Imprint

Vitelis is a brand name of

BMSC Management & Sales Consulting GmbH
Pienzenauerstr. 158
81925 Munich

‍

Information in accordance with Section 5 TMG

Vitelis Strategic Data Activation GmbH & Co. KG
Holbeinstr. 17
81679 Munich
Germany

‍

Represented by

Managing Director: Dr. Wolfgang Böcking

‍

Contact

Phone: +491736671395
E-Mail: wb@vitelis.com

‍

Register entry

Entry in the commercial register.
Registration court: Munich District Court
Registration number: HRB 211693

‍

VAT ID

Sales tax identification number in accordance with Section 27 a of the Sales Tax Act : DE236008245

‍

Responsible for the content according to Section 55 Paragraph 2 RStV

Dr. Wolfgang Böcking
Rößelerstrasse 10
81929 Munich
Germany

‍

Privacy Policy

Vitelis

Effective Date: March 1, 2026

Last Updated: March 2026

‍

1. Introduction

Vitelis (“we,” “us,” or “our”) is a brand of Vitelis Inc., a Delaware corporation. We are committed to protecting the privacy and personal data of individuals who visit our website (www.vitelis.com), use our platform, or otherwise interact with our services.

This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have regarding your data. It applies to all personal data processed by Vitelis in connection with our website, our AI-assisted analytics platform (“the Platform”), and our business operations.

This Privacy Policy should be read in conjunction with the Vitelis Disclosure, Methodology, and Transparency Framework, which provides additional detail regarding the analytical methods, data sources, and governance practices applicable to our Platform’s outputs.

By using our website or Platform, you acknowledge that you have read this Privacy Policy. If you do not agree with the practices described herein, please do not use our website or services.

2. Data Controller

The data controller responsible for the processing of personal data described in this Privacy Policy is:

Vitelis, Inc.

1204 Hunting Ridge Road,

Raleigh, NC 27615

‍

For all privacy-related inquiries, you may contact us at:

Email: privacy@vitelis.com

3. Personal Data We Collect

We collect personal data from several sources and for different purposes. The categories of personal data we process depend on how you interact with Vitelis.

3.1 Data You Provide to Us

When you interact with our website or request our services, you may voluntarily provide the following personal data:

Demo Request Form

First name, last name, job title, company name, company email address, and company revenue range

Contact Form

First name, last name, job title, company name, company email address, nature of inquiry, and any additional information you provide in the free-text field

Newsletter and Blog Subscriptions

Email address and, where provided, name and company affiliation. We use HubSpot as our email marketing platform to send blog updates and other communications to subscribers.

Platform Account Data

If you become a Platform user, we collect the information necessary to create and maintain your account, which may include name, email address, job title, company name, and login credentials.

3.2 Data We Collect Automatically

When you visit our website, certain data is collected automatically through cookies and similar technologies:

IP address (which may be anonymized or truncated)
Browser type and version, operating system, and device type
Pages visited, time spent on pages, referring URL, and clickstream data
Date and time of access

We use Google Analytics to collect and analyze this data. Google Analytics uses cookies to help us understand how visitors interact with our website. For more information on how Google processes data, please visit Google’s privacy policy at https://policies.google.com/privacy.

Our website is hosted on Webflow. Webflow may collect certain technical data in connection with hosting our website. For more information, please refer to Webflow’s privacy policy at https://webflow.com/legal/privacy.

3.3 Data We Process Through Our Platform

The Vitelis Platform is an AI-assisted analytics platform that analyzes external data signals to generate structured business insights. In the course of performing these analyses, we process data that may include personal data in the following categories:

Publicly Available Information About Individuals

The Platform ingests and analyzes publicly available information, including financial filings, corporate disclosures, news articles, press releases, and public communications. This information may reference identifiable individuals, such as named executives, officers, board members, and other public figures in their professional capacity.

Licensed Third-Party Business Data

We obtain business intelligence datasets from licensed third-party providers. These datasets may include organizational attributes such as employee headcount, corporate structure, industry classification, and workforce-related indicators. While these datasets are primarily organization-level data, certain elements (such as headcount at specific locations or roles) may constitute personal data under applicable law.

Platform User Activity Data

For authenticated Platform users, we collect usage data including queries run, reports generated, features accessed, and session metadata. This data is used to provide and improve the service, generate audit trails, and support customer success.

4. How We Use Your Personal Data

We use personal data for the following purposes:

Purpose

Data Categories

Legal Basis

Responding to demo requests and contact form inquiries

Name, email, title, company, inquiry details

Legitimate interest (responding to business inquiries); consent where applicable

Providing and operating the Platform

Account data, usage data, query history

Performance of a contract (service delivery)

Generating analytical insights from external signals

Publicly available data referencing individuals; licensed third-party business data

Legitimate interest (providing AI-assisted analytics services derived from external intelligence)

Sending blog updates and marketing communications

Email address, name

Consent (opt-in subscription); legitimate interest for existing customers

Website analytics and improvement

IP address, browser data, usage patterns

Consent (via cookie consent mechanism); legitimate interest for necessary cookies

Maintaining security and preventing fraud

IP address, access logs, authentication data

Legitimate interest (security of our systems and services)

Complying with legal obligations

As required by applicable law

Legal obligation

‍

5. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to enable core functionality, analyze usage, and improve your experience.

