Privacy Policy

1. Introduction and Responsibility

The protection of your privacy and the legally compliant processing of your personal data are our highest priorities. This Privacy Policy provides comprehensive information about the nature, scope, and purpose of the collection and use of data by:

Data Controller: Renato Bassani,lic.iur - ReBrivia, 4125 Riehen Switzerland

Email: kontakt@rebrivia.com

Website: www.rebrivia.com

2. Legal Basis and Scope

We process personal data in strict compliance with the Swiss Federal Act on Data Protection (FADP/nDSG) and, where applicable, the European Union General Data Protection Regulation (GDPR). This policy applies to all interactions via our website, including the use of analytical tools, newsletter subscriptions, and the utilization of consulting services in the fields of longevity and vitality analysis.

3. Categories of Processed Data

We collect data directly from you (e.g., via forms) or automatically through your visit (technical data).

3.1 Sensitive Personal Data (Health Data)

As part of our biological age consulting, we process data concerning your health (Art. 5 lit. c FADP). This includes:

• Life circumstances, health factors/data, and lifestyle factors.

• Information on nutrition (vital nutrients), stress levels, and fitness.

• Test results (if provided by you). Note: The processing of this data occurs exclusively on the basis of your express consent.

3.2 Technical Data and Logging

With every access to our website, the following data is collected and stored in log files:

• IP address (anonymized), date, and time of access.

• Browser type, version, and operating system.

• Referrer URL (the previously visited page).

3.3 Communication and Master Data

Data you transmit to us via email or contact forms (name, address, email address, phone number).

4. Purpose of Data Processing

We pursue legitimate purposes with the processing of your data:

• Contract Fulfillment: Provision of personalized vitality analyses and coaching.

• Website Optimization: Ensuring the stability, security, and performance of the website.

• Marketing & SEO: Statistical evaluation of user behavior to improve content relevance.

• Legal Protection: Defense against unauthorized claims and compliance with statutory archiving obligations.

5. Use of Cookies and Third-Party Technologies

5.1 Analytical Tools (e.g., Google Analytics 4)

We use GA4 to analyze the use of our website.

• Anonymization: We utilize the IP anonymization function.

• International Transfer: Data may be transferred to servers in the USA. We rely on the Swiss-U.S. Data Privacy Framework and the EU Commission's Standard Contractual Clauses.

5.2 Artificial Intelligence (AI)

We use AI tools for visualization purposes (e.g., cell regeneration graphics).

• AI Data Protection: We do not input personal data of our clients into public AI training models. All inputs are processed anonymously.

5.3 Use of Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies that are stored on your device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the United States and stored there.

Purpose of Data Processing

The data is processed for the purpose of analyzing the use of our website and generating reports on website activity. This information helps us improve our website and optimize our services.

Categories of Data Processed

• IP address (in anonymized form)

• Time of access

• Referrer URL (the website from which the user accesses our website)

• Pages visited and duration of visit

• Geographical data (in anonymized form)

• Device type and operating system

• Browser type and version

IP Anonymization

IP anonymization is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area (EEA). Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and shortened there. This ensures that only an anonymized IP address is processed.

Disclosure of Data

Google processes the collected information on our behalf to evaluate the use of the website, compile reports on website activity, and provide other services related to website and internet usage. Google may transfer this information to third parties where required by law or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google.

Opt-Out Options

You may prevent the storage of cookies by adjusting the settings of your browser software. Please note, however, that in this case you may not be able to use all functions of this website to their full extent.

You may also prevent the collection and processing of data generated by the cookie and related to your use of the website by Google by downloading and installing the Google Analytics Opt-out Browser Add-on, available at:
https://tools.google.com/dlpage/gaoptout

Data Retention Period

The data collected via Google Analytics is stored for a period of 14 months and is automatically deleted thereafter.

Legal Basis for Data Processing

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Art. 13 para. 1 Swiss Federal Act on Data Protection (FADP), as well as our legitimate interest in analyzing and improving the use of our website pursuant to Art. 6 para. 1 lit. f GDPR and Art. 13 para. 1 FADP.

Data Transfer to the United States

The data collected through Google Analytics may be transferred to and processed in the United States. As the United States does not provide a level of data protection equivalent to that of the European Union or Switzerland, such transfers are based on standard contractual clauses entered into by Google to ensure an adequate level of data protection.

Further Information

Further information about Google’s data protection practices can be found at:
https://policies.google.com/privacy

6. Data Disclosure and Sub-processing

Data is only disclosed to third parties:

• To specialized IT service providers (hosting, cloud services) under strict adherence to data processing agreements (Art. 9 FADP).

• To authorities, provided there is a legal obligation.

• We do not sell any data to third parties for advertising purposes.

7. Retention Period and Data Deletion

We store your data only as long as required by the purpose:

• Consulting Records: Generally 10 years (corresponding to the statutory limitation period for professional liability).

