Privacy policy

We at Vitessa (“Vitessa”, “we”, “us”, “our”) care about your privacy. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you visit our website, make a purchase, or otherwise interact with us.

By using our website or Services, you agree to the practices described in this Privacy Policy.

If you have any questions, you can contact us at:
📧 hi@vitessa.com

1. Data Controller and Security

1.1 Data Controller
The controller responsible for processing personal data on this website is:

Vitessa
Email: hi@vitessa.com

The “controller” is the natural or legal person who determines the purposes and means of the processing of personal data.

1.2 Security – SSL/TLS Encryption
For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries), our website uses SSL or TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol in your browser’s address bar.

2. Data Collected When You Visit Our Website

When you use our website for informational purposes only (i.e. you do not register, create an account or otherwise actively provide information), we collect only the data that your browser transmits to our server (“server log files”). This includes:

  • The page(s) you visit on our website

  • Date and time of access

  • Amount of data transferred

  • The referring website (source URL)

  • Browser type and version

  • Operating system used

  • IP address (possibly in anonymized form)

We process this data to ensure the stability, security and proper functioning of our website, based on our legitimate interests (Article 6(1)(f) GDPR or other applicable data protection laws). We do not use this data to identify you personally, and we do not share it unless required by law. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

3. Cookies

We use cookies and similar technologies to make our website more user-friendly, effective and secure, and to enable certain features.

3.1 What Are Cookies?

Cookies are small text files that are stored on your device by your browser. We use:

  • Session cookies: deleted automatically when you close your browser.

  • Persistent cookies: remain on your device for a set period or until you delete them, allowing us or our partners to recognize your browser on your next visit.

Cookies may collect information such as browser type, device information, IP address (sometimes truncated), and pages visited.

3.2 Why We Use Cookies

Some cookies are technically necessary (e.g. remembering your cart), others help us:

  • Improve usability and performance of the site

  • Analyze usage patterns

  • Show relevant offers and advertisements

Where cookies are necessary for the performance of a contract (e.g. cart/checkout), processing is based on Article 6(1)(b) GDPR. Where they serve optimization and marketing, processing is based on our legitimate interest in improving our services and marketing (Article 6(1)(f) GDPR) or your consent where required.

We may also work with third-party advertising partners who place cookies on your device (third-party cookies) to make our online offer more interesting and relevant to you. Details on these third parties are provided in the sections below (e.g. Online Marketing, Analytics, Social Media).

3.3 Cookie Settings in Your Browser

You can configure your browser to:

  • Notify you when cookies are set

  • Allow cookies only in individual cases

  • Exclude the acceptance of cookies in certain cases or in general

  • Automatically delete cookies when closing the browser

If you disable cookies, some features of our website may not function properly.

(Instructions for cookie settings can be found in the help menus of your browser, e.g. Chrome, Safari, Firefox, Edge, etc.)

4. Contacting Us

When you contact us (e.g. via contact form or email), we collect the personal data you provide, such as:

  • Name

  • Email address

  • Any other information you include in your message

We use this data solely to handle and respond to your inquiry and for related technical administration.

  • Legal basis: our legitimate interest in responding to your request (Article 6(1)(f) GDPR).

  • If your inquiry is related to a contract or potential purchase, processing may also be based on Article 6(1)(b) GDPR.

We delete your data once your inquiry has been fully resolved, unless legal retention obligations require a longer storage period.

5. Customer Accounts and Contract Execution

When you create a customer account or make a purchase, we collect personal data you provide via the relevant input fields (e.g. name, address, email, payment information).

We use this data to:

  • Create and manage your customer account

  • Process your orders and payments

  • Communicate with you about your order

Legal basis: performance of a contract or pre-contractual measures (Article 6(1)(b) GDPR).

You can request deletion of your customer account at any time by contacting us at hi@vitessa.com. After your account is deleted or once the contract has been fully fulfilled, we restrict use of your data and retain it only as required by tax, commercial or other legal obligations. After those periods expire, we delete the data unless you’ve consented to further use or we are legally allowed to process it further.

6. Use of Data for Direct Marketing (Email Newsletter)

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we will send you regular information about our products, offers and promotions.

