We are aware of the importance of personal data protection, which is why we handle your data in accordance with the regulations governing personal data protection. All information provided is safeguarded against intrusion by third parties, ensuring you a carefree and uninterrupted experience. The processing of personal data is conducted exclusively within the framework of applicable data protection regulations, particularly the General Data Protection Regulation, EU 2016/679 (“GDPR”), the Personal Data Protection Act (“ZVOP-2”), and the Electronic Communications Act (“ZEKom-2”).
The controller responsible for your personal data is: The Vibrant Longevity Institute, Mestni trg 8, 1000 Ljubljana, email: info@vibrantlongevity.com
What is personal data?
Personal data is information that identifies you; when we consider whether certain information is personal data, the key question is whether it can be linked to an identifiable individual—a natural person. Information such as a person’s first name, last name, and address, as well as their personal identification number (EMŠO), tax number, health insurance number, email address, and similar details, are undoubtedly considered personal data.
Personal Data Protection Policy (in brief)
- We will never misuse your personal data in any way.
- We will never share your contact and personal data with a third party (see the category “Sharing of personal data” below).
- We may share your contact and personal data with a third party only if you have consented to being contacted (via the Access Form).
- We will never send you unsolicited emails, except in the case of important transactional messages.
- You can unsubscribe from any of our emails quickly and easily at any time.
Automatic Data Processing When Visiting the Website
Each time you access the Website, your browser automatically transmits data stored in the server’s log files. This includes the following data (hereinafter referred to as “log file data”): browser type and version information; internet service provider data, date and time of access. When you visit our website, your IP address is stored for a short period, at most until the end of the session. If our system does not detect any activities that threaten the functioning of our website, this data is automatically deleted. In the event that our system identifies activities that are clearly unlawful or aimed at disrupting the website’s operation, your IP address is stored permanently, added to a “blacklist” by our system, and consequently prevents you from further use of the website.
In more detail: Legal basis for processing personal data: based on our legitimate interest (Article 6(1)(f) of the GDPR), the controller also processes personal data for the purpose of website security and preventing unlawful activities on it (such as intrusions, phishing, etc.). Categories of recipients: the website hosting provider and security solution provider. Recipients process personal data exclusively according to the controller’s instructions and under its supervision. Personal data is transferred to the USA on the basis of standard contractual clauses (confirmed by Commission Decision No. 2010/87/EU), which are included in the data processing agreement concluded with the provider in accordance with Article 28 of the GDPR. Retention period: at most until the end of the session (general rule) or permanently (for cases of attempted abuse). Individual rights: objection, access to data, rectification, restriction of processing. Rights may be exercised by submitting a written request to the controller’s address or via the contact form. Possibility of complaint: regarding the controller’s handling of personal data protection, a complaint or report can be filed with the Information Commissioner of the Republic of Slovenia.
Log file data is evaluated in anonymized form for the purpose of continuously improving the Website, adapting it to the interests of our users, and promptly correcting errors. For these purposes, we have a legitimate interest in processing the data in accordance with Article 6(1)(f) of the GDPR. In non-anonymized form, log file data is used exclusively for error detection and ensuring system security, which includes detecting and tracking attempts at unauthorized access, fraud, and abuse. The data is stored for [X to X days] and then deleted. Log file data whose continued storage is required for evidentiary purposes is not deleted until the final resolution of the relevant incident. In individual cases, this data may be disclosed to investigative authorities. Details on data processing through non-essential cookies can be found on the Cookies page.
If you contact us via the web form
Your personal data will be processed by: The Vibrant Longevity Institute, Mestni trg 8, 1000 Ljubljana, for the purpose of communicating with you, which constitutes our legitimate interest under Article 6(1)(f) of the GDPR. Your personal data may also be processed (stored) by the website hosting provider, with whom we have concluded an appropriate data processing agreement in accordance with Article 28 of the GDPR. We will retain your personal data until the communication is concluded, but you may request the deletion of your personal data at any time before that. You also have the right to access your personal data, request its rectification, or restriction of processing, and you may object to the processing at any time. You can exercise your rights via the contact form. If you believe we are not appropriately upholding your rights, you may lodge a complaint with the Information Commissioner of the Republic of Slovenia.
If you subscribe to our newsletter
You can subscribe to our newsletter via the web form or when purchasing our services (Article 258(2) of the ZEKom-1). You can unsubscribe from receiving the newsletter at any time by clicking the link in the received email or by notifying us via email.