• Marketing Data: Until you withdraw your consent.

• Log Data: Automatically deleted or anonymized after 30 to 90 days.

8. Your Rights as a Data Subject

You have extensive rights regarding your data:

• Right of Access: Transparency regarding which data we process.

• Rectification & Erasure: Correction of incorrect data or destruction of data no longer required.

• Data Portability: Delivery of your data in a standard, machine-readable format (Art. 28 FADP).

• Right of Withdrawal: Withdrawal of granted consents with effect for the future.

9. Data Security

We employ state-of-the-art technical and organizational measures (TOM):

• End-to-End Encryption (TLS/SSL).

• Personal data are processed using appropriate security measures, such as encryption.

• Regular backups

Privacy Policy – Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the controller responsible for data processing on this website is located outside the European Economic Area or Switzerland, Google Analytics data processing is carried out by Google LLC. Google LLC and Google Ireland Limited are hereinafter collectively referred to as “Google”.

The statistics obtained enable us to improve our offering and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out using a User ID. If you have a Google user account, you can deactivate the cross-device analysis of your usage in your account settings under “My Data” → “Personal Data”.

The legal basis for the use of Google Analytics is Art. 6(1) sentence 1 lit. f GDPR. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data. Please note that Google Analytics has been extended on this website by the code “_anonymizeIp();” to ensure anonymized collection of IP addresses. As a result, IP addresses are truncated prior to further processing, thereby excluding any personal reference. Insofar as the data collected about you contains a personal reference, this is immediately excluded and the personal data is therefore deleted without delay.

Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide further services related to website and internet usage to the website operator. For the exceptional cases in which personal data is transferred to the United States, Google has submitted to the EU-US Data Privacy Framework (see note below).

Google Analytics uses cookies. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the United States and stored there. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent. You may also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, you can prevent the use of Google Analytics by clicking on this link: [Insert opt-out link here]. This will store a so-called opt-out cookie on your device, which prevents the processing of personal data by Google Analytics. Please note that if you delete all cookies on your device, these opt-out cookies will also be deleted, meaning that you will need to set them again if you wish to continue preventing this form of data collection. Opt-out cookies are set per browser and per device and must therefore be activated separately for each browser, computer, or other device.

In the cookie banner, you can consent to or reject the use of cookies and Google Analytics.

Google Tag Manager

Google Tag Manager Google Tag Manager is a solution that allows us to manage so-called website tags through a single interface, enabling us to integrate services such as Google Analytics and other Google marketing services into our online presence. The Tag Manager itself, which implements these tags, does not process any personal data of the users. Regarding the processing of users' personal data, please refer to the following information on the specific Google services used. Usage policy: https://www.google.com/intl/en/tagmanager/use-policy.html.

Privacy Policy for Facebook

This website uses features provided by Facebook Inc. (Meta Platforms, Inc), 1601 S. California Ave, Palo Alto, CA 94304, USA. When you access our pages using Facebook plugins, a connection is established between your browser and Facebook's servers. During this process, data is already being transmitted to Facebook. If you have a Facebook account, this data can be linked to it. If you do not want this data to be associated with your Facebook account, please log out of Facebook before visiting our site. Interactions, specifically using a comment function or clicking a “Like” or “Share” button, are also passed on to Facebook. You can find out more at: https://www.facebook.com/about/privacy.

Privacy Policy for Instagram

Features of the Instagram service are integrated into our website. These features are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Instagram. For more information, please see Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

Privacy Policy for SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as the inquiries you send to us as the site operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the fact that the browser's address bar changes from "http://" to "https://" and by the lock symbol in your browser bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Privacy Policy for Cookies

This website uses cookies. These are small text files that make it possible to store specific, user-related information on your device while you are using the website. Cookies make it possible, in particular, to determine the frequency of use and the number of users of the pages, to analyze behavior during page use, and to make our offer more user-friendly. Cookies remain stored after the end of a browser session and can be retrieved when you visit the site again. If you do not wish this, you should set your internet browser to refuse the acceptance of cookies.

A general objection to the use of cookies used for online marketing purposes can be declared for a variety of services, especially in the case of tracking, via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by deactivating them in your browser settings. Please note that in this case, you may not be able to use all functions of this online offer.

Hier sind die professionellen Übersetzungen deines Datenschutz-Hinweises in Englisch und Italienisch. Beide Fassungen sind präzise auf die rechtliche Terminologie (DSGVO/nDSG) abgestimmt und in einer sachlichen, professionellen Form verfasst.

Use of HeyGen Videos

This website embeds videos provided by the platform HeyGen (operated by HeyGen Inc., 12130 Millennium Dr, Suite 300, Los Angeles, CA 90094, USA).

Nature and Scope of Processing

A privacy-friendly integration (the so-called "two-click solution") is used. This means that when a page containing a HeyGen video is accessed, no connection to HeyGen's servers is established initially.

