We may process personal data about you in the following instances:

In this instance the types of personal information we collect and process depends, among other factors, on how you are using our Website. If you are only using our Website for information purposes, i.e., you do not otherwise transmit information to us, we will only gather the personal information that is forwarded to our servers by your browser. In particular, we will gather the access data that we require for technical reasons to be able to display this Website and warrant the stability and security of the same. This access data includes the IP address, date and time of your visit, access status/HTTP status code, the referred URL (previously visited page), browser type and version, operating system. In this context, you will need to provide the personal information that is required for its use for technical or IT security reasons. If you do not provide this information, you will not be able to use this Website. In addition, we will also receive your personal information if you reach out to us using the contact form on our Website. Personal information in this context includes e.g., name, address, e-mail, telephone number, date and time of your request and content of your request. Such information is collected, so we can respond to your inquiries or provide you with requested information. Where you do not provide the above information or part thereof, your inquiry cannot be processed by us.

For the purpose of registering and making use of the Cafe Mobile App (“Service” or “Services”), you will need to provide us with personal information, including, inter alia, the following:
‍
- Personal contact details such as name, address, e-mail, telephone number;
- Personal data such as gender, date of birth, nationality, ethnicity, country of residence, occupation, marital status, weight, height;
- Personal health data such allergies, intolerances, history of non communicable diseases, medications, supplements and vitamins, medical exams, family history;
- Personal lifestyle data such as dietary habits, exercise and sleep routines and other data pertinent to your stress & cognitive function status;
- Financial information, such as your credit card number;
‍
In case you transmit personal information about third parties (i.e. a family member), you are responsible for complying with the applicable information protection provisions. This may require obtaining the consent of these third parties for the transmission of this information. If you provide personal data of third parties, we consider that the relevant consent of these third parties, where necessary, has been obtained, upon their having been notified accordingly.

We collect your personal data:

- Directly from you via the Cafe Mobile App;
- When third parties provide us with personal data about you (i.e. through a smartwatch integration);
- When data is produced during the provision of Services in your favor (i.e. when you access our call center).

Moreover, we collect your personal information automatically, through relevant systems used in connection with your device (e.g., location information, cookies, log data). For instance, we may collect your personal information from the device through which you access our Service.

We will only use your personal data when the law allows us to do so. Most often and depending on the situation in which we use this data (see paragraph (b) below), we will process it in the following circumstances:

- When we have to perform the subscription service we have concluded with you or in order to take measures at your request before entering into such a subscription service;
- When we have to comply with a legal obligation; 
- When this is necessary for the purposes of our prevailing legitimate interests;
- When necessary for the establishment, exercise and defense of legal claims;
- When we need to protect your interests (or those of another person); and

Otherwise, when you have given your consent.

The situations in which we may process your personal data are listed below.

- Confirm and verify your identity following any relevant request that you may make;
- To process your request, if you are contacting us using the contact form of our website and/ or through our customer support team;
- Open, administer and operate your personal Cafe Mobile App account, manage our relationship with you and provide you with our Services, including performing or facilitating any transaction as well as improving the quality of our Services;
- Administer technically and develop the Cafe Mobile App, as well as to carry out statistical and other analysis regarding the use of the Cafe Mobile App;
- Process of anonymized data for research purposes, including possible sharing with partner organizations;
- For informational purposes, such as account management, customer service. In this respect we may send you informative material and/ or subsequent reminders relating to the use that you are making of the Cafe Mobile App (e.g., purchasing of supplements, notification previews etc.);
- For billing/ invoicing purposes;
- Comply with applicable laws and regulations;
- To safeguard our interests;
- Provide you with marketing materials via electronic mail on events, products and services that we offer that may be of interest to you. We are entitled to use your electronic mail contact details, lawfully obtained in the context of the provision of our Services or any other transaction, for the direct promotion of similar services or for the fulfillment of similar purposes, even where you have not given your prior consent, provided that you are given, when contact details are collected, as well with every message, a clear and transparent option to object, easily and free of charge, to the collection and use of your electronic data.

