⚠️ Our online store is open until 10 p.m. 9. 2025 under construction. Occasionally, there may be brief disturbances. Thank you for your understanding.

PERSONAL DATA PROTECTION AND PRIVACY POLICY

We are aware of the importance of protecting personal data, which is why we handle your data in accordance with the applicable regulations governing this area. All information provided is protected against unauthorized access, loss, misuse or disclosure, ensuring that you can use our services safely and reliably.

The processing of personal data is carried out exclusively within the framework of and on the basis of the applicable legal bases set out in:

  • General Data Protection Regulation (EU) 2016/679 (GDPR),

  • Personal Data Protection Act (ZVOP-2) and

  • Electronic Communications Act (ZEKom-2).

The controller of personal data is:
Vibrant Longevity Institute, Mestni trg 8, 1000 Ljubljana
Contact: info@vibrantlongevity.com

What is personal data?

Personal data is any information relating to an identified or identifiable natural person. An individual is identifiable if he or she can be identified, directly or indirectly, in particular through the use of identifiers such as: name, surname, address, e-mail address, social security number, tax number, health insurance number or other identifiers.

Our commitment to the protection of personal data

  • We will never misuse or use your personal data in violation of the law.

  • We will not pass on your data to third parties unless:

    • you have given your explicit consent to do so, or

    • so required by law, or

    • it is a contractual processing with our authorized contractual processors (e.g. IT support, accounting), who process your data exclusively on our instructions and in accordance with applicable law.

  • We send e-mails only on the basis of your prior consent or on the basis of a legitimate interest, in accordance with ZEKom-2.

You can easily unsubscribe from our newsletter at any time, via the link in the email or by sending a direct message to info@vibrantlongevity.com.

Automatic processing of data when visiting the website

Each time you access a website, your web browser automatically transmits certain information to vibrantlongevity.com, which is temporarily stored in so-called server log files. This information includes:

  • the type and version of the web browser,

  • operating system

  • Internet service provider,

  • IP address (temporary),

  • date and time of access,

  • Referral URL (if accessed via a link)

  • the amount of data transferred,

  • other technical data necessary for the operation of the website.

This data is necessary for the proper functioning, ensuring the security and optimization of our website. The IP address is only stored for the duration of the session when you visit the website and is then automatically deleted, unless attempts at misuse or illegal access are detected. In such a case, the IP address can be stored permanently and placed on an internal security sheet, thus preventing the user from further use of the site.

Legal basis and purpose of processing

The processing of this data is based on the legitimate interest of the controller (Article 6(1)(f) of the GDPR), namely:

  • ensuring system security and protection against abuse (including detecting attacks on the website),

  • technical optimization of the website,

  • improving the user experience,

  • compliance with legal obligations in the event of suspected criminal offences (e.g. referral to investigative authorities).

Categories of users and contractual processors

Personal data from log files may be processed on our behalf by trusted contractual processors, such as hosting, IT maintenance and security service providers. The processing takes place exclusively on the basis of concluded data processing agreements (in accordance with Article 28 of the GDPR).

In certain cases, data may also be transferred to third countries (e.g. the USA), but only on the basis of standard contractual clauses approved by the European Commission (Decision No. 2010/87/EU).

Data retention

  • Temporary IP addresses and other technical information are stored until the end of the session and then automatically deleted.

  • In the event of detected security incidents (e.g. intrusion attempt, system misuse), the data may be stored permanently or until a specific event is clarified.

  • For the purpose of proving in the event of suspected fraud or other illegal activities, data may be transmitted to the competent authorities.

Your rights

As an individual, you have the right to:

  • access to personal data,

  • correction of inaccurate data,

  • Restriction of processing;

  • object to processing based on legitimate interest;

  • filing a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

You can exercise your rights by sending a written request to the e-mail address: info@vibrantlongevity.com

Cookies and additional processing

For additional information on the use of cookies, including analytical and marketing tools that may involve the processing of personal data, we invite you to visit our [Cookie Policy].

If you contact us via the online form

The controller of your personal data is the Vibrant Longevity Institute, Mestni trg 8, 1000 Ljubljana, e-mail: info@vibrantlongevity.com.