Only when the "Play Video" button is actively clicked is consent given for data transmission. At that moment, the video is loaded and HeyGen receives, at a minimum, the IP address, information about the browser, the operating system, and the information that this website has been visited.

Purpose of Processing

The use of HeyGen serves to make the information provided on health and vitality topics attractive and interactive.

Legal Basis

Data processing is carried out on the basis of consent in accordance with Art. 6 (1) (a) GDPR (EU) and Art. 6 (6) nDSG (Switzerland).

Data Transfer to Third Countries

By activating the video, consent is simultaneously given for the transfer of data to the USA. The USA is classified by the Federal Data Protection and Information Commissioner (FDPIC) and according to EU standards as a country with an insufficient level of data protection.

There is a risk that US authorities may access data for control and monitoring purposes without effective legal remedies being available.

Revocation

Consent can be revoked at any time by reloading the page or deleting cookies. Further information can be found in HeyGen's privacy policy: https://www.heygen.com/privacy.

Provision of Audio Content via Google Drive

This website provides audio content (e.g., the ReBrivia Audio Guide) stored on Google Drive servers. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure data protection, the integration is configured such that no connection to Google’s servers is established upon merely accessing the website. Data processing and the transmission of the user's IP address to Google are only triggered at the moment one actively clicks on the audio link or the play button.

By clicking, a connection to Google’s servers is established. During this process, the IP address is transmitted to Google, and it may be recorded which specific subpage was visited. This occurs regardless of whether one is logged into a Google account or not. As Google is a U.S.-based company, a transfer of data to servers in the United States cannot be ruled out.

This service is used on the basis of Art. 6 (1) (f) GDPR. There is a legitimate interest in offering information on health and supplementation in a contemporary format, whereby data processing only takes place through active user interaction. If consent has been obtained via a consent tool, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR.

Further information regarding the handling of user data can be found in Google’s Privacy Policy: https://policies.google.com/privacy.

Use of Affiliate Programs and Discount Codes

The website operator participates in affiliate programs from Norsan, Vitaminfit, and Sunday Natural. In this context, affiliate links and specific discount codes are provided. By using these codes, site visitors receive discounted terms on their purchases. To ensure the correct allocation of the discount and commission settlement, information is transmitted to the respective partners when links are clicked or codes are entered.

• Legal Basis (EU/GDPR): Our legitimate interest in the economic exploitation of our offer (Art. 6 para. 1 lit. f GDPR) as well as your consent via the cookie consent banner (Art. 6 para. 1 lit. a GDPR).

• Legal Basis (Switzerland): Data processing is carried out lawfully within the meaning of Art. 6 revDSG for the provision of our online services.

• Storage Duration: Tracking cookies are generally deleted automatically after 30 to 60 days, unless you remove them manually beforehand.

Scope of Data Transmission for Affiliate Links and Discount Codes

To technically enable commission settlement and the granting of discounts, the following information is transmitted to the partners (Norsan, Vitaminfit, Sunday Natural) when using partner links or entering discount codes:

• Referrer URL: Information regarding the specific page of the website from which the click originated.

• Timestamp: Date and time of the click or purchase.

• Online Identifiers: IP address (usually anonymized/truncated) as well as specific cookie IDs or click IDs that allow for a unique attribution of the purchase.

• Transaction Data: If applicable, the shopping cart value or the products ordered (without the buyer's real name) to calculate the amount of the commission and the discount.

Buttons and links to the partners NORSAN, Sunday Natural, and VitaminFit are used on the website. These are simple redirects.

• Process: A data transfer only takes place if you actively click on the corresponding button or link. You then leave the ReBrivia website and are redirected to the target page of the respective provider.

• Transmitted Data: By clicking, technical data is transmitted to the provider. This includes, in particular, your IP address and the information that you have come via ReBrivia (referrer URL). This is necessary so that the provider can recognize that a referral has been made by ReBrivia.

Data Recipients & Locations:

• NORSAN (San Omega GmbH): Germany (EU)

• Sunday Natural (Sunday Natural Products GmbH): Germany (EU)

• VitaminFit (VitaminFit B.V.): Netherlands (EU)

Responsibility: Once you are on the partner's website, their own privacy policies apply. We have no influence on how these providers further process your data after the click.

The website operator does not merge this data with other personal data. The partners process this data according to their own privacy policies to ensure the proper processing of the partner program.

Privacy Policies of the Respective Partners:

• Norsan: https://norsan.de/datenschutz/

• Vitaminfit: https://www.vitaminfit.eu/de/service/privacy-policy/

• Sunday Natural: https://www.sunday.de/en/privacy-policy/

Medical Disclaimer: The contents of this website do not constitute medical advice. We assume no liability for the correctness, accuracy, or completeness of the information provided. Liability claims against the author regarding material or non-material damage caused by the access to or use of the information published are hereby excluded.