1. Who we are
This privacy policy applies to the website vitai.com.br, operated by VITAI INOVAÇÃO LTDA, Brazilian Tax ID (CNPJ) nº 01.790.382/0001-67, headquartered at Rua Coronel Gomes Machado, 118, Sala 503, Niterói/RJ, CEP 24020-065 ("Vitai"). For data processed through this website, Vitai acts as the data controller under Brazilian General Data Protection Law (LGPD, Law nº 13.709/2018).
2. Cookies and analytics technologies
We use Google Analytics via Google Tag Manager to obtain aggregate site performance metrics: most viewed pages, traffic sources, and interactions resulting in demonstration requests. This information is used exclusively to optimize the site and Vitai's institutional communications.
- Consent-based only (art. 7, I, LGPD): Google Analytics cookies load only after you click "Accept" on our consent banner. If you decline, no analytics cookies are written and the site functions normally.
- You can change your mind at any time via "Cookie Preferences" in the website footer. Declining removes all active Google Analytics cookies from your browser.
- We do not deploy marketing or social tracking pixels (such as Meta Pixel or LinkedIn Insight) nor remarketing audiences.
- Form submission fields (name, email, phone) are never transmitted to Google Analytics.
- Typography, images, and brand assets are self-hosted directly from our domain.
With your consent, the following cookies may be stored:
| Cookie | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguish unique visitors pseudononymously for usage statistics | 2 years |
_ga_<ID> | Google Analytics | Persist navigation session state | 2 years |
To remember your cookie preference, we record your response ("accepted" or "rejected") with the timestamp in browser localStorage (not a cookie) for up to 12 months.
3. Data we process and purpose
3.1 Demonstration Request Form
| Data Category | Purpose | Legal Basis (LGPD) |
|---|---|---|
| Name, work email, phone number, title, institution, bed count, interest areas, message | Respond to your inquiry, schedule a tailored demonstration, and deliver a proposal | Preliminary procedures related to a contract at data subject request (art. 7, V) |
We never sell contact data or use it for third-party advertising. We never ask for sensitive clinical data in web forms. Please do not submit patient health records through website forms.
3.2 Technical Access Logs
In accordance with Brazil's Internet Civil Framework (Law nº 12.965/2014, art. 15), web servers hosting this site record technical connection logs (IP address, date, and time). These records are maintained for security and compliance with legal duties (art. 7, II, LGPD) and are not used to profile visitors.
4. Data sharing
We share data strictly when necessary with:
- Cloud infrastructure providers (web hosting and business email), operating under strict data processing agreements;
- Google (Google Analytics), only upon affirmative cookie opt-in, with pseudonymous navigation telemetry;
- WhatsApp, when you voluntarily initiate a chat conversation with our team;
- Judicial or regulatory authorities, upon formal court order or mandatory legal requirement.
5. Data retention periods
- Commercial inquiry records: retained during business negotiations and up to 24 months from last contact, or until deletion is requested.
- Server access logs: 6 months, as required by Brazilian law.
- Google Analytics statistics: maximum of 14 months.
6. Security measures
We enforce technical and organizational safeguards against unauthorized access, loss, or alteration, including TLS encryption (HTTPS), role-based permissions, and immutable audit logs.
7. Your rights as a data subject
Under art. 18 of the LGPD, you are entitled at any time to request:
- Confirmation of the existence of data processing
- Access to personal data held by Vitai
- Correction of incomplete, inaccurate, or outdated data
- Anonymization, blocking, or deletion of unnecessary or excessive data
- Data portability to another service provider upon request
- Deletion of personal data processed based on consent
- Information regarding entities with whom data has been shared
- Information about the option to refuse consent and its consequences
- Revocation of previously granted consent
- Opposition to processing carried out under other legal grounds in case of non-compliance with applicable law
Requests are addressed within 15 days. If you believe your rights have not been fulfilled, you may file a petition with Brazil's National Data Protection Authority (ANPD) at gov.br/anpd.
8. Patient data in Vitai One
Clinical and patient health records processed within Vitai One belong exclusively to the client healthcare institutions, which act as the sole data controllers. Vitai acts strictly as a data processor under explicit contractual instructions.
If you are a patient seeking access or corrections to your medical records, please contact the specific hospital or clinic where care was rendered.
9. Data Protection Officer (DPO) & Contact
Our designated Data Protection Officer under LGPD art. 41 is Silvio Maffei. For privacy questions or rights requests, contact:
- DPO Email: lgpd@vitai.com.br
- Controller: VITAI INOVAÇÃO LTDA, CNPJ 01.790.382/0001-67
- Address: Rua Coronel Gomes Machado, 118, Sala 503, Niterói/RJ · CEP 24020-065, Brazil