Privacy Policy

Last updated: 01.07.2025

1. Controller and Data Protection Officer

Data Controller:
YLDLIFE GmbH
Schillerstrasse 5
DE-82049 Pullach im Isartal
Germany

Email: info@yuevalongevity.com
Phone: +49 089 260 10 323

Data Protection Officer:

For data protection inquiries, please contact: info@yuevalongevity.com.

2. General Information

This Privacy Policy explains how YUEVA Longevity (operated by YLDLIFE GmbH) collects, uses, and protects your personal data when you use our website www.yuevalongevity.com and our services.We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and German data protection laws.

3. Legal Basis for Data Processing

We process your personal data based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): When you explicitly consent to processing
• Contract Performance (Art. 6(1)(b) GDPR): To fulfill our contractual obligations
• Legitimate Interest (Art. 6(1)(f) GDPR): For business operations and improvements
• Legal Obligation (Art. 6(1)(c) GDPR): To comply with legal requirements

4. Data We Collect

Personal Information:
• Name, email address, phone number
• Postal address for retreat bookings
• Date of birth and age
• Payment information (processed by third-party providers)

Health Information (with explicit consent):
• Health questionnaires and assessments
• Lifestyle and wellness information
• Dietary restrictions and allergies
• Medical history relevant to our services
• Biomarker and diagnostic results (if applicable)

Technical Data:
• IP address and browser information
• Website usage data and analytics
• Cookies and tracking technologies
• Device and operating system information

Communication Data:
• Email correspondence
• Support ticket information
• Feedback and survey responses
• Social media interactions

5. How We Use Your Data

Service Provision:
• Process retreat bookings and payments
• Provide personalized health coaching
• Deliver educational content and resources
• Communicate about your bookings and services

Health and Wellness:
• Conduct health assessments and provide recommendations
• Customize retreat experiences based on your needs
• Track progress and outcomes (with consent)
• Provide ongoing support and follow-up

Business Operations:
• Improve our services and website
• Conduct research and analytics
• Send marketing communications (with consent)
• Comply with legal and regulatory requirements

Communication:

• Respond to inquiries and support requests
• Send booking confirmations and updates
• Provide important service announcements
• Share relevant health and wellness content

6. Data Sharing and Third Parties

We may share your data with:

Service Providers:
• Payment processors (Stripe, PayPal)
• Email marketing platforms (with consent)
• Analytics providers (Google Analytics)
• Hosting providers (Webflow/AWS)
• Retreat venue partners in Valencia, Spain

Healthcare Providers:
• Licensed medical professionals during retreats
• Laboratory partners for diagnostic services
• Referral partners (with your consent)

Legal Requirements:
• When required by law or legal process
• To protect our rights and safety
• In case of business transfers or mergers

We do not sell your personal data to third parties.

7. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA):
• United States: Stripe (payment processing), Google (analytics)
• Adequate safeguards: Standard Contractual Clauses and adequacy decisions
• Your rights: You may request information about safeguards in place

8. Data Retention

General Rule: We retain personal data only as long as necessary for the purposes outlined in this policy.

Specific Retention Periods:
• Account data: Until account deletion or 3 years of inactivity
• Health information: 10 years (medical record requirements)
• Payment data: 10 years (tax and accounting requirements)
• Marketing data: Until consent withdrawal or 3 years of inactivity•Website analytics: 26 months (Google Analytics default)

9. Your Rights Under GDPR

You have the right to:
Access (Art. 15 GDPR):
• Request information about data we process about you
• Receive a copy of your personal data

Rectification (Art. 16 GDPR):
• Correct inaccurate or incomplete data
• Update your information at any timeErasure (Art. 17 GDPR):
• Request deletion of your data ("right to be forgotten")
• Subject to legal retention requirementsRestriction (Art. 18 GDPR):
• Limit how we process your data•When accuracy or lawfulness is disputed

Data Portability (Art. 20 GDPR):
• Receive your data in a structured format
• Transfer data to another service providerObject (Art. 21 GDPR):
• Object to processing based on legitimate interest
• Opt-out of marketing communications

Withdraw Consent:
• Withdraw consent for specific processing activities
• Does not affect lawfulness of prior processing

Lodge a Complaint:
• Contact your local data protection authority
• German authority: Bundesbeauftragte für den Datenschutz und die Informationsfreiheit

10. Cookies and Tracking

We use cookies for:
• Essential website functionality
• Analytics and performance monitoring
• Marketing and advertising (with consent)
• User preferences and settings

Cookie Types:
• Strictly Necessary: Cannot be disabled
• Analytics: Google Analytics (anonymized)
• Marketing: Social media pixels (with consent)
• Functional: User preferences and settings

Your Choices:
• Manage cookie preferences in our cookie banner
• Adjust browser settings to block cookies
• Opt-out of analytics tracking

11. Security Measures

We protect your data through:
• SSL/TLS encryption for data transmission
• Secure hosting infrastructure (AWS)
• Regular security audits and updates
• Access controls and staff training
• Incident response procedures

Health Data Security:
• Enhanced encryption for sensitive health information
• Restricted access on need-to-know basis
• Compliance with medical data protection standards
• Regular backup and recovery procedures

12. Children's Privacy

Our services are not intended for children under 18. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements:
• Changes will be posted on our website
• Significant changes will be communicated via email
• Continued use constitutes acceptance of changes
• Previous versions available upon request

14. Contact Information

For privacy-related questions or to exercise your rights:
Email: info@yuevalongevity.com
Phone: +49 089 260 10 323
Mail:YLDLIFE GmbH - Privacy Team
Schillerstrasse 5
DE-82049 Pullach im Isartal
Germany

Response Time: We will respond to your requests within 30 days as required by GDPR.