Privacy Policy
Last updated October 18, 2026
1. Scope and responsible business
This policy describes the demonstration version of the Vitra website. The data controller, its address, and its privacy contact must be defined before any commercial operation or collection of personal data.
2. Data and functionality in this version
The delivered code does not include data collection forms, registration, checkout, advertising pixels, analytics tools, or first-party cookies. It does not request names, email addresses, health information, or payment details. Website assets load locally, without third-party fonts, libraries, or images.
3. Hosting and technical logs
If the website is hosted online, the hosting provider may process IP addresses, access dates and times, browser information, and security logs. The operator must identify service providers and document purposes, legal bases, retention periods, and any international transfers based on the actual configuration.
4. Cookies and advertising technologies
This version does not implement cookies or advertising technologies. Adding Google Analytics, Google Ads, Meta Pixel, or other services requires updating this policy and assessing applicable consent rules before activation. Where consent is used, rejecting optional technologies should be as accessible as accepting them.
5. Sharing and retention
The code in this version does not implement data sharing. The final operation must describe its service providers, shared data, safeguards, and retention periods or criteria. This template does not establish a fictional retention period.
6. Rights and contact
Subject to applicable law, individuals may request information about processing and exercise rights such as access, correction, and deletion, where applicable. The controller must provide a working privacy contact before collecting data. This template does not yet have a channel for receiving requests.
7. Security, minors, and updates
This version does not offer registration for minors or request personal information. The operator must adopt technical and organizational measures appropriate to any processing it implements. Changes to the website, data collection, or service providers require reviewing this policy and its update date.