1. Controller
Vidafit SARL, 2, rue Scheerbach, L-7625 Larochette, Luxembourg, is responsible for the processing described on this page. You can contact us at info@vidafit.lu or +352 691 746 813.
2. What we process on the public site
When you browse the public site, our hosting and security infrastructure may process technical access data such as your IP address, request date and time, requested URL, referrer, user agent, and related security events. Public pages also load Inter and Poppins from Google Fonts, which means Google may receive your IP address and browser request data when those fonts are fetched. If you actively consent to audience measurement, the public site also loads Google Analytics 4. In that case Google may process page views, referrer information, browser and device data, and pseudonymous identifiers stored in first-party analytics cookies.
If you contact us directly by email or phone, we process the contact details and message content that you provide to answer your request and organize follow-up.
The public site is not intended for the transmission of medical information. Please do not send sensitive health data through general email or website messages unless it is genuinely necessary and you have been asked to do so.
3. Purposes and legal bases
- Operating, securing, and defending the public site: Article 6(1)(f) GDPR (legitimate interests).
- Remembering your language choice and your cookie decision: Article 6(1)(f) GDPR.
- Measuring visits and navigation on the public site with Google Analytics 4, but only where you actively consent: Article 6(1)(a) GDPR.
- Responding to appointment or contact requests that you initiate: Article 6(1)(b) GDPR and, where applicable, Article 6(1)(f) GDPR.
- Meeting legal, accounting, or compliance duties: Article 6(1)(c) GDPR.
4. Cookies and similar technologies
The public site uses strictly necessary technologies and, if you choose to opt in, optional audience-measurement tools.
We may use the following technologies on the public site:
- NEXT_LOCALE to remember your selected language.
- cookie-notice in local storage to remember your cookie choice for up to 12 months.
- Google Analytics 4 only after your active consent. If enabled, Google Analytics may place first-party analytics cookies and collect pseudonymous usage data about visits and navigation on the public site. We configure the tag with advertising and ad-personalization signals disabled.
You can refuse analytics or withdraw your consent at any time from the cookie notice in the footer. If you withdraw consent, future analytics collection stops and we attempt to clear the known Google Analytics cookies that were set for this domain.
5. Recipients
Your data may be processed by service providers who help us operate the site and our communications, in particular our hosting provider Vercel and Google as the provider of Google Fonts and Google Analytics on the public site. These providers process data on our behalf where required.
6. International transfers
Some service providers may process data outside the European Union or European Economic Area. This can include Google Fonts requests, Google Analytics processing, and hosting-related processing. Where that happens, we rely on a lawful transfer mechanism under the GDPR and can provide further information on request.
7. Retention
- Technical access and security data are kept for as long as reasonably necessary for security, troubleshooting, and service continuity.
- Language and cookie preferences are stored for up to 12 months or until you clear them from your browser.
- If you consent to analytics, the Google Analytics cookies or identifiers placed on your device may persist for up to 24 months unless you clear them earlier or withdraw consent.
- Direct inquiries are kept for as long as needed to handle your request and any related legal obligations.
8. Providing data and automated decisions
Processing technical access data is necessary to deliver the site. Providing contact details in direct inquiries is voluntary, but we may not be able to respond without enough information. We do not use Google Analytics on the public site for advertising personalization, cross-site advertising, automated decision-making, or profiling.
9. Your rights
Subject to the applicable conditions, you have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. Where processing is based on consent, you also have the right to withdraw consent at any time with effect for the future.
10. Complaints and contact
If you have questions about this policy or want to exercise your rights, contact us at info@vidafit.lu. You also have the right to lodge a complaint with the Luxembourg supervisory authority, the Commission nationale pour la protection des données (CNPD).