Privacy policy
Data controller
The Data Controller is BIOVITALAGE S.R.L., with registered office at km 3 SP per Casamassima, 70010 Valenzano (BA), Italy — VAT / fiscal code 09052920726. To exercise your GDPR rights write to biovitalage@gmail.com or to the certified email biovitalage@pec.it.
Data Protection Officer (DPO)
A DPO has not been appointed at this time, as the organisation does not fall within the scope of Art. 37 GDPR. Update this section if the appointment becomes mandatory or is made on a voluntary basis.
Data we collect
Contact form: name, email, organisation (optional), free-text message. Technical browsing data: IP address (limited to security and rate-limiting), user-agent, pages visited — collected in aggregate via Vercel Analytics only with consent. Application errors monitored via Sentry (when enabled), without personally identifying information.
Purposes of processing
Your data is processed to: (a) respond to enquiries sent via the contact form and to perform pre-contractual measures; (b) measure site usage in aggregate, anonymised form to improve content and usability; (c) ensure service security, prevent abuse and diagnose application errors.
Legal basis
Contact form: performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR). Analytics and non-essential cookies: free, informed and revocable consent (Art. 6(1)(a) GDPR). Security, abuse prevention, error diagnostics: legitimate interest of the Controller (Art. 6(1)(f) GDPR).
Data recipients
Data is processed by the Controller and by the following external processors: Vercel Inc. (hosting + analytics — US-based, data may also reside in the EU); Sentry Inc. (error tracking, only when enabled — EU region when configured); Google LLC (font delivery via next/font, IPs may be logged by Google servers). Contact form data is NOT shared with third parties for commercial purposes.
Transfers outside the EU
Some processors (Vercel, Sentry, Google) may process data in the United States. Such transfers take place on the basis of the Standard Contractual Clauses approved by the European Commission (implementing decision 2021/914) and additional technical safeguards such as TLS encryption in transit and at rest.
Retention period
Contact form submissions: for the time strictly required to handle the enquiry and up to 12 months after closure, unless longer legal obligations apply. Aggregated analytics data: maximum 6 months. Application logs and technical errors: 30 days. Technical cookies: session duration or as specified in the cookie policy.
Your rights
As a data subject you have the right to: access your data (Art. 15); have it rectified (Art. 16); request its deletion (Art. 17); restrict processing (Art. 18); obtain its portability (Art. 20); object to processing (Art. 21); withdraw consent at any time (Art. 7(3)). To exercise these rights, write to biovitalage@gmail.com — we will respond within 30 days.
Complaint to a supervisory authority
You always have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the competent supervisory authority of the EU member state where you reside, work, or where the alleged infringement occurred.
Changes to this policy
This policy may be updated to reflect regulatory or organisational changes. Substantial changes will be flagged via a banner on the site pages. The current version is always available on this page, with the date of the last update indicated.
Last updated: 19 May 2026