5.1 Types of Cookies We Use

Strictly Necessary Cookies: Required for the website to function. These cannot be disabled. They include session management and security cookies set by Webflow.
Analytics Cookies: Used to understand how visitors interact with our website. We use Google Analytics, which sets cookies to collect anonymized usage data. These cookies are only placed with your consent.
Functional Cookies: Used to remember your preferences and choices (such as language or region) to provide a more personalized experience.

5.2 Cookie Consent

When you first visit our website, you will be presented with a cookie consent banner that allows you to accept or decline non-essential cookies. You may change your cookie preferences at any time by clicking the cookie settings link in our website footer. Strictly necessary cookies do not require consent and cannot be disabled.

You may also control cookies through your browser settings. Please note that disabling cookies may affect the functionality of our website.

5.3 Google Analytics

We use Google Analytics to collect anonymized information about website usage. Google Analytics uses cookies to collect data such as the number of visitors, the pages visited, and the source of traffic. We have enabled IP anonymization, which means your full IP address is not stored by Google. Google Analytics data is processed by Google LLC. For more information or to opt out of Google Analytics, visit https://tools.google.com/dlpage/gaoptout.

6. AI-Assisted Processing and Automated Decision-Making

The Vitelis Platform uses proprietary analytical frameworks, structured business logic, and AI-assisted pattern recognition to analyze external data signals and generate business insights. This processing may involve personal data as described in Section 3.3.

6.1 Nature of AI Processing

Our AI-assisted processing is designed to identify potential business opportunities, risks, and performance drivers by analyzing patterns across publicly available and licensed business data. The Platform does not make automated decisions that produce legal effects concerning individuals or similarly significantly affect individuals. All outputs are intended to augment human decision-making, and the ultimate interpretation and application of any analytical output remains the responsibility of the Platform user.

6.2 Your Rights Regarding Automated Processing

Under applicable data protection laws, including GDPR Article 22, you have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you or similarly significantly affects you. Vitelis does not use its Platform to make such decisions. If you believe that Vitelis analytical outputs have been used in a manner that affects your individual rights, you may contact us at privacy@vitelis.com to raise your concern.

6.3 Training Data

In accordance with applicable transparency requirements, including the California Generative Artificial Intelligence Training Data Transparency Act (AB 2013), information regarding the categories of data used to train Vitelis’s AI models is available in the Training Data Transparency section of the Vitelis Model Transparency Page, published on our website and in enterprise documentation.

7. How We Share Your Personal Data

We do not sell your personal data. We share personal data only in the following circumstances:

Service Providers: We use third-party service providers to support our operations, including Webflow (website hosting), Google (analytics), and HubSpot (email marketing and CRM). These providers process data on our behalf under contractual obligations that require them to protect your data and use it only for the purposes we specify.
Platform Customers: Analytical outputs generated by the Platform may reference publicly available information about individuals (such as named executives). These outputs are delivered to our enterprise customers as part of the contracted analytics service.
Legal Requirements: We may disclose personal data if required by law, regulation, legal process, or enforceable governmental request.
Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to applicable privacy obligations.
With Your Consent: We may share personal data for other purposes with your explicit consent.

8. International Data Transfers

Vitelis is headquartered in 1204 Hunting Ridge Road, Raleigh, NC 27615, USA. Our website is hosted on Webflow (United States). Our analytics provider (Google) and email marketing platform (HubSpot) are also based in the United States.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, your personal data may be transferred to the United States or other countries that may not have equivalent data protection laws to those in your jurisdiction. Where such transfers occur, we rely on appropriate safeguards, including the EU-U.S. Data Privacy Framework, Standard Contractual Clauses (SCCs) approved by the European Commission, and data processing agreements with our service providers that include appropriate technical and organizational security measures.

If you have questions about the specific safeguards applied to your data, please contact us at privacy@vitelis.com.

9. Data Retention

We retain personal data only as long as necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data Category

Retention Period

Demo request and contact form submissions

24 months from submission, unless a business relationship is established (in which case, retained for the duration of the relationship plus 24 months)

Platform account data

Duration of the active account plus 24 months following account closure

Platform usage and audit trail data

36 months from generation, or longer if required by contractual or legal obligations

Analytical processing data (external signals)

Retained in accordance with source licensing terms and data minimization principles; periodically reviewed and purged when no longer necessary for analytical purposes

Newsletter subscriber data

Until unsubscription, plus 12 months on a suppression list to prevent re-enrollment

Website analytics data (Google Analytics)

26 months (Google Analytics default retention setting)

Cookie data

Varies by cookie; session cookies expire at the end of your browser session; persistent cookies expire as described in our cookie settings

‍

When personal data is no longer needed, we securely delete or anonymize it in accordance with our data retention procedures.

