Privacy policy
This policy explains how Longevity Science Distribution SRL (hereinafter "the company") processes personal data in connection with the use of the longevityscience.ro website, in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data ("GDPR") and applicable Romanian legislation.
1. Data controller
Longevity Science Distribution SRL, a Romanian legal entity registered with the Trade Registry under no. J2026011532006, sole tax identification number 54013085, with registered office at 16 Londra Street, Sector 1, Bucharest, Romania.
For any question or request regarding the processing of personal data, you may contact us at: office@longevityscience.ro.
The company is not legally required to appoint a Data Protection Officer (DPO) under Article 37 of GDPR. All requests regarding personal data are handled by the company team through the contact channels indicated above.
2. Data we process
The website is a presentation site with minimal functionality. The company processes only the following categories of personal data:
2.1 Data submitted voluntarily by email
When you contact us at the email addresses displayed on the website (office@longevityscience.ro or ana@longevityscience.ro), we process the data you choose to provide in your message: email address, name, organization name, Romanian tax ID (CUI), contact person, type of activity, the content of the message, and any other information you voluntarily include.
Providing this data by email is voluntary and at your own initiative. Refusal to provide the necessary data may make it impossible for us to respond to your request or to initiate a commercial relationship.
2.2 Traffic analysis data (Plausible Analytics)
To understand how the website is used, we use Plausible Analytics, a privacy-oriented traffic analytics tool. The provider is Plausible Insights OÜ, an Estonian legal entity (Tartu, Estonia), and data is processed exclusively on servers located in the European Union (Hetzner, Falkenstein, Germany). Plausible does not use cookies and does not collect personally identifiable data. The aggregated data is anonymous and includes:
- The page visited and the referrer URL (traffic source)
- Approximate country (derived from the IP address, without storing the IP)
- Type of device, operating system, and browser
- Session duration and pages visited
Plausible does not identify individual users and does not allow tracking them across other websites. Details about Plausible's policy: plausible.io/privacy.
3. Purposes of the processing
We process your data for the following purposes:
- Responding to requests sent by email and managing professional correspondence
- Initiating and maintaining commercial relationships with B2B partners (pharmacies, clinics, practices)
- Understanding the use of the website to improve content and user experience
- Fulfilling legal obligations applicable to the company
4. Legal basis for processing
Data processing is carried out on the following legal bases, applied according to the nature of the communication:
- Legitimate interest of the company (Art. 6(1)(f) GDPR), for responding to received emails, operational communication with professional partners, and developing current commercial relationships
- Pre-contractual steps or performance of a contract (Art. 6(1)(b) GDPR), when you contact us to request an offer, commercial terms, or other details that initiate a commercial relationship
- Legal obligation (Art. 6(1)(c) GDPR), to the extent that applicable legislation (fiscal, accounting, commercial) requires the retention of certain categories of data for specified periods
5. Storage period
Data is retained for the duration necessary to fulfill the purpose for which it was collected, with the following indicative periods:
- Email correspondence regarding requests not converted into a commercial relationship: maximum 2 years from the last message
- Correspondence with active B2B partners: for the duration of the contractual relationship plus the periods imposed by Romanian accounting and tax legislation (10 years from the close of the relevant financial year)
- Plausible traffic analysis data: aggregated, without an individual identification term
6. Recipients of the data
Personal data is not sold, rented, or transferred to third parties for commercial purposes. The following categories of recipients may have access to data, strictly to the extent necessary:
- Authorized personnel of the company, under confidentiality obligations
- Service providers acting as processors (for example, the email and hosting providers), with contractual data protection guarantees
- Plausible Insights OÜ (Estonia), for aggregated traffic data, without personally identifiable data
- Competent public authorities, where legislation requires
7. International transfers
Personal data is processed within the European Union. Plausible Insights OÜ is a company headquartered in Estonia (Tartu) and processes data exclusively on servers located in Germany (Hetzner, Falkenstein), within the European Union. The company does not transfer personal data outside the European Economic Area unless on the basis of adequate guarantees imposed by GDPR.
8. Your rights
As a data subject, you benefit from the following rights under GDPR:
- Right of access to the personal data processed
- Right to rectification of inaccurate or incomplete data
- Right to erasure ("right to be forgotten"), under the conditions provided by law
- Right to restriction of processing in certain situations
- Right to data portability to another controller
- Right to object to processing based on legitimate interest
- Right to withdraw consent at any time, where processing is based on consent
- Right not to be subject to automated decision-making, including profiling (the company does not use automated decisions)
To exercise these rights, you may contact us at office@longevityscience.ro. We will respond within one month of receiving the request. This period may be extended by up to two additional months for complex or numerous requests, in accordance with Article 12(3) of GDPR; in such cases, we will inform you within the first month about the extension and the reasons for it.
9. Right to lodge a complaint
If you consider that the processing of personal data carried out by the company infringes the provisions of GDPR, you have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, postal code 010336, Bucharest, Romania, telephone +40 318 059 211, email anspdcp@dataprotection.ro, website dataprotection.ro.
10. Data security
The company applies reasonable technical and organizational measures to protect personal data against unauthorized access, loss, alteration, or disclosure. These measures include restricted access, protected authentication, in-transit encryption for communication with email and hosting servers, and periodic review of procedures.
11. Cookies
The website does not use proprietary cookies for identification, tracking, or advertising. Plausible Analytics does not use cookies. The website's technical resources (fonts, images, scripts) are hosted locally on our own server, with no requests to third-party services that could set cookies or transmit personal data.
12. Changes to the policy
The company may update this policy to reflect legislative or operational changes. The applicable version is the one published on the website at the time of access, with the date of the last update displayed at the top. Substantial changes will be communicated, where appropriate, through other available means.