Privacy
Privacy notice
This English text is an informational summary. The authoritative legal text is the Hungarian privacy notice.
The Árvai József egyéni vállalkozó ("Controller") operates the vitalitaslabor.hu website, which is informational and advertising in nature: it offers wellness education and product suggestions and links out to external official shops. No sale, payment or order takes place on this website, so no payment data is processed.
Controller
- Árvai József egyéni vállalkozó — 9028 Győr, Rozgonyi utca 3., Magyarország
- Tax number: 90236594-1-28 · E-mail: info@vitalhealtheurope.eu
- Hosting / processor: Rackhost Zrt., 6722 Szeged, Tisza Lajos körút 41.
Data, purposes and legal bases
- Newsletter — e-mail address. Purpose: sending the newsletter. Basis: consent [Art. 6(1)(a)]. Kept until you unsubscribe (unsubscribe page). The subscription only becomes active after you confirm it with the link in our e-mail; unconfirmed requests are deleted after 30 days.
- Account — name, e-mail, hashed password, locale. Purpose: providing the account. Basis: performance of a contract [Art. 6(1)(b)]. Kept until the account is deleted. The e-mail address is confirmed with a link sent to it; a registration not confirmed within 14 days is deleted.
- Usage quotas & saved recommendations — per-account monthly tool quotas, monthly usage counts and saved finder results. Purpose: enforcing the free monthly limits and showing saved results. Basis: contract / legitimate interest.
- Uploaded wellness reports (AI evaluator/translator) — the QRMA report you upload and the generated result, tied to your account. Basis: your explicit consent [Art. 6(1)(a)]; deletable at any time on request. Wellness content, not medical diagnostics.
- “Ask the Lab” help search — the text of questions the site’s own knowledge base could not answer (or that the asker marked “not my question”), with time, count and page. E-mail addresses and phone numbers are removed before storage; for members the question is linked to the account, for visitors who are not logged in it is stored without account, name or IP address. Answered questions are only counted, not stored. No AI is used, and the question is not passed to anyone for their own purposes. Purpose: improving the knowledge base. Basis: legitimate interest [Art. 6(1)(f)]. Kept for up to 12 months after the question was last asked; a question used to extend the knowledge base may remain without the asker’s identifier. The Controller receives a weekly e-mail summary of the unanswered questions (up to 200 characters each) in its own notification mailbox, which its e-mail provider stores.
- Feedback page — messages you send on the Feedback page and any screenshot you attach, linked to your account. The Controller is notified of each new message by e-mail (with its first 500 characters). Purpose: answering and handling your message. Basis: legitimate interest [Art. 6(1)(f)]. A closed conversation is deleted automatically 12 months after its last message (an open one after 24 months), and immediately when the account is deleted.
- Retention of reports — every stored report and its result is deleted automatically 5 months after it was created; you can ask for earlier deletion at any time.
- Embedded videos — members-only videos are played with the players of Bunny Stream (BunnyWay d.o.o. (Slovenia)) and Google Ireland Ltd. (YouTube, youtube-nocookie.com). When the player loads, your browser connects to the provider directly, which processes technical data (e.g. IP address, browser data) under its own privacy notice. Basis: legitimate interest [Art. 6(1)(f)].
- Server logs & cookies — for operation and security (legitimate interest). See the cookie policy.
Transfers
Personal data is not sold and not transferred to third parties for marketing. Shop links lead to external official shops governed by their own privacy notices; the website does not transfer your personal data to them.
Your rights
You may request access, rectification, erasure, restriction, data portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting prior lawful processing). Contact: info@vitalhealtheurope.eu.
Supervisory authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu, naih.hu. You may also seek a judicial remedy.
Watermark on members-only materials
Members-only pages and tool outputs carry a repeating identifier derived from your user ID. Purpose: protecting the operator's content — making an unlawfully shared copy traceable (legitimate interest, Art. 6(1)(f) GDPR). Data: your user ID and Vital Health username, in the form of a code that cannot be reversed without a server-side secret. Nothing extra is stored: the code is recomputed when a page is displayed, and it is resolved back to a member only if the operator finds a leaked copy. You may object to this processing under the section on your rights.