PRIVACY POLICY OF THE SC TONUSPLUS SRL WEB PORTAL

This Privacy Policy explains how SC TONUSPLUS SRL collects, uses and protects the personal data of the users of its web portal. By using the portal, you accept the practices described in this policy.

SC TONUSPLUS SRL, with its registered office at B-dul. ALEXANDRU CEL BUN nr. 29, Iasi, Iasi County, registered with the Trade Register under no. J22/1900/2008, Unique Registration Code: 24062205. For the purposes of this policy, SC TONUSPLUS SRL is the controller of your personal data.

For any questions or requests regarding your personal data, you can contact us at:

• Email: longevityplus@gmail.com
• Phone: +4 0754 398 127
• Address: B-dul. ALEXANDRU CEL BUN nr. 29, Iasi, Iasi County

4.1. We collect personal data that you provide directly, including:

• First and last name
• Profile photo
• Phone number
• Email address
• Relevant medical information (for example, X-rays, symptoms, diagnoses)
• Financial/banking data needed to process payments
• Identification data (for example, the series and number of your identity document)

4.2. We also automatically collect technical data, such as IP address, browser type and pages visited, to improve the user experience.

The data collected is used for:

• Scheduling and managing sessions
• Providing the services
• Communicating with clients
• Managing client relationships and pursuing legitimate interests
• Sending personalised offers and services, contests and promotional campaigns (with your consent)
• Complying with legal and regulatory obligations

We process your personal data on the following legal grounds:

• Performance of a contract to which you are a party (for example, providing the services you requested)
• Compliance with a legal obligation (for example, reporting to authorities)
• Your explicit consent for certain types of processing (for example, sending marketing communications)
• Our legitimate interest (for example, improving the services we offer)

7.1. We do not sell or rent your personal data to third parties.

7.2. We may share your data with:

• Medical service providers and partner laboratories involved in providing the services you requested
• Insurance companies, for reimbursements or discounts
• IT service providers that maintain and secure our systems
• Public authorities, when necessary to comply with legal obligations

In general, your personal data is stored and processed within the European Union. If, exceptionally, data needs to be transferred outside the EU, we will ensure that appropriate safeguards are in place in accordance with applicable data protection law.

We keep your personal data for as long as necessary to fulfil the purposes set out in this policy and in accordance with applicable legal requirements. In the absence of specific legal requirements, medical data is kept for up to 20 years from the last visit.

You have the following rights regarding your personal data:

• The right of access to your personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure of data (“the right to be forgotten”)
• The right to restriction of processing
• The right to object to processing
• The right to data portability

To exercise these rights, please contact us using the contact details above.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or disclosure. All our employees and collaborators are trained and required to respect the confidentiality of your data.

We reserve the right to update this privacy policy periodically. Any change will be published on our web portal, and continued use of our services constitutes acceptance of the updated policy.

For questions or requests regarding this privacy policy or how we handle your personal data, please contact us using the contact details above.

By using our web portal, you confirm that you have read, understood and accepted this Privacy Policy.