In more detail: Legal basis for processing personal data: Personal consent, which can be revoked at any time (Article 6(1)(a) of the GDPR) by clicking the link in the received email. In case you become our customer and have not indicated that you do not wish to receive notifications, newsletters are also sent based on Article 158(2) of ZEKom-1. Based on our legitimate interest (Article 6(1)(f) of the GDPR), the controller also processes personal data for the purpose of planning workflow, inventory and capacities, as well as improving the offer and optimizing services. Categories of recipients: website maintenance providers, marketing tool providers. Recipients process personal data exclusively according to the controller’s instructions and under its supervision. Retention period: until consent is revoked. Individual rights: revocation of consent or objection, access to data, rectification, erasure, restriction of processing, data portability. Rights may be exercised by submitting a written request to the controller’s address or via the contact form. Unsubscribing from the newsletter (revoking consent or objecting) is possible at any time by clicking the unsubscribe link in the received newsletters. Possibility of complaint: regarding the controller’s handling of personal data protection, a complaint or report can be filed with the Information Commissioner of the Republic of Slovenia.
Contact via Social Networks
Our Website indicates how you can get in touch with us. You can also contact us via social networks (e.g., Facebook, Instagram, YouTube). If you take advantage of this option and, for example, contact us via email, we will process the data you have provided to us in order to respond to your request. We have a legitimate interest in answering your questions. The legal basis for data processing is Article 6(1)(f) of the GDPR (legitimate interest). If you contact us with the intention of concluding a contract, the legal basis is Article 6(1)(b) of the GDPR (pre-contractual measures and performance of a contract). The data you provide to us when making contact will be deleted after the purpose for which you contacted us has been fulfilled, unless we are obligated to retain them due to contractual or tax law reasons.
Data Processing When Ordering or Booking an Appointment
If you actively provide us with data, for example when placing an order or booking an appointment or using the contact form, we will process the data you have submitted. When ordering or booking an appointment or using the contact form, we collect and process the following information: title; first and last name; email address; phone number; message. We process the above data for managing your registration and handling your orders. The legal basis is Article 6(1)(b) of the GDPR (preparation for concluding and performance of a contract). Without providing the relevant data listed above, registration or ordering in the online store is not possible. You can exercise your rights and request data deletion by contacting us at: info@vibrantlongevity.com
Disclosure of Personal Data
As part of the data processing described in this notice, it is possible that personal data may be disclosed to the following categories of recipients (in addition to recipients explicitly mentioned in this data protection notice): authorized agents and other advisors (e.g., legal, tax advisors); IT service providers; marketing service providers; state or other public authorities. Personal data is disclosed to third parties only if it is necessary to fulfill contractual obligations, if we or our contractual partner have a legitimate interest in processing the personal data, or if you have given your consent to the disclosure of data. Furthermore, personal data is disclosed to third parties if and to the extent that we are required to do so by applicable legislation, an administrative measure, or a court order, or if there is any other legal basis for such disclosure. Service providers will use the data exclusively according to our instructions.
Rights of Individuals
Individuals have various rights under the GDPR, particularly the following:
Pravica do obveščenosti: Če imate kakršna koli vprašanja v zvezi z našo politiko varovanja osebnih podatkov ali kako so vaši osebni podatki obravnavani, se lahko brez zadržkov obrnete na naše predstavnike varovanja zasebnosti. Kontakt: E-pošta: info@vibrantlongevity.com Na podlagi vaše zahteve vas bomo nemudoma obvestili – pisno in v skladu s primerno zakonodajo – kateri osebni podatki, če sploh kateri, so bili zbrani med obiskom spletne strani: www.drtinaprodnik.com
Right to Withdraw Consent: You can withdraw your consent for a specific processing at any time; however, this does not affect the lawfulness of processing based on consent before its withdrawal.
Right of Access: You may request confirmation as to whether we are processing your data. If such processing is taking place, you can also request further information regarding the processing.
Right to Rectification: You have the right to have inaccurate or incomplete data corrected and/or completed.
Right to Restriction of Processing: You can request that the processing of your personal data be restricted.
Right to Erasure: In certain cases, you have the option to request the deletion of your stored personal data.
Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transfer this data to another controller.
Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection supervisory authority regarding the handling of your personal data. In Slovenia, this is the Information Commissioner (www.ip-rs.si).
Right to Object: If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR, you have the right to object to the processing of your personal data, provided that there are reasons arising from your particular situation or if you object to the processing of your personal data for direct marketing purposes.
You can exercise your rights by contacting us at: info@vibrantlongevity.com
Objava sprememb
Any changes to our personal data protection policy will be published in this privacy statement. This privacy notice is effective from March 1, 2023, onwards.