10. Your Privacy Rights

Depending on your jurisdiction, you may have some or all of the following rights regarding your personal data:

10.1 Rights Under the EU General Data Protection Regulation (GDPR)

If you are located in the EEA, United Kingdom, or Switzerland, you have the following rights:

Right of Access: You may request a copy of the personal data we hold about you.
Right to Rectification: You may request that we correct inaccurate or incomplete personal data.
Right to Erasure: You may request that we delete your personal data, subject to applicable legal exceptions.
Right to Restriction of Processing: You may request that we restrict the processing of your data in certain circumstances.
Right to Data Portability: You may request that we provide your data in a structured, commonly used, machine-readable format.
Right to Object: You may object to the processing of your personal data based on our legitimate interests. You may also object to processing for direct marketing purposes at any time.
Right Regarding Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing that produces legal effects concerning you. As described in Section 6, Vitelis does not use its Platform for such decisions.
Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection supervisory authority.

10.2 Rights Under the California Consumer Privacy Act (CCPA/CPRA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act:

Right to Know: You may request that we disclose the categories and specific pieces of personal information we have collected, the categories of sources, the business purposes for collection, and the categories of third parties with whom we share your data.
Right to Delete: You may request that we delete personal information we have collected from you, subject to applicable exceptions.
Right to Correct: You may request that we correct inaccurate personal information.
Right to Opt Out of Sale or Sharing: Vitelis does not sell personal information, and we do not share personal information for cross-context behavioral advertising. If this changes, we will provide a clear opt-out mechanism.
Right to Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information as defined under CCPA/CPRA for purposes that would require a limitation right.
Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To exercise any of these rights, please contact us at privacy@vitelis.com. We will respond to verifiable requests within the timeframes required by applicable law (generally 30 days under GDPR or 45 days under CCPA/CPRA).

10.3 Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser sends a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal information under applicable state privacy laws.

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/SSL), access controls and role-based permissions for Platform users, regular security assessments of our systems and third-party providers, and secure data handling procedures aligned with industry standards.

No method of transmission over the internet or method of electronic storage is completely secure. While we strive to use commercially reasonable means to protect your personal data, we cannot guarantee its absolute security.

12. Children’s Privacy

Our website and Platform are not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that we have collected personal data from a child, please contact us at privacy@vitelis.com and we will take steps to delete such data.

13. Third-Party Links

Our website may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the “Last Updated” date at the top of this policy and, where required by law, provide additional notice (such as a banner on our website or an email to registered users).

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

15. How to Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how your personal data is processed, please contact us:

Vitelis Privacy

Email: privacy@vitelis.com

Mailing Address: Vitelis Inc., 1204 Hunting Ridge Road, Raleigh, NC 27615

‍

For data subjects in the European Economic Area, you also have the right to lodge a complaint with your local data protection supervisory authority. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.

16. Supplemental Notices

16.1 Notice for European Economic Area, United Kingdom, and Swiss Residents

If you are located in the EEA, UK, or Switzerland, the processing of your personal data is governed by the GDPR (or UK GDPR, as applicable). The legal bases for our processing activities are described in Section 4 of this Privacy Policy. Where we rely on legitimate interest as a legal basis, we have conducted balancing assessments to ensure that our interests do not override your fundamental rights and freedoms. You may request information about these assessments by contacting privacy@vitelis.com.

Where required by applicable law, we conduct Data Protection Impact Assessments (DPIAs) for processing activities that are likely to result in high risk to individuals, including AI-assisted processing of personal data. Records of these assessments are maintained internally and are available to supervisory authorities upon request.

16.2 Notice for California Residents

This section supplements the information in this Privacy Policy for California residents and provides the disclosures required by the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA).

In the preceding twelve months, we have collected the following categories of personal information as defined by the CCPA:

Identifiers (name, email address, IP address)
Professional or employment-related information (job title, company name)
Internet or other electronic network activity information (browsing history, website interactions)
Inferences drawn from the above categories to create a profile about your preferences or characteristics (limited to website analytics)

We collect this information from the sources described in Section 3 and use it for the business purposes described in Section 4. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

16.3 Notice Regarding External Data and Public Figures

As described in Section 3.3, the Vitelis Platform processes publicly available information that may reference identifiable individuals in their professional capacity. This processing is conducted on the basis of legitimate interest for the purpose of providing AI-assisted business analytics services. Individuals who appear in publicly available sources and who wish to exercise data protection rights with respect to Vitelis’s processing of their information may contact us at privacy@vitelis.com. We will evaluate such requests in accordance with applicable law, taking into account the public nature of the information, the legitimate interests supporting the processing, and the rights and freedoms of the data subject.