PRIVACY POLICY
Information regarding the protection of your personal data
The website www.laboratoires-vitalae.com (hereinafter the “Website”) of the Vitalaë brand is published by SILL Dairy International, whose registered office is situated at Le Raden, Plouvien, and which is registered with the Brest Trade and Companies Register under number 487681611 (hereinafter “Vitalaë” or “we”) .
The Vitalaë brand is a brand of the SILL Entreprises Group.
We thank you for visiting our website and would like to inform you that the protection and security of your personal data is a priority for the SILL Entreprises Group and its subsidiaries.
Accordingly, the purpose of this Privacy Policy is to describe how we process the personal data of users of our Vitalaë website, in accordance with applicable regulations, in particular the General Data Protection Regulation (hereinafter the ‘GDPR’), and to inform you of your rights. This policy should be read in conjunction with our ‘Cookie Policy’.
We may need to amend the terms of this policy; in the event of substantial changes, we will inform you by means of a special notice on this website.
1. What is personal data?
Personal data refers to any information or set of information relating to an identified natural person or a natural person who can be identified, either directly or indirectly. For example: your surname, first name, postal address and email address, as well as your login details, IP address, MAC address, etc.
2. Who are the data controllers?
The data controller is the entity that determines the purposes and means of processing your personal data and which is responsible to you for compliance with data protection regulations.
SILL Dairy International and the SILL Entreprises Group are jointly responsible for the processing of your personal data as described in this policy.
Finally, in exceptional cases, links may also be provided to third-party websites or services over which we have no control (for example, to a press article, social media platforms, etc., such as Google Maps) and which are governed by their own data protection policies. SILL Dairy International is not responsible for these websites or services, and we invite you to consult their data protection policies.
3. What are the contact details of the Data Protection Officer?
SILL Dairy International and the SILL Entreprises Group have appointed a Data Protection Officer (hereinafter ‘DPO’). If you have any questions regarding this policy, or any enquiries or complaints concerning the collection and processing of your personal data, you may contact the DPO at the following address: dpo@sill.fr.
4. How is your personal data processed?
SILL Dairy International may collect your personal data either:
Directly from you when you use our website, including your login details, contact details or information required in our contact forms.
Indirectly, automatically or via our service providers, whilst you are browsing the website, using cookies regardless of the device used (browsing information, technical data, etc.). For further information, please see our Cookie Policy .
SILL Dairy International will only collect and process your personal data for specific purposes and on a clearly identified legal basis.
Furthermore, your personal data is retained for as long as is necessary to fulfil the purposes for which it was collected. Once this retention period has elapsed, the data is either deleted immediately or archived for a certain period in accordance with our legal obligations or for evidential purposes before being deleted.
Below is a list of the purposes for which data is processed, the legal basis for such processing and the retention periods for the data processed:
| Purposes of data processing | Legal basis for data processing | Data processed | Retention periods |
| Compilation of statistics on the use of the Vitalaë website using MATOMO cookies (_pk_id and _pk_ses). | This processing is carried out in the legitimate interests of Vitalaë and the SILL Entreprises Group as part of audience measurement that is exempt from the requirement for consent, in accordance with the recommendations of the CNIL. For further details, please refer to the cookie policy. | • Pages visited: URLs and page titles • Referring URLs • Anonymised IP address • Website traffic statistics | Matomo cookies are stored for 13 months (_pk_id) and 30 minutes (_pk_ses). For further details, please see the cookie policy. |
| Analysis of statistical data obtained through the use of the website. | This processing is carried out in the legitimate interests of Vitalaë and the SILL Entreprises Group. | Pages visited:
| Cookies are not stored for longer than is necessary; for further details, please see the cookie policy. |
| Handling your enquiries and/or requests for information, as well as managing any complaints you may have about our products via the contact forms. | This data processing is carried out in the legitimate interests of Vitalaë and the SILL Entreprises Group in order to respond to your enquiries. | We require the following details to process contact enquiries:
| The time taken to process your request, followed by its deletion, subject to archiving depending on the nature of your request. |
Information for partners of Vitalaë and the SILL Entreprises Group. | This processing is carried out in the legitimate interests of Vitalaë and SILL Entreprises in keeping their partners informed and in furthering their business. | Personal details of the contact person within the company.
| Personal data relating to the holder of the post to whom the data is addressed will be updated for the duration of the contractual relationship. Data may be archived in accordance with the terms of the contracts for a period of two years from the date of the last contact. |
| Sales prospecting management. | This processing is carried out on the basis of your consent. |
| Until you withdraw your consent or for a period of 2 years from the date of your last contact. |
| Handling requests to exercise GDPR rights | These processing operations are carried out in accordance with the legal and regulatory obligations of Vitalaë and the SILL Entreprises Group. |
| The time taken to process your request, followed by archiving from the date the request is closed for a period of 5 or 6 years, depending on the limitation period applicable to the nature of the request. |
SILL Dairy International and the Sill Entreprises Group operate CCTV systems at some of their production sites. If you have any questions regarding the processing of your image in this context, please contact our Data Protection Officer (dpo@sill.fr). The footage is retained for a period of one month in order to comply with food safety regulations.
Who are the recipients of your data?
As part of the data processing carried out by SILL Dairy International, your personal data will be disclosed to the relevant internal departments at Sill Entreprises, in particular those responsible for human resources, accounting, websites and marketing, or to the Data Protection Officer (DPO) in relation to your requests to exercise your rights.
