Privacy Policy

Last updated: October 2026

Private Vitamin d.o.o. (“Private Vitamin”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit www.privatevitamin.com, contact us, request a quotation, subscribe to marketing communications or otherwise interact with us.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection legislation.

1. Data Controller

The controller responsible for the processing of personal data through this website is:

Private Vitamin d.o.o.
[REGISTERED ADDRESS]
Slovenia
Email: [I would use sales@privatevitamin.com or another actively monitored privacy email]

I would not use development@privatevitamin.com unless that mailbox is genuinely monitored for GDPR requests.

2. Personal Data We May Collect

Depending on how you interact with us, we may collect:

Name and surname
Company name
Email address
Telephone number
Billing or delivery address, where applicable
Information provided through inquiry or contact forms
Product requirements and information submitted when requesting a quotation
Newsletter subscription information
Technical information relating to your use of our website, such as IP address, browser type, device information and website activity, where applicable
Cookie and analytics information, subject to your cookie preferences

We aim to collect only personal data that is necessary for the relevant purpose.

3. Why We Process Personal Data

We may process your personal data to:

Respond to inquiries and requests for information
Prepare and provide quotations
Communicate with prospective and existing customers
Process and manage orders and business relationships
Provide customer support
Improve our website, products and services
Analyze website usage and performance
Send marketing communications where permitted by law
Comply with legal, regulatory, accounting and tax obligations
Protect our legitimate business interests and the security of our website and systems

4. Legal Basis for Processing

Depending on the purpose, we process personal data on one or more of the following legal bases:

Contract or pre-contractual measures – where processing is necessary to respond to your request, prepare a quotation, enter into an agreement or perform a contract.

Legal obligation – where processing is required to comply with applicable legal, accounting, tax or regulatory requirements.

Legitimate interests – where processing is necessary for our legitimate business interests, provided those interests do not override your fundamental rights and freedoms.

Consent – where you have given us consent, for example for certain marketing communications or non-essential cookies.

GDPR requires a valid legal basis for processing; consent is only one possible basis and, where relied upon, must be freely given, specific, informed and unambiguous.

5. Marketing Communications

Where required, we will send electronic marketing communications only with your consent.

You may unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. How Long We Keep Your Data

We retain personal data only for as long as necessary for the purpose for which it was collected and to comply with applicable legal, contractual, accounting and regulatory requirements.

Retention periods may therefore vary depending on the type of information and our relationship with you.

When personal data is no longer required, it will be deleted, anonymized or otherwise securely disposed of, subject to applicable legal requirements.

7. Who May Receive Your Data

We may share personal data with trusted service providers where necessary for our business operations, including providers of:

Website hosting and website management
Email and communication services
Customer relationship management systems
Analytics services
Marketing and newsletter services
IT and security services
Accounting, legal and professional services
Logistics and other services necessary to fulfil customer orders

These service providers may process personal data only as permitted by applicable law and according to the relevant contractual arrangements.

We do not sell your personal data.

8. International Data Transfers

Some of our service providers may process personal data outside the European Economic Area (EEA).

Where personal data is transferred internationally, we take appropriate measures as required by applicable data protection law to protect the information.

This may include relying on an adequacy decision or appropriate contractual safeguards.

9. Your Rights

Subject to the conditions provided by applicable law, you may have the right to:

Request access to your personal data
Request correction of inaccurate or incomplete personal data
Request deletion of your personal data
Request restriction of processing
Object to certain processing
Request data portability where applicable
Withdraw consent at any time where processing is based on consent
Lodge a complaint with the competent data protection supervisory authority

These correspond much better to the GDPR rights described by the European Commission than your current shortened section.

To exercise your rights, contact us at:

[privacy email]

We may need to verify your identity before responding to a request.

10. Cookies

Cookies are small files or pieces of information stored on your device when you visit a website.

Our website may use:

Essential cookies
Necessary for the website to function correctly. These do not require consent where they are strictly necessary.

Analytics cookies
Help us understand how visitors use our website and improve its performance.

Functional cookies
Enable additional website functionality and remember certain preferences.

Marketing cookies
May be used to measure advertising performance or provide more relevant advertising.

Non-essential cookies should not be activated before the visitor has given the required consent. The EDPB specifically distinguishes technically necessary cookies from cookies requiring consent.

You can manage your preferences through the cookie settings available on our website and may withdraw consent at any time.

11. Third-Party Services

Our website may use third-party services for functions such as website hosting, analytics, communications, embedded content or marketing.

These providers may process certain information according to their respective privacy practices and our contractual arrangements with them.

Where required, third-party services that use non-essential cookies or similar tracking technologies will be activated only after the appropriate consent has been obtained.

12. Data Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss or destruction.

Access to personal data is limited to persons who require access for legitimate business purposes.

13. Links to Other Websites

Our website may contain links to third-party websites.

Private Vitamin is not responsible for the privacy practices or content of third-party websites. We recommend reviewing their privacy policies before providing personal information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our website, services, legal requirements or data-processing practices.

The current version will be published on this page together with the date of the latest update.

15. Contact

For questions about this Privacy Policy or the processing of your personal data, please contact:

Private Vitamin d.o.o.
Valvasorjeva ulica 40
2000, Maribor Slovenia
Email: sales@privatevitamin.com