Privacy Notice

1. Who is responsible

The controller responsible for processing personal data on this website (vitamax.website) is:

Vitamax is an independent information website that publishes reviews of dietary supplements. We do not sell any products and do not run a shop.

2. Overview

You can use this website without registering or creating an account. We only process personal data as far as needed to run the website, analyse how it is used, make the partner links work or answer your messages. Below we explain what data this is, the legal basis on which it is processed (EU and UK GDPR, where they apply) and what rights you have.

3. Hosting and server logs

This website is hosted by Hostinger International Ltd. (Cyprus) and delivered through Hostinger's content delivery network. Each time a page is requested, the server automatically stores technical data in log files:

• IP address of the device
• date and time of access
• page or file requested and amount of data transferred
• referrer URL (the page visited just before)
• browser type, operating system and device type

This data is needed to deliver the website and keep it secure (for example against attacks). The legal basis is our legitimate interest in a secure and stable service (Art. 6(1)(f) GDPR). Log files are deleted automatically according to the host's retention periods. Hostinger processes this data on our behalf (Art. 28 GDPR).

4. Fonts and code libraries

The newer pages of this website load their fonts directly from our own server; no data is passed to third parties. Some older pages still load fonts from Google Fonts (Google Ireland Limited, Ireland), in which case your IP address is sent to Google.

For animations and scrolling we use JavaScript libraries (GSAP, Lenis) loaded from public content delivery networks: cdnjs (Cloudflare, Inc., USA), unpkg and jsDelivr. Because your browser fetches these files directly from those providers, your IP address is sent to them. The legal basis is our legitimate interest in displaying the website quickly and reliably (Art. 6(1)(f) GDPR).

5. Analytics with Microsoft Clarity

We use Microsoft Clarity, a service of Microsoft Ireland Operations Limited (Ireland), to understand how visitors use our pages and to improve them. Clarity records mouse movements, clicks, scrolling and the pages visited, among other things, and turns them into heatmaps and anonymised session recordings. Text typed into form fields is masked by default.

Clarity uses cookies for this (for example _clck, valid for up to one year, and _clsk, valid for one day) to recognise returning visits and pages viewed in the same visit. Your IP address, device data and browser information are also processed. Data may be transferred to Microsoft Corporation in the USA; Microsoft is certified under the EU-US Data Privacy Framework and its UK Extension.

The legal basis is our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). You can object at any time by blocking or deleting cookies in your browser or by using a tracking blocker. More information: Microsoft privacy statement.

6. Partner (affiliate) links

This website is funded by affiliate commissions. The links to manufacturers' websites are partner links: if you click one and buy something, we receive a commission. The price you pay stays the same.

When you click a partner link, you are redirected to the seller's website through a tracking link of an affiliate network. This lets the network know the click came from our website, so that a later order can be credited to us. Depending on the product, we work with different affiliate networks, for example SmartAdv, ClickBank, Digistore24, BuyGoods or GuruMedia.

The order and payment are not handled by the network that created the link but by the seller's sales or payment platform (for example Digistore24 or BuyGoods), which you will see on the order page. These sellers and platforms are responsible for the data processing on their own pages, and their privacy policies apply. What information a platform passes to us as a partner for commission purposes depends on its own terms; we use it only for that purpose.

Passing on campaign parameters

If you reach our website through a link with campaign parameters (for example utm_source, utm_campaign or click IDs such as gclid), a small script stores these parameters for up to 30 days in your browser's local storage (localStorage, key cnl_params) and adds them to the partner links. This allows a purchase to be credited to the right campaign. The script does not collect names, email addresses or any other information about you, and it is loaded from jsDelivr. If the address contains no campaign parameters, nothing is stored. The legal basis is our legitimate interest in correct commission tracking (Art. 6(1)(f) GDPR). You can delete this data at any time by clearing the site data in your browser.

7. Contact by email or contact form

If you write to us by email or through the contact form, we process the details you give us (email address, your name if provided, your message) only to answer your enquiry. The form uses no cookies and no analytics. Your message is sent by email to our mailbox at Hostinger and is not stored in a database.

The legal basis is your enquiry itself or our legitimate interest in answering it (Art. 6(1)(b) and (f) GDPR). We delete your message once the enquiry has been dealt with, unless we are legally required to keep it.

8. International transfers

The controller is based in Brazil, so messages you send us are handled in Brazil. Using Microsoft Clarity and the content delivery networks mentioned above may also involve transfers to the USA; the providers rely on the EU-US Data Privacy Framework (and its UK Extension) or on the European Commission's standard contractual clauses.

9. Your rights

Where the GDPR applies, you have the right at any time to:

• access the data we hold about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17) or its processing restricted (Art. 18)
• data portability (Art. 20)
• object to processing based on our legitimate interest (Art. 21)
• lodge a complaint with a data protection authority, in particular in the country where you live (in Ireland the Data Protection Commission, in the UK the ICO) (Art. 77)

For any request, a simple message to contact@vitamax.website or through the contact form is enough.

10. No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR. You are not required by law or contract to provide personal data, and you can use the website even if you block cookies.

11. Changes

We update this privacy notice when the website or the law changes. The version published on this page is the one that applies.