Privacy Policy

This website is operated from Germany. Because the operator is established in the European Union, the EU General Data Protection Regulation (GDPR) applies to all processing described here, regardless of where you are located. If you are a resident of a U.S. state with a comprehensive consumer privacy law, additional rights are described in the section “Your U.S. State Privacy Rights” below.

1. Who Is Responsible

We have not appointed a data protection officer, as we are not required to do so under Art. 37 GDPR.

2. What We Collect, Why, and On What Legal Basis

2.1 Server log data

When you access this website, your browser transmits technical data that our hosting provider records automatically: IP address, date and time of the request, the page requested, referring URL, browser type and version, and operating system.

Purpose: delivering the website, ensuring stability and security, defending against attacks.
Legal basis: Art. 6 (1) (f) GDPR — our legitimate interest in operating a secure and functional website.
Retention: 30 days, after which logs are deleted or anonymized.

2.2 Guide download

To send you the requested guide, we process the email address you enter and the consent you give.

Purpose: delivering the guide you requested.
Legal basis: Art. 6 (1) (a) GDPR — your consent, given by ticking the consent box.
Retention: until you withdraw consent, and in any case no longer than 24 months after the last interaction.
Withdrawal: you may withdraw your consent at any time with effect for the future by emailing info@longevitypraxen.de. Withdrawal does not affect the lawfulness of processing carried out before it.

We do not add you to a newsletter on the basis of a guide download. If we later offer a newsletter, it will require separate, explicit consent.

2.3 Provider enquiries and listing applications

If you submit an enquiry about a listing, a verification application, or an editorial feature, we process the information you provide: the name of the organization, the name and role of the contact person, email address, telephone number, website, the description you supply, and any additional details you choose to include.

Purpose: assessing and processing your enquiry, and where applicable performing the resulting contract.
Legal basis: Art. 6 (1) (b) GDPR — steps taken at your request prior to entering into a contract, and performance of that contract.
Retention: for the duration of the business relationship and thereafter for the statutory retention periods under German commercial and tax law (generally 6 to 10 years).

2.4 Payments

Payments are processed by Stripe, Inc. When you proceed to payment, you are transferred to the payment provider’s own environment. We do not receive or store your full payment card details. We receive confirmation of payment and the associated transaction data.

Purpose: processing your payment.
Legal basis: Art. 6 (1) (b) GDPR.

The payment provider acts as an independent controller for the data it collects. Its own privacy policy applies: stripe.com/privacy.

2.5 Analytics and cookies

This website uses only cookies that are strictly necessary for its operation. We do not use analytics, tracking, advertising, or profiling cookies, and we do not embed third-party advertising technology. No consent banner is therefore required.

3. Health Information

We do not ask you for information about your health, medical history, symptoms, diagnoses, or treatments, and we ask you not to include such information in any message you send us. Our forms are designed to avoid collecting it.

Your interest in the general topic of longevity — for example by downloading a guide — is not treated by us as health data, and we do not use it to infer anything about your health, nor do we sell, share, or disclose it for advertising purposes.

If you voluntarily include health information in a free-text message, we process it solely to respond to your message, on the basis of Art. 9 (2) (a) GDPR, and delete it once your enquiry is resolved.

4. Recipients and Processors

We share personal data only where necessary and only with the following categories of recipient:

Each processor acts on our documented instructions under a data processing agreement pursuant to Art. 28 GDPR.

We do not sell personal data. We do not share personal data for cross-context behavioral advertising.

5. International Transfers

Some of the providers named above process data outside the European Economic Area, including in the United States. Where that is the case, the transfer is safeguarded by the European Commission’s Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR, and where applicable by the provider’s certification under the EU–U.S. Data Privacy Framework.

You may request a copy of the relevant safeguards by emailing info@longevitypraxen.de.

6. Your Rights Under the GDPR

You have the right to:

• →access the personal data we hold about you (Art. 15)
• →rectification of inaccurate data (Art. 16)
• →erasure (Art. 17)
• →restriction of processing (Art. 18)
• →data portability (Art. 20)
• →object to processing based on legitimate interests (Art. 21)
• →withdraw consent at any time with effect for the future (Art. 7 (3))

To exercise any of these rights, email info@longevitypraxen.de. We respond within one month; where a request is complex, we may extend this by a further two months and will tell you if we do.

You also have the right to lodge a complaint with a supervisory authority. The authority responsible for us is:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Kavalleriestrasse 2-4, 40213 Duesseldorf, Germany

7. Your U.S. State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island, or another state with a comprehensive consumer privacy law, you have the following rights, which we honor regardless of whether we meet the applicability thresholds of the law in question:

• →Right to know what personal information we collect, why, and with whom we share it
• →Right to access a copy of that information
• →Right to correct inaccurate information
• →Right to delete your personal information
• →Right to portability — to receive your information in a portable format
• →Right to opt out of the sale of personal information, of sharing for cross-context behavioral advertising, and of profiling with legal or similarly significant effects
• →Right to non-discrimination — we will not deny service, charge a different price, or provide a lesser quality of service because you exercised a privacy right

We do not sell your personal information and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months, including with respect to the personal information of consumers under 16 years of age.

Categories of personal information collected in the preceding twelve months: identifiers (email address, IP address); commercial information (transaction records, where you purchase a listing); internet activity (server log data); and the professional or business information you provide in a listing enquiry.

Sensitive personal information: we do not collect sensitive personal information as defined by the California Consumer Privacy Act.

How to exercise your rights: email info@longevitypraxen.de with the subject line “Privacy Request”. We will verify your identity by asking you to confirm information we already hold — usually the email address associated with your request. You may use an authorized agent; we will ask for proof of authorization.

Global Privacy Control: we honor the GPC browser signal as a valid opt-out request.

Appeals (Virginia, Colorado, Connecticut, and other states providing an appeal right): if we decline your request, you may appeal by replying to our decision. We will respond within 45 days. If your appeal is denied, you may contact your state Attorney General.

Shine the Light (California Civil Code § 1798.83): we do not disclose personal information to third parties for their own direct marketing purposes.

8. Children

This website is not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us with personal information, contact us and we will delete it.

9. Data Security

We use TLS encryption for all data transmitted between your browser and this website. We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, and misuse. No method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

10. Email Communications

Any commercial email we send includes a clear identification of its commercial nature, our valid physical postal address, and a functioning mechanism to unsubscribe. Opt-out requests are honored promptly and in any event within ten business days, in line with the U.S. CAN-SPAM Act.

11. Changes to This Policy

We may update this policy to reflect changes in our processing or in applicable law. The version in force is the one published here, with the date shown at the top. Where a change materially affects your rights, we will inform you.

12. Contact

Questions about this policy or about how we handle your data: