Privacy Policy
Last updated: 20 September 2026
1. Data controller
The controller of the personal data processed through this website is:
Website: Kisei · Genomic Vitality (kisei.es)
Email:
For any matter relating to the processing of personal data, you can contact Kisei through the channels indicated above.
2. What personal data do we process?
Depending on your relationship with Kisei and the features you use on the website, the following categories of personal data may be processed:
- Identification data: first name and surname.
- Contact details: email address.
- Information provided in the enquiry: the content of the message voluntarily entered by the user in the contact form.
- Navigation and security information: certain technical data that may be necessary to provide, protect and maintain the operation of the website and prevent fraudulent or abusive use.
3. Purposes of processing
Personal data may be processed for the following purposes:
- Handling and responding to enquiries: managing requests, questions or communications sent through the contact form.
- Managing a possible contractual relationship: providing information, preparing a potential engagement and handling pre-contractual steps requested by the data subject.
- Website security and operation: maintaining infrastructure security, detecting fraudulent use and ensuring the proper operation of the website and its forms.
- Compliance with legal obligations: meeting legal obligations applicable to Kisei.
Kisei does not use data collected through the contact form for personalised advertising or to create commercial profiles.
4. Legal basis for processing
The applicable legal basis will depend on the specific purpose of the processing:
- Handling requests and pre-contractual steps: processing may be necessary to respond to a request made by the data subject and, where applicable, to take pre-contractual measures at their request.
- Consent: where applicable law requires the data subject's consent for a specific purpose, processing will only take place when valid consent has been provided.
- Legitimate interest: where applicable, to protect website security, prevent abuse and manage matters relating to the operation and security of the platform, subject to the appropriate balancing of interests.
- Legal obligation: where processing is necessary to comply with an obligation established by applicable law.
5. Genetic data and health-related data
Kisei develops services related to genetic information, nutrition, lifestyle habits and wellbeing. Genetic data and certain health-related data may constitute special categories of personal data under the General Data Protection Regulation.
The website contact form is not intended for receiving genetic files, genetic data, medical reports or other particularly sensitive health information.
For security and data protection reasons, users are advised not to enter genetic data, test results, medical reports, clinical information or other particularly sensitive information that is not necessary to formulate the enquiry in the contact form.
Where, as part of a specific Kisei service, it is necessary to process genetic or health-related data, such processing will be carried out on the applicable legal basis and with the safeguards and protective measures required by data protection law.
6. Data provided through the form
The fields marked as required are necessary to manage the enquiry correctly. Refusal to provide them may prevent Kisei from responding appropriately to the request.
Information voluntarily entered by the user in the message field should be limited to the information necessary to formulate the enquiry.
7. Recipients and service providers
Personal data may be processed by technology providers that provide services necessary for the operation of the website and the management of communications submitted through its forms.
The website currently uses Netlify as its hosting provider and for the technical management of forms submitted through the website.
Where such providers act as data processors, access to the data will be subject to the contractual terms and safeguards required by applicable law.
Netlify states in its privacy documentation that certain processing may involve international data transfers and that, where applicable, it uses mechanisms recognised by applicable law, including standard contractual clauses and other lawful transfer mechanisms.
Data may also be disclosed to public authorities, courts or other third parties where there is a legal obligation to do so.
8. International data transfers
Some technology providers used by Kisei may be established outside the European Economic Area or use infrastructure located in third countries.
Where an international transfer of personal data is necessary, Kisei will apply the transfer mechanisms recognised by applicable data protection law, such as an adequacy decision, standard contractual clauses or other legally recognised safeguards.
9. Data retention period
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected and, subsequently, for the periods legally required where it is necessary to retain it to address potential liabilities or comply with legal obligations.
In particular, enquiries received through the form will be retained for as long as necessary to manage and respond to the request and, where applicable, for the time needed to manage a potential contractual relationship or the obligations arising from it.
When the data is no longer necessary for these purposes, it will be deleted or subject to blocking or restricted retention where a legal obligation so requires.
10. Security
Kisei adopts appropriate technical and organisational measures to protect personal data against loss, destruction, accidental or unlawful alteration, unauthorised access or any other form of processing contrary to applicable law.
The level of security applied is adapted to the risks arising from the processing and the nature of the data processed.
11. Profiling and automated decision-making
The website does not currently make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.
The website also does not currently use data collected through the contact form to create automated commercial profiles.
12. Rights of data subjects
The data subject may exercise, under the terms established by applicable law, the following rights:
- Right of access to their personal data.
- Right to rectify inaccurate data.
- Right to erasure where applicable.
- Right to request restriction of processing.
- Right to object to processing in certain circumstances.
- Right to data portability where applicable.
- Right to withdraw consent where processing is based on consent.
- Right not to be subject to a decision based solely on automated processing, including profiling, where applicable.
To exercise these rights, a request may be sent to:
The request should reasonably enable verification of the applicant's identity where necessary.
13. Right to lodge a complaint
If the data subject considers that the processing of their personal data does not comply with applicable law, they may lodge a complaint with the competent supervisory authority. In Spain, the supervisory authority is the Spanish Data Protection Agency (AEPD).
Nevertheless, it is recommended that, before lodging a complaint, the data subject contact Kisei in an attempt to resolve the matter.
14. Minors
This website is not specifically aimed at minors and Kisei does not knowingly request personal data from minors through the contact form.
Where it is necessary to process personal data of minors, the safeguards and requirements established by applicable law will apply.
15. Links to third-party websites
The website may contain links to third-party websites or services. Kisei is not responsible for the privacy practices, content or data protection policies of those sites.
Users are advised to review the relevant privacy policies before providing personal data to third parties.
16. Updates to this Privacy Policy
Kisei may update this Privacy Policy when necessary to reflect changes in website features, processing activities, providers used or applicable law.
The current version will always be available on this same page and will state the date of its latest update.
17. Additional information
This Privacy Policy should be read together with the Legal Notice and the Cookie Policy of Kisei.
Kisei · Genomic Vitality