We will process your personal data for the purpose of communicating with you, which constitutes our legitimate interest on the basis of point (f) of the first paragraph of Article 6 of the General Regulation (GDPR).

Your data may also be processed on our behalf by a website hosting provider or a contractual processor with whom we have concluded an appropriate contract for the processing of personal data in accordance with Article 28 of the GDPR. All personal data processors act exclusively under our instructions and under our supervision.

Shelf life: Your data will be stored until the end of the communication or until the purpose of processing is fulfilled at the latest. You can request the deletion of your data at any time, unless otherwise provided by law.

Your rights: You have the following rights in relation to your personal data:

  • the right of access to personal data;

  • the right to rectification;

  • the right to restriction of processing,

  • the right to object to processing on the basis of a legitimate interest;

  • the right to erasure if the conditions of the GDPR are met.

You can exercise your rights via the contact form or by e-mail.

If you believe that the processing of your personal data is not in accordance with the applicable legislation, you have the right to lodge a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

If you sign up for our newsletter

You can subscribe to the newsletter voluntarily via the online form or as part of the purchase of our products or services, in accordance with the second paragraph of Article 158 of the Electronic Communications Act (ZEKom-1).

You can unsubscribe from receiving the newsletter at any time by clicking on the link in the received e-mail or inform us by e-mail at info@vibrantlongevity.com.

For more details on the processing of personal data:

Legal bases for processing:

  • Your explicit consent in accordance with point (a) of the first paragraph of Article 6 of the General Regulation (GDPR), which you can revoke at any time.

  • In case of an existing customer and an unexpressed objection at the time of registration, we also send newsletters on the basis of the second paragraph of Article 158 ZEKom-1 .

  • Our legitimate interest , in accordance with point (f) of the first paragraph of Article 6 of the GDPR, for:

    • planning of work processes,

    • inventory and capacity management,

    • improving the offer,

    • service optimization.

Categories of processors:

  • providers of website maintenance services,

  • providers of tools for automated marketing (e-mail marketing),

  • other contractual processors who act exclusively on the instructions of the controller and in accordance with Article 28 of the GDPR.

Shelf life:

  • Until the consent is revoked or an objection is made (unsubscribing from the newsletter).

Your rights:

  • the right to withdraw consent or objection;

  • the right of access to personal data;

  • the right to rectification, erasure, restriction of processing and portability of personal data.

You can exercise your rights:

Unsubscribing from the newsletter (withdrawal of consent or objection) is possible at any time by clicking on the unsubscribe link in the received e-mail.

Right to complain: If you believe that the processing of personal data is not in accordance with the applicable legislation, you can file a complaint with the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

Contact via social networks

On our website and in communications, we also indicate contact options via social networks (e.g. Facebook, Instagram, YouTube). If you choose to contact us through these channels (e.g. via private message, comment or email), we will process the personal data you provide to us solely for the purpose of communicating with you or to deal with your question or request.

Legal basis for the processing of personal data:

  • our legitimate interest in providing effective customer support and responding to questions, in accordance with point (f) of the first paragraph of Article 6 of the General Regulation (GDPR),

  • in the event that the communication takes place for the purpose of preparing or concluding a contract (e.g. ordering a product or service), the legal basis is also point (b) of the first paragraph of Article 6 of the General Regulation (GDPR).

Data retention:

  • We store personal data only for as long as necessary to achieve the purpose of communication or to fulfill contractual obligations, unless the law stipulates a different retention period (e.g. tax or contractual obligation to store documentation).

Note on external providers:

Users are informed that when communicating via social networks, personal data is also processed by the operators of these networks (e.g. Meta Platforms for Facebook and Instagram), in accordance with their privacy policies and terms of use. We have no influence on the processing carried out by these platforms as independent controllers.

Processing of personal data when ordering or booking an appointment

If you voluntarily provide us with personal data, for example through an online form for ordering or booking an appointment, we will only process the data you have provided.

We may process the following personal data:

  • The name (if it is indicated),

  • name and surname,

  • Email address

  • Telephone number,

  • The content of the message (if you enter it).

