law.

Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files that are stored on your device when you visit our website. They help us provide you with a better experience by remembering your preferences and analyzing how you use our site.

Types of Cookies We Use

  • Essential Cookies: Required for basic website functionality
  • Performance Cookies: Help us analyze site usage and performance
  • Functional Cookies: Remember your preferences and settings
  • Marketing Cookies: Used to deliver relevant advertisements

Cookie Purposes

  • Keep you logged in to your account
  • Understand how visitors interact with our site
  • Personalize content and recommendations

Managing Your Cookie Preferences

You have control over how cookies are used on your device. You can manage your preferences through:

Browser Settings

Most browsers allow you to control cookies through their settings preferences. You can set your browser to refuse cookies, or to alert you when cookies are being sent.

Our Cookie Preferences

You can also manage your cookie preferences directly on our website through our cookie consent banner or privacy settings page.

Third-Party Cookies

Some cookies are placed by third-party services that appear on our pages. We use analytics services provided by Google Analytics, which uses cookies to track visitor usage. We may also use social media buttons and/or plugins on this site that connect you to various social media platforms.

Note: Disabling cookies may affect the functionality of our website and your user experience.

International Data Transfers

Global Operations

VitalCore Czech operates globally and may transfer your personal information to countries outside your residence for processing, storage, and analysis. These transfers are conducted in accordance with applicable data protection laws.

Safeguards for International Transfers

  • • Adequacy decisions by the European Commission
  • • Standard Contractual Clauses (SCCs) approved by regulatory authorities
  • • Binding Corporate Rules for intra-group transfers
  • • Certification schemes and codes of conduct

EU Data Protection

For individuals in the European Union, we ensure that all international transfers comply with GDPR requirements and provide adequate protection for your personal data.

  • • Transfer impact assessments
  • • Supplementary measures where needed
  • • Regular review of transfer mechanisms

Czech Republic Compliance

As a company based in the Czech Republic, we comply with local data protection regulations and work closely with the Czech Data Protection Office to ensure best practices.

  • • Registration with Czech authorities
  • • Local data protection officer
  • • Regular compliance audits

Contact Us

Data Protection Officer

If you have questions about this Privacy Policy or our data practices, please contact our Data Protection Officer using the information below.

Address

VitalCore Czech
Velké náměstí 40
500 03 Hradec Králové
Czech Republic

Business Hours

Monday - Friday: 9:00 - 17:00
Czech Republic Time

Filing a Complaint

If you believe your privacy rights have been violated, you have the right to file a complaint with supervisory authorities.

Czech Data Protection Office

Website: www.uoou.cz

Address: Pplk. Sochora 727/27, 170 00 Praha 7

Phone: +420 234 665 111

Email: [email protected]

European Data Protection Board

Website: edpb.europa.eu

If you are located outside the Czech Republic, you may also file a complaint with your local data protection authority.

Policy Updates and Changes

Our Commitment to Transparency

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this policy.

How We Notify You of Changes

  • • Email notification to registered users
  • • Prominent notice on our website
  • • Updates to our mobile application
  • • Notification through other appropriate channels

Types of Changes

  • • New data collection practices
  • • Changes in data sharing arrangements
  • • Updates to user rights and choices
  • • Security measure enhancements
  • • Legal compliance updates
  • • Technology and service improvements

Your Options

  • • Review updated policy details
  • • Adjust your privacy preferences
  • • Contact us with questions or concerns
  • • Exercise your data rights if needed
  • • Close your account if you disagree
  • • Continue using our services

Effective Date

This Privacy Policy is effective as of the date stated above and will remain in effect except with respect to any changes in its provisions in the future, which will be in effect immediately after being posted on this page. We reserve the right to update or change our Privacy Policy at any time, and you should check this Privacy Policy periodically.

Related Policies and Information

Your Privacy Matters

We are committed to protecting your personal information and being transparent about our data practices. If you have any questions or concerns, please don't hesitate to reach out to our team.