BioNutrix

Privacy Policy

Data controller: BioNutrix Srl, headquartered at Via C. Hamel 1, 92014 Porto Empedocle (AG), Italy. VAT IT03110550849. Email: bionutrix.supplements@gmail.com.

Data we process

We process the data you provide via contact forms, newsletter subscription, B2B commercial requests and Human line notify. We also process technical browsing data (with your consent, anonymised analytics).

Purposes

  • To respond to your information requests.
  • To send subscription-related emails (double opt-in) and, subject to consent, marketing communications.
  • To manage requests from professionals and resellers.
  • Site improvement (only with consent to analytics cookies).

Legal basis

Consent of the data subject (Art. 6(a) GDPR) and legitimate interest for the technical operation of the site.

B2B Reserved Area — additional processing

The Reserved Area (Area B2B) is dedicated to authorised professional partners.

Data processed: first name, last name, business name, email, phone, VAT number, professional category, city, province, hashed password, IP hash on access, login/download timestamps, notes made by the administrator.

Purposes and legal basis:

  • Account provisioning and management (Art. 6(1)(b) GDPR — contractual necessity / pre-contractual measures).
  • Security of the Reserved Area, prevention of abuse and audit (Art. 6(1)(f) GDPR — legitimate interest).
  • Legal, tax and regulatory compliance (Art. 6(1)(c) GDPR).

Retention: account data are kept as long as the account is active and for a further 24 months after deactivation for security and dispute resolution purposes; access/download logs are kept for a maximum of 12 months; IP addresses are stored as a rotating hash (pseudonymised).

Recipients / technical providers: hosting (Emergent), email delivery (Resend, EU region — Ireland), private object storage (Emergent, EU region). No data are transferred outside the EEA without adequate safeguards.

Documents in the B2B area: reserved documents (certifications, technical sheets, catalogues, price lists, laboratory analyses, etc.) do not contain personal data of the user and are protected by short-lived signed URLs; direct or public access is prevented.

Rights of the data subject: you may at any time exercise the rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection). Requests: bionutrix.supplements@gmail.com.

Cookies: the Reserved Area uses only technical cookies necessary for authentication. No advertising cookies are used.

Rights of the data subject

You may at any time request access, rectification, erasure, restriction or portability of your data, and withdraw consent. Write to bionutrix.supplements@gmail.com.

Retention

We retain data for as long as necessary for the stated purposes and legal obligations.

This policy will be updated by the administrator upon completion of legal review.