Privacy Policy

1. Data Controller

VITAMINE DRIP SLP, CIF B05398631 (the "Controller"), owner of Long Life Clinic.

Registry details: Commercial Registry of Malaga, T 6034, L 4941, F 125, S 8, H MA160971, I/A 1.

Postal address: Avd Manolete 1, C.C. Centro Plaza, local 3C, 29660 Marbella, Malaga, Spain.

Phone: +34 624 071 237

Contact email: info@longlifeclinic.com

2. Purposes of Processing

Depending on the relationship the user establishes or intends to establish with the Controller through the website and the services offered on it, personal data may be processed to handle and respond to contact requests, information requests and/or enquiries sent through the contact channels available on the website, and to manage newsletter subscriptions for periodic updates with advice and news of interest to the user.

The data will not be processed for purposes incompatible with those indicated above. No profiling or automated decisions with legal effects on the user will be carried out unless the user is expressly informed and an appropriate lawful basis exists.

3. Lawful Basis for Processing

The legal basis that legitimises the processing of personal data will depend on the type of relationship the user maintains with the Controller and the specific purpose of processing. In particular, processing may be based on:

• Consent granted by ticking the relevant box or boxes.
• The performance of a contract or service to which the user is party, or pre-contractual measures requested by the user, where processing is necessary to handle the request or enquiry.
• Legal obligations applicable to the Controller that require the processing of personal data in connection with the services provided or with commercial, fiscal or tax matters.

The user may withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

4. Personal Data Processed and Source

Depending on how the user uses the website, the personal data processed may include identification data, contact data, browsing data, access or account data if the user creates an account, and bank details if a purchase is made through the website.

The data collected is provided by the user when contacting the Controller, completing forms, or using other features offered on the website.

Use of contact sections, forms and website features is voluntary. However, certain fields or information may be necessary to correctly handle and manage a request. Refusal to provide required information may prevent the Controller from handling the request properly.

The user guarantees that the data provided is true, accurate and complete, and undertakes to keep it updated. Data will be cancelled, deleted or blocked when it is inaccurate, incomplete, or no longer necessary or relevant for its purpose under applicable law.

If personal data provided relates to a third party, the user guarantees that the third party has been informed of this Privacy Policy and has authorised the disclosure of their data for the purposes described above.

5. Links and Social Media

The website may include links to third-party sites, including social media platforms where the Controller is present. These third-party sites have not been reviewed or controlled by the Controller, who assumes no responsibility for their content, policies or terms of use. The user should bear in mind that social media posts may be visible to other users and is responsible for the information shared in those environments.

6. Data Retention Periods

Personal data will be kept for as long as necessary to fulfil the purposes for which it was collected and, in particular:

• While the pre-contractual or contractual relationship with the user remains in force.
• While the user does not request deletion.
• During the periods established by applicable regulations for compliance with legal, fiscal and administrative obligations.
• During the periods necessary for the filing, exercise or defence of possible claims.

If the user exercises deletion or objection rights, data may remain duly blocked and available to public authorities, judges and courts during legally applicable limitation periods.

7. Children's Data

Under the GDPR and Spanish LOPDGDD, only persons over 14 may lawfully consent to the processing of their personal data. Only users over 14 may provide personal data on this website. For children under 14, consent from parents or guardians is mandatory before personal data can be processed.

8. Confidentiality and Security

The Controller undertakes to adopt the technical and organisational measures necessary, according to the risk level of the data collected, to ensure the security of personal data and prevent accidental or unlawful destruction, loss or alteration of personal data transmitted, stored or otherwise processed, or unauthorised disclosure of or access to such data.

Personal data will be treated as confidential by the Controller, who undertakes to ensure, through legal or contractual obligations, that such confidentiality is respected by employees, associates and any person to whom the information is made accessible.

9. Disclosures and Recipients

Personal data may be disclosed to third parties where expressly required by applicable law, where necessary to comply with legal obligations of the Controller, or where strictly necessary service providers support the activity.

Some service providers act as processors, with whom the Controller has entered into the corresponding contracts under Article 28 GDPR, guaranteeing the security and confidentiality of the information at all times.

The Controller does not carry out international data transfers. If providers located outside the European Economic Area are used, the Controller will ensure that such recipients provide sufficient safeguards for the protection of personal data under Regulation (EU) 2016/679.

10. User Rights

The user has the right to obtain confirmation as to whether the Controller is processing personal data concerning them.

The user has the right to access personal data, request rectification of inaccurate data or request erasure where, among other reasons, the data is no longer necessary for the purposes for which it was collected.

In certain circumstances, the user may request restriction of processing, in which case data will only be retained for the exercise or defence of claims. The user may also object to processing on grounds relating to their particular situation, unless compelling legitimate grounds exist or processing is necessary for the exercise or defence of claims.

Where legally applicable, the user has the right to data portability, meaning the right to receive personal data concerning them and provided to the Controller in a structured, commonly used, machine-readable format, and to transmit it to another controller.

The user may exercise, where applicable, the rights of access, rectification, erasure, objection, restriction of processing, portability and not to be subject to automated individual decisions by written communication with the reference "GDPR Rights" sent to info@longlifeclinic.com.

The user may also lodge a complaint about personal data protection with the Spanish Data Protection Agency (www.aepd.es), the competent supervisory authority in Spain.

11. Cookies and Analytics

This website uses technical cookies necessary for its operation and, when the user gives consent, analytics cookies to understand site usage and improve the experience. The user may accept or reject analytics cookies through the cookie banner.

More information: To learn more about how Google Analytics processes data, visit the Google Privacy Policy.

12. Privacy Policy Updates

The Controller reserves the right to modify this Privacy Policy to adapt it to legislative or case-law developments, as well as to changes in the services offered through the website.