Privacy policy

Controller

Vitamunda Deutschland B.V., Kerkplein 9-G, 3764 AW Soest, Netherlands · info@vitamunda.de.

Website, account and orders

We process technical access data, account data, contact and delivery details, order items, prices, payment/order status and consent evidence where required to operate the website, fulfil contracts, comply with legal duties and protect our services.

Supabase and hosting

Database, authentication and portal functions are provided through Supabase in a European project region. Website and media files are delivered through our hosting provider.

Referral links

If you use a personal recommendation link, the referral code may be associated with the visit and a later order in order to show the applicable customer benefit and attribute the recommendation.

Turnstile

Cloudflare Turnstile protects public forms and checkout against automated abuse and processes technical browser/network signals for this purpose.

VitamundAI

Messages sent to VitamundAI are processed through Cloudflare Workers AI together with approved public Vitamunda product context. We do not use the chat as a medical record. Please do not enter diagnoses, medication lists or other sensitive health data. A hashed technical fingerprint may be stored temporarily for rate limiting.

Local storage

Language, theme, cart and authentication session may be stored locally where technically necessary or initiated by you. Non-essential device storage is used only where the required consent exists.

Email and marketing

Transactional emails are used for orders, accounts and service. Marketing messages are sent only with consent or another legal permission.

Rights

Subject to applicable law, you may request access, rectification, erasure, restriction, portability and object to processing, and may withdraw consent at any time. You may also lodge a complaint with a competent supervisory authority.

Retention and transfers

Data is retained only for the relevant purpose and statutory retention periods. Where providers process data outside the EEA, appropriate legal safeguards are used.

Last updated: 28 October 2026