Your personal data may also be accessed or transferred to certain third parties.
Our main third parties are as follows:
Name | Missions |
LUMY |
|
SILL Dairy International implements the necessary safeguards regarding the protection of personal data. To this end, these safeguards are monitored to ensure they comply with current regulations.
SILL Dairy International may be required to disclose your personal data to third parties where such disclosure is required by law, a regulatory provision or a court order, or where such disclosure is necessary to protect and defend its rights. Apart from these cases, your data will not be transferred or made available to any third party, subject to any restructuring.
Apart from these cases, your personal data will not be transferred or made available to a third party without your prior consent.
Is your data transferred outside the EU?
Although SILL Dairy International and the SILL Entreprise Group are based in France, for the purposes set out above, the personal data collected may be processed by companies located outside the European Economic Area (hereinafter ‘EEA’) or which themselves use service providers located abroad, including outside the EEA in countries where data protection legislation differs from that applicable within the EEA.
Any transfer of your personal data outside the EEA to third countries is either based on an adequacy decision by the European Commission or is carried out subject to appropriate safeguards, in particular contractual safeguards, in accordance with the applicable data protection regulations.
7. What are your rights, and how can you exercise them?
In accordance with current regulations, the User has the right to access, rectify or transfer their personal data, and may decide what is to happen to it after their death. The User also has the right to withdraw their consent and, on legitimate grounds, the right to restrict processing, the right to erasure and the right to object.
Procedure for exercising your rights:
To exercise your rights, you may contact the SILL Entreprises Group’s Digital Unit at the following address: cellule.digitale@sill.fr, clearly specifying the right(s) you wish to exercise and the context of your request to ensure more efficient processing. In order to respond to your requests, we may ask you to provide further information or to verify your identity.
If you have any further questions regarding the processing of your data by SILL Dairy International and the SILL Entreprises Group, please contact our Data Protection Officer (DPO) at the following address: dpo@sill.fr.
You always have the right to lodge a complaint with the French supervisory authority, the Commission Nationale de l’Informatique et des Libertés (CNIL). You can contact them by post at 3 Place de Fontenoy – TSA 80715 – 75334 PARIS CEDEX 07, or directly via their website here.
8. How is your data secured?
SILL Dairy International implements technical and organisational measures in accordance with best practice to ensure the security and confidentiality of your personal data.
We also ensure, through written agreements, that our service providers and subcontractors offer the same technical and organisational security safeguards to ensure the protection of your personal data entrusted to them for processing.
In accordance with the applicable regulations, you have the following rights:
- Right of access: allowing you to obtain confirmation that we are processing your personal data and, where applicable, to access it or receive a copy of it, as well as to obtain any relevant information on how it is processed.
- Right to rectification: enabling you to request that we rectify or complete any personal data concerning you, if it is inaccurate or incomplete.
- Right to erasure: enabling you to have your personal data erased.
This right may only be exercised in specific circumstances:
– if you withdraw your consent where the processing in question is based on that consent;
– if you object to the processing of your data;
– if your data has been processed unlawfully;
– if your data is no longer necessary for the purposes for which it was collected;
– if your data must be erased to comply with a legal obligation to which we are subject.
We are not obliged to comply with your request in certain cases, in particular if the processing of your personal data is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest in the field of public health, for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes, provided that the obligations laid down by the GDPR in such cases are met, or for the establishment, exercise or defence of legal claims, or if we have a legitimate ground for doing so.
Right to restriction of processing: if you dispute the accuracy of the data we are using or object to the processing of your data, the law allows us to carry out a verification or review of your request for a certain period. During this period, you may ask us to block the use of your data, which we will retain without using it. Conversely, you may request the restriction of certain data in the event that we wish to erase it, allowing you to retain the data, for example, in order to exercise a right.
We may, however, continue to use your personal data, despite the request for restriction, where you have given us your consent, or where we need it to establish, exercise or defend legal claims, or to protect the rights of another natural or legal person, or for important reasons of public interest.
Right to data portability: this allows you to ask us to provide you with your personal data in a structured, commonly used and machine-readable format, or to transfer it to another data controller of your choice. This right may only be exercised where the processing of your data is based on your consent or on a contract and is carried out by automated means.
Digital legacy: this right allows you to set out general or specific instructions regarding how you wish us to retain, delete and/or disclose your personal data following your death. A person of your choice may be appointed to carry out these instructions. In the absence of such instructions, your heirs will still be able to exercise certain rights, in particular the right of access and the right to object. This right applies in France and in any other EU country where mandatory local provisions so require.
Right to object: You also have the right to object to the processing of your personal data:
– On grounds relating to your particular personal circumstances, where such processing is based on our legitimate interests. If you object, we must cease such processing, unless we can demonstrate that there are legitimate and compelling grounds for processing the data which override your interests, rights and freedoms, or unless we need to process the data for the establishment, exercise or defence of legal claims.
– For any reason whatsoever, where the processing carried out is for the purpose of commercial marketing. In this regard, you may at any time request to no longer receive communications relating to our offers, news and events by using the unsubscribe link provided for this purpose in every email we send you.
Right to withdraw consent: you have the right to withdraw your consent at any time and without giving a reason where the processing of your personal data is based on your consent, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Privacy policy updated in August 2026.