Privacy Policy
This notice explains how personal data is processed when you contact us through this website. It is written for business (B2B) research inquiries.
1. Controller
The controller responsible for processing your data is:
[ Legal entity name and registered address — see Imprint ]
Email: hello@vitalitypens.com
2. What we collect
When you submit the inquiry form, we process the data you provide:
- Name (required)
- Work email (required)
- Company / laboratory (optional)
- Request type (optional)
- Your message (required)
- Your confirmation that the inquiry is for in-vitro research use only
Our hosting provider may additionally process technical connection data (such as your IP address, user agent, and request time) in server logs for security and to deliver the site. We do not use cookies, advertising trackers, or third-party analytics, and fonts are served from this domain (no third-party font CDN).
3. Purposes and legal bases
We use the form data solely to receive and respond to your inquiry and to take steps at your request prior to any business relationship. The legal bases are Article 6(1)(b) GDPR (steps prior to a contract) and Article 6(1)(f) GDPR (our legitimate interest in answering business inquiries). Technical log data is processed under Article 6(1)(f) GDPR for security and reliable operation.
4. Recipients and processors
We share data only with service providers acting as processors on our behalf:
- Form delivery: Formspree, Inc. (United States) transmits the form submission to our inbox. Transfers to the US are safeguarded by the EU Standard Contractual Clauses and/or the EU–US Data Privacy Framework. [ confirm and link Formspree's DPA ]
- Email: [ your email/mailbox provider ], which receives and stores the inquiry email.
- Hosting: [ your static host, e.g. Netlify / Cloudflare Pages / Vercel ], which serves the site and keeps technical logs.
If you email us directly instead of using the form, only your email provider and ours are involved.
5. International transfers
Where a processor is located outside the EU/EEA (e.g. Formspree in the US), transfers are made on the basis of appropriate safeguards under Chapter V GDPR (Standard Contractual Clauses and/or an adequacy mechanism such as the EU–US Data Privacy Framework).
6. Retention
We keep inquiry correspondence for as long as needed to handle your request and for a reasonable follow-up period of [ e.g. 24 months ], unless a longer period is required by law or to establish, exercise, or defend legal claims. We then delete or anonymise it.
7. Your rights
Under the GDPR you have the right to:
- access your personal data and request a copy;
- rectification of inaccurate data;
- erasure ("right to be forgotten");
- restriction of processing;
- data portability;
- object to processing based on legitimate interests; and
- lodge a complaint with a supervisory authority — in particular in the EU member state of your residence, place of work, or the place of the alleged infringement.
To exercise any of these, email hello@vitalitypens.com.
8. Changes
We may update this policy as our processing or providers change. The current version is dated below.