Legal · Last updated 12 September 2026
Privacy policy
How Nutriprime S.L. processes the personal data it collects through bodyvibe.es, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). It is presented in layers: the essentials first, then the detail.
01Basic information
| Item | Information |
|---|---|
| Controller | Nutriprime S.L. · C/ Herreros 17-A, P.I. Los Ángeles, 28906 Getafe, Madrid, Spain · hola@bodyvibe.es |
| Purposes | Answering enquiries, handling partner applications and measuring site usage in aggregate. |
| Legal basis | Consent, pre-contractual measures and legitimate interest, as applicable. |
| Recipients | Providers that supply services to the controller (hosting, email delivery). No data is disclosed to third parties for commercial purposes. |
| Rights | Access, rectification, erasure, objection, restriction and portability, by writing to hola@bodyvibe.es. |
| Further information | In the sections below. |
02Data controller
Nutriprime S.L., tax ID [pending], with registered office at C/ Herreros 17-A, P.I. Los Ángeles, 28906 Getafe, Madrid, Spain. Data protection contact: hola@bodyvibe.es.
03What data we process and why
- Contact: name, email, subject and the message you send us through the contact form or by email, to answer your enquiry.
- Partners: name, company, tax ID, type of establishment, province or country, number of points of sale, estimated volume, channels and message, to assess the application, send you the dossier and commercial terms and, where applicable, start the commercial relationship.
- Analytics: we measure site usage with a cookieless analytics tool that does not identify people or build profiles; only aggregate data is processed (page views, country, device type, clicks on buy buttons).
- Buy redirector: when you press “Buy on Amazon” we record, in aggregate, the product, the country and the position of the button on the site. No data that identifies you is stored.
04Legal basis
- Consent (art. 6(1)(a) GDPR): commercial communications, always with an unticked box kept separate from any other purpose (art. 21 LSSI).
- Pre-contractual measures and performance of a contract (art. 6(1)(b) GDPR): partner applications and relationships with points of sale.
- Legitimate interest (art. 6(1)(f) GDPR): answering contact enquiries and measuring site usage in aggregate, without identifying people.
- You may withdraw consent at any time without affecting the lawfulness of prior processing.
05Retention
- Contact: up to 12 months from the last communication.
- Partners: while the application is assessed and, if a commercial relationship begins, for its duration and the statutory limitation periods.
- Analytics: aggregate data only, with no personal identification.
06Recipients and international transfers
Data may be processed by providers that supply services to the controller (web hosting, email delivery, form handling) as processors, under contracts compliant with Article 28 GDPR. Some providers may be established outside the European Economic Area; in that case the safeguards of Chapter V GDPR apply (adequacy decisions or standard contractual clauses).
We do not sell or disclose data to third parties for commercial purposes. Purchases take place on Amazon or with distributors, which process your data as independent controllers under their own policies.
07Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw consent, by writing to hola@bodyvibe.es or to the controller's postal address, stating the right you are exercising and enclosing a means of verifying your identity. We will reply within one month.
If you consider that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
08Minimum age
The site's forms are intended for people aged 14 and over. If you are under 14, do not send personal data through the site; if we detect data from anyone under that age, we will delete it. The products and their claims are aimed exclusively at adults.
09Security
We apply technical and organisational measures appropriate to the risk (encryption in transit, access control, data minimisation and anti-spam protection on forms) to ensure the confidentiality and integrity of data.
10Changes to this policy
We will publish any change on this page with its update date. If a change affects purposes that require your consent, we will ask for it again.