Data Protection

Privacy Policy

At Vitalux, discretion, trust and the responsible handling of personal information are fundamental values of our business. Whether you contact us regarding luxury real estate, executive coaching or business consulting, we are committed to protecting your personal data and processing it transparently, securely and in accordance with the General Data Protection Regulation (GDPR) and applicable Spanish data protection legislation.

Data Controller

For our full company details, including our registered office, VAT/CIF number and contact information, please refer to our Imprint.

Personal Data We Collect and Process

Depending on how you interact with us or use our website, we may collect and process personal information such as your name, email address, telephone number, property preferences, enquiry details and any other information you voluntarily provide. Technical information, including your IP address, browser type and device information, may also be processed where necessary to ensure the secure operation of our website.

We collect only the information necessary to respond to your enquiries, provide our services and maintain a professional relationship with you.

How We Process Your Personal Data

Your personal data may be processed for the following purposes:

  • Responding to enquiries and requests

  • Providing our luxury real estate, executive coaching and business consulting services

  • Arranging appointments, property viewings and consultations

  • Maintaining communication with clients and prospective clients

  • Sending newsletters and marketing communications where you have given your consent

  • Improving the security, functionality and performance of our website

  • Complying with applicable legal obligations

We process personal data only where a lawful basis exists under the GDPR.

Legal Basis for Processing

Depending on the circumstances, processing is based on your consent, the performance of a contract or pre-contractual measures, compliance with legal obligations, or our legitimate interests, provided these do not override your fundamental rights and freedoms.

Customer Relationship Management (CRM)

Vitalux operates its own internal Customer Relationship Management (CRM) system to manage enquiries, clients and professional contacts. Information you provide through our website, by email, by telephone or during our business relationship may be securely stored in our CRM to deliver our services, maintain communication and develop long-term client relationships.

Where you have given your consent, newsletters and marketing communications are managed through our own CRM system.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, to maintain our professional relationship, to comply with legal obligations or until a valid request for deletion is received where permitted by law.

Hosting and Data Security

Our website is hosted by Axarnet in Spain. Both our hosting infrastructure and backup systems are located within Spain. Secure SSL/TLS encryption is used to protect data transmitted through our website.
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures include firewall protection, DDoS mitigation and regular backups to help safeguard the confidentiality, integrity and availability of your personal information.

Sharing of Personal Data

We do not sell, rent or trade personal information. Personal data is shared only where necessary to provide our services, comply with legal obligations or where required by law. Any external service providers processing personal data on our behalf are bound by appropriate contractual and confidentiality obligations.

Cookies and Third-Party Services

Our website may use cookies and selected third-party services to ensure its proper operation, security and performance. Where required by law, your consent will be obtained before non-essential cookies are used.

Your Rights

Under the GDPR, you have the right to access, correct or request the deletion of your personal data, restrict or object to certain processing activities, request the portability of your personal data where applicable, withdraw your consent at any time where processing is based on consent, and lodge a complaint with the competent data protection authority.

Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the details provided in our Imprint.