This privacy policy applies to the website merlongevity.com (the “Website”), operated by the owner of MER Longevity (“MER”, “we”, “us”).
Contact for data protection matters:hello@merlongevity.com
We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Data Protection and the Guarantee of Digital Rights (LOPDGDD).
2. Scope
The Website is informational. It has no user accounts, no registration area and no online payments. We only process personal data that you actively send us through a form, together with the technical data that any web server necessarily records.
3. What data we collect, why, and on what legal basis
Contact form
Data: name, email address, message content.
Purpose: to reply to your enquiry and, where applicable, to take the preliminary steps towards a possible business relationship.
Legal basis: your consent, given by submitting the form (Art. 6(1)(a) GDPR), and the performance of pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
Retention: one year from our last exchange, unless a business relationship begins, in which case the applicable commercial and tax retention periods apply.
Newsletter / updates form
Data: email address.
Purpose: to send you news and updates about MER.
Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 21 of Spanish Law 34/2002, LSSI-CE).
Retention: until you withdraw your consent or ask to be removed. You can unsubscribe at any time by writing to hello@merlongevity.com.
Server logs
Data: IP address, browser and device user agent, date and time of access, pages requested, referring page.
Purpose: to operate the Website, maintain its security and detect abuse or attacks.
Legal basis: our legitimate interest in keeping the Website secure and available (Art. 6(1)(f) GDPR).
Retention: no longer than twelve months.
4. What we do not do
We do not sell, rent or trade your personal data.
We do not carry out profiling or automated decision-making that produces legal effects for you.
We do not use advertising or analytics technologies on this Website. See our Cookie Policy for details.
We do not request special categories of data (such as health data) through this Website.
5. Who else processes your data
We use the following service provider, which acts as a data processor under a contract that meets the requirements of Art. 28 GDPR:
Hosting provider: [HOSTING PROVIDER — TO BE COMPLETED BEFORE PUBLICATION]. Stores the Website files, form submissions received by email and server logs.
Beyond this, we do not disclose your data to third parties, except where we are legally obliged to do so, for example to a court, a public authority or the police acting within their powers.
6. Third-party resources and international transfers
To display correctly, the Website loads some technical files (web fonts and JavaScript libraries) from third-party content delivery networks. These files set no cookies, but your IP address and browser information are necessarily transmitted to the provider in order to deliver the file:
Provider
Domain
What it delivers
Google Ireland Ltd. / Google LLC
fonts.googleapis.com
Google Fonts web typefaces
Cloudflare, Inc.
cdnjs.cloudflare.com
Swiper interface library
jsDelivr
cdn.jsdelivr.net
GSAP animation library
Where these providers process data outside the European Economic Area, the transfer relies on the European Commission’s adequacy decision for the EU–US Data Privacy Framework and/or on Standard Contractual Clauses adopted by the European Commission, together with the additional safeguards applied by each provider.
7. Your rights
You may exercise the following rights free of charge at any time:
Access — to know what personal data we hold about you.
Rectification — to correct inaccurate or incomplete data.
Erasure — to have your data deleted where it is no longer necessary.
Restriction — to limit how we process your data in certain cases.
Objection — to object to processing based on our legitimate interest.
Portability — to receive your data in a structured, commonly used format.
Withdrawal of consent — at any time, without affecting the lawfulness of processing already carried out.
Write to hello@merlongevity.com stating the right you wish to exercise. We will reply within one month. We may ask you for proof of identity before acting on the request.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es
8. Security
The Website is served exclusively over HTTPS. We apply technical and organisational measures appropriate to the risk of the processing in order to protect your data against loss, misuse, unauthorised access and unlawful disclosure.
9. Minors
The Website is not directed at children under the age of 14 and we do not knowingly collect their personal data. If you believe a minor has sent us personal data, please contact us so that we can delete it.
10. Changes to this policy
We may update this policy to reflect changes to the Website or to applicable law. The “last updated” date above will always show the current version. Where a change is material, we will make it visible on the Website.