We may disclose personal information in the situations described below:

- To third parties who provide services to us (e.g. IT companies and/or subcontractors);
- To our affiliates, only to the extent necessary to process your request, or anonymised for research purposes;
- To any court of any relevant jurisdiction or any relevant authority;
- To public authorities, regulators or governmental bodies or other third parties, when required by law or regulation; or

Otherwise, if you consent to such disclosure.

As HealthyLongevity.cafe and its affiliates are based in the United States of America, your personal data may be transferred outside the European Economic Area (EAE) in the event you have used our Services from a country within the EE. However, in such scenario, except where the relevant country has been determined by the European Commission to provide an adequate level of protection (currently Andorra, Argentina, Canada, Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, New Zealand, Japan and Uruguay), we will protect that information as described in this Notice and in accordance with applicable law. If necessary, we require such recipients to comply with appropriate measures designed to protect the personal data, by signing the appropriate standard contractual clauses, a copy of which may be requested by contacting our Data Protection Officer.

Neither our Website nor the Cafe Mobile App is intended for or designed to collect personal information from individuals under the age of 18. Individuals under the age of 18 should receive permission from their parents or legal guardian before providing any personal information to us.

We will retain personal information for as long as necessary to fulfill the purpose for which it was collected or to comply with legal, regulatory, reporting or internal policy requirements. To determine the appropriate retention period for personal information, we consider the applicable legal requirements, as well as the amount, nature and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, as well as the time periods, during which such personal information may need to be retained as evidence in an actual or potential judicial context. Specifically: (a) where processing is carried out in order for us to respond to queries that may be raised by you regarding our Services, if there is no other ground for the retention of your data, such data will be destroyed after fifteen days following the relevant communication/ correspondence; (b) where processing is carried out under the subscription service, the personal data shall be stored for as long as necessary for the performance of the subscription and for the establishment, exercise and/or support of our legal claims arising from the subscription service; and (c) where the processing is imposed as an obligation by provisions stemming from the applicable legal framework, personal data shall be stored for as long as the relevant provisions so require.

It is important that the personal data we hold about you is accurate and up to date. We appreciate your keeping us informed if your personal data changes during your relationship with us.

Under certain circumstances and subject to the applicable law, you have the right to:
‍
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you;
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Request erasure of your personal information. This enables you to ask us to delete or remove personal information where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal information where you have exercised your right to object to processing (see below).
- Object to processing of your personal information where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground.
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, for example if you want us to establish its accuracy or the reason for processing it.
- Where personal information is processed by automated means and:
     - where we process your personal information on the basis of your consent; or
     - where such processing is necessary for entering into or performing our obligations under a subscription service with you,
- Request the transfer of your personal information to you or to another party (also known as “data portability”).
- Where we process your personal information on the basis of your consent, you may withdraw that consent at any time. If you do not give your consent or withdraw your consent this may affect our ability to provide you with services. Please note that the withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- In certain circumstances, request not to be subject to automated decision-making, including profiling.

Certain of these rights are not absolute under the applicable legislation (as sometimes there may be overriding interests that require the processing to continue, for example); nonetheless we will consider your request and respond to you. Finally, you have the right to lodge a complaint with the supervisory authority in the jurisdiction where you live or work, or in the place where you think an issue in relation to your personal information has arisen.

You will not have to pay any fees to access your personal data (or to exercise any other right). However, we may charge a reasonable fee depending on the nature of the request and applicable regulations.

We reserve the right to update this Notification at any time, and we will notify you by updating this Notice on our Website at: www.healthylongevity.cafe/privacyAny changes to this Notice are applicable by the time of its update on our Website, unless otherwise provided.

If you would like to exercise any of your rights in connection with your personal information or receive a copy of the safeguards designed to protect personal information in the case of transfer of your personal information outside the EEA or obtain further information on the retention periods of personal information, please contact our Data Protection Officer exclusively at dpo@healthylongevity.cafe.