  • Required information: your email address

  • Optional: other data (e.g. name) to personalize messages

We use a double opt-in process:
You only receive the newsletter after confirming your subscription via a link in a confirmation email.

By confirming, you consent to our use of your email address and any other provided data for newsletter delivery (Article 6(1)(a) GDPR).

We also store:

  • Your IP address

  • Date and time of subscription

This helps us document your consent and detect potential misuse.

You can unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us at hi@vitessa.com. Upon unsubscribing, your email address will be removed from the newsletter mailing list, unless you have consented to other uses or we are legally permitted to store it longer.

6.2 Email to Existing Customers

If you have provided your email address while making a purchase, we may occasionally email you about similar products or services.

Legal basis: our legitimate interest in personalized direct advertising (Article 6(1)(f) GDPR).

You can object to this use of your email at any time with effect for the future by emailing us at hi@vitessa.com or using the unsubscribe option in the email. You will then no longer receive these marketing emails.

7. Data Sharing in Order Processing

7.1 Shipping and Payment

We share your personal data with third parties only to the extent necessary to:

  • Deliver your order (e.g. shipping carriers)

  • Process your payment (e.g. banks, payment service providers)

Legal basis: performance of a contract (Article 6(1)(b) GDPR).

7.2 Payment Service Providers

PayPal
If you choose PayPal as a payment method, payment processing is handled by:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal, L-2449 Luxembourg

We transmit data necessary for payment processing (e.g. purchase amount, currency, transaction details) to PayPal.
Legal basis: performance of a contract (Article 6(1)(b) GDPR).

PayPal may, for certain payment methods, carry out a credit check based on its legitimate interest in determining your creditworthiness (Article 6(1)(f) GDPR). For details, including the credit agencies used and your rights, please refer to PayPal’s Privacy Policy.

You can object to PayPal’s processing of your data, but PayPal may still process data if necessary to fulfill the contract.

SOFORT / Klarna (if offered)
If you choose “SOFORT” (Klarna), payment processing is performed by:

SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
Part of Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden)

We transmit data necessary for payment processing to SOFORT. Legal basis: Article 6(1)(b) GDPR. For details, please see SOFORT/Klarna’s privacy policy.

8. Review Reminders

If you have expressly consented during or after your order, we may use your email address once to remind you to leave a review of your order.

Legal basis: consent (Article 6(1)(a) GDPR).
You may withdraw your consent at any time by contacting hi@vitessa.com.

9. Social Media Plugins (Shariff Solution)

We may use social plugins from Facebook, Google (e.g. Google+), Instagram and other networks.
To better protect your data, we use the “Shariff” solution: plugins are initially only integrated as HTML links. No direct connection to the provider’s servers is made when you load the page.

Only when you click the respective button is a new browser window opened, and you are taken to the respective provider’s page (e.g. Facebook), where you may interact with their plugins (e.g. Like, Share).

For details on data collection and processing by these platforms and your rights and settings options, please see:

  • Facebook: privacy policy on facebook.com

  • Google / Google+: privacy policy on google.com

  • Instagram: privacy policy on instagram.com

Please note: the use of these platforms is governed by their own privacy policies.

10. Online Marketing

10.1 DoubleClick by Google

We may use DoubleClick by Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) to display relevant ads, measure campaign performance and avoid repeatedly showing the same ad.

DoubleClick uses cookies that may track:

  • Which ads you see

  • Which pages you visit after seeing an ad

Legal basis: our legitimate interest in optimal marketing of our website (Article 6(1)(f) GDPR).

You can opt out of DoubleClick cookies by:

  • Adjusting your browser settings to block cookies from googleadservices.com

  • Managing ad settings at Google’s Ads Settings

  • Using industry opt-out pages (e.g. Digital Advertising Alliance)

10.2 Google Ads (AdWords) Conversion Tracking

We use Google Ads and Conversion Tracking (Google LLC) to measure the success of our ads and understand how many users complete actions (e.g. purchases) after clicking our ads.

When you click on a Google ad, a conversion cookie is placed on your device. This cookie usually expires after 30 days and does not personally identify you. Google and we can see that someone clicked on an ad and was sent to a page with a conversion tag, and we receive statistics on this.

Legal basis: our legitimate interest in measuring and optimizing advertising (Article 6(1)(f) GDPR).

You can opt out by:

  • Blocking Google conversion cookies in your browser

  • Adjusting your settings at Google’s Ads Settings

  • Using industry opt-out tools (e.g. Digital Advertising Alliance)

11. Web Analytics – Google Analytics (Universal Analytics)

We use Google Analytics (Universal Analytics), a web analytics service of Google LLC, to analyze how visitors use our site and to improve our content and user experience.

Google Analytics uses cookies to collect information such as:

  • Pages visited

  • Time spent on pages

  • Browser and device information

  • IP address (in shortened/anonymized form)

We use IP anonymization (_anonymizeIp()), meaning your IP address is shortened within the EU/EEA before being sent to the United States. This prevents a direct personal identification. In rare cases where the full IP is sent first, it is shortened there.

Legal basis: our legitimate interest in analyzing user behavior for optimization and marketing purposes (Article 6(1)(f) GDPR).

You can prevent data collection by:

  • Setting your browser to block cookies

  • Installing the Google Analytics opt-out browser add-on

  • Setting an opt-out cookie via relevant links (if provided on our site)

Please note that disabling cookies may affect the functionality of our website.

We may also use Analytics with User ID to analyze behavior across devices in anonymized form. No direct personal data is transmitted to Google in this context.

12. Retargeting / Remarketing

12.1 Facebook Pixel

With your explicit consent, we may use the Facebook Pixel (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA) to track user actions after they have seen or clicked a Facebook ad (e.g. purchases). This helps us measure ad effectiveness and optimize our ads.

The data collected is anonymous to us, but Facebook may associate it with your profile and use it for its own advertising purposes according to its privacy policy.

Legal basis: your consent (Article 6(1)(a) GDPR).
You must be at least 13 years old to consent. If you are younger, please obtain permission from a parent or guardian.

You can control and disable Facebook’s ad tracking in your Facebook account settings or via opt-out pages like the Digital Advertising Alliance.

12.2 Google Ads Remarketing

We use Google Ads Remarketing to show ads based on your previous visits to our site. Google places a cookie to recognize your browser and show interest-based ads on Google properties and third-party sites.

Legal basis: our legitimate interest in targeted advertising (Article 6(1)(f) GDPR).

If you are logged into your Google account and have enabled personalized ads, Google may link your web and app browsing history to your Google account and use this for cross-device remarketing.

You can opt out by:

  • Adjusting ad personalization in your Google account (google.com/settings/ads)

  • Using browser plug-ins offered by Google

  • Using industry opt-out tools (e.g. Digital Advertising Alliance)

13. Your Rights

Under applicable data protection law (including, where applicable, the GDPR), you may have the following rights regarding your personal data:

  • Right of access: to know what data we hold about you and how we process it.

  • Right to rectification: to correct inaccurate or incomplete data.

  • Right to erasure (“right to be forgotten”): to request deletion of your data in certain circumstances.

  • Right to restriction of processing: to request that we limit processing in certain cases.

  • Right to data portability: to receive your data in a machine-readable format or have it transmitted to another controller where technically feasible.

  • Right to withdraw consent: where processing is based on your consent, you can withdraw that consent at any time with future effect.

  • Right to lodge a complaint: with a supervisory authority if you believe your rights have been violated.

You can exercise these rights by contacting us at hi@vitessa.com.

13.1 Right to Object

If we process your personal data based on our legitimate interests (Article 6(1)(f) GDPR), you have the right to object at any time for reasons relating to your particular situation. We will stop processing the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing, you have the right to object at any time. If you object, we will no longer use your data for such purposes.

14. Data Retention

We retain your personal data only as long as necessary to:

  • Fulfill the purposes described in this Privacy Policy

  • Fulfill legal obligations (e.g. tax and commercial retention periods)

  • Resolve disputes

  • Enforce our agreements

After the relevant retention periods expire, we delete or anonymize your data unless we have a legitimate interest in retaining it longer or you have given consent for continued storage.