This data is processed exclusively for:

  • To deal with your enquiry.

  • booking an appointment,

  • preparation or conclusion of a contractual relationship (e.g. purchase, provision of a service),

  • communication with you.

Legal basis for processing: point (b) of the first paragraph of Article 6 of the General Data Protection Regulation (GDPR) – processing is necessary for the performance of a contract or for the implementation of measures at the request of the individual prior to entering into a contract.

If you do not provide us with this information, we will unfortunately not be able to process or execute your reservation or order.

Data retention: we store data for as long as it is necessary to process the inquiry or perform the service, or in accordance with legal retention periods (e.g. tax legislation).

Your rights: you have the right to:

  • access to your personal data;

  • correction of inaccurate data,

  • Restriction of processing;

  • objection to processing, and

  • erasure where there are legal grounds for doing so.

To exercise your rights, you can contact us via e-mail at: info@vibrantlongevity.com.

Transfer of personal data

In the context of the processing of personal data as described in this notice, we may transfer your personal data to the following categories of recipients (in addition to those expressly mentioned herein):

  • authorised external collaborators (e.g. accountants, legal and tax advisors);

  • IT service providers (e.g. hosting, software maintenance, cloud solutions),

  • Providers of marketing and analytics services (e.g. e-mail sending tools)

  • state and supervisory authorities (e.g. FURS, courts, Information Commissioner) when required by law.

We only transfer personal data to third parties if one of the following conditions is met:

  • if this is necessary for the fulfilment of contractual obligations towards you (e.g. delivery of products, provision of services),

  • if we or our contractual party have a legitimate interest (Article 6/1(f) GDPR) and this does not override your rights,

  • if you have given us your explicit consent to do so (Article 6/1(a) GDPR),

  • if we are obliged to do so by law, administrative measure or court order,

  • if there is another legal basis in accordance with the applicable law.

All contractual processors process personal data exclusively on our behalf and on our instructions and are obliged to adequately protect the data by means of a data processing agreement concluded in accordance with Article 28 of the GDPR.

Rights of individuals

In accordance with the applicable legislation on the protection of personal data, in particular the General Data Protection Regulation (GDPR) and the Personal Data Protection Act (ZVOP-2), you have the following rights:

  • Right to information
    If you have any questions about the processing of your personal data or our privacy policy, you can contact us at:
    info@vibrantlongevity.com
    At your request, we will provide you with information in writing and without undue delay about which of your personal data is processed, for what purpose and on what legal basis.

  • Right to withdraw consent
    If you have given your consent to certain processing of personal data, you can withdraw it at any time. The withdrawal of consent does not affect the lawfulness of the processing before its withdrawal.

  • Right of access to data
    You have the right to request confirmation as to whether we are processing your personal data and, if confirmed, access to this data and additional information.

  • Right to rectification
    If your personal data is inaccurate or incomplete, you have the right to request rectification or completion.

  • Right to restriction of processing
    Under certain conditions, you can request the restriction of the processing of your personal data.

  • Right to erasure (‘right to be forgotten’)
    In certain cases, you have the right to request the deletion of your personal data, for example if it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.

  • Right to data portability
    You can request the personal data you have provided to us in a structured, commonly used and machine-readable form and transmit it to another controller.

  • Right to object
    If we process your personal data on the basis of a legitimate interest (Article 6 (1) (f) of the GDPR), you have the right to object to this processing at any time – in particular if it is for direct marketing or if there are reasons related to your particular situation.

  • Right to appeal
    If you believe that the processing of personal data violates the applicable law, you have the right to file a complaint with the competent supervisory authority – the Information Commissioner of the Republic of Slovenia (www.ip-rs.si).

Exercising rights

You can exercise all of the above rights by contacting us via e-mail at:
info@vibrantlongevity.com

We will respond to your request without undue delay and no later than one month from receipt of the request, in accordance with Article 12 of the GDPR.

Publication of changes

This Privacy Notice may be updated from time to time. Any changes will be published on our website in due course.

This Privacy Policy is effective from 1. 8. 2025.
Operator: Vibrant Longevity d.o.o., PE: Mestni trg 8, 1000 Ljubljana.

0