MitoSphere

Privacy Policy

Below we inform you about the processing of personal data when using our website and the services offered on it.

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.

1. Controller and Data Protection Officer

The controller within the meaning of Art. 4 (7) GDPR is:

INKA Longevity Lab GmbH
Neuhauser Str. 5
80331 Munich
Email: info@mitosphere.de
Phone: +49 (0) 160 1191183

You can contact our data protection officer at: datenschutz@mitosphere.de

2. Purposes of Processing and Legal Bases

1. Informational Use of the Website

If you use our website purely for informational purposes, we process a range of data with each request that your browser automatically transmits to our web server. This includes your device’s current IP address, date and time of the request, time zone, the specific page or file accessed, HTTP status code, amount of data transferred, as well as the website from which your request originated, your browser, operating system, and language settings.

This data is processed to enable you to use our website (connection setup), ensure system security and stability, and for technical administration and optimization of our website.

Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest).

We also use cookies and third-party services. Further details can be found in section 5.

2. Contact

If you contact us via email, post, telephone, or contact form, we process:

Your contact details (e.g. email, name, address, phone number)
Personal data provided in your request

The data is processed solely for correspondence and handling your request.

Legal basis: Art. 6 (1) sentence 1 lit. f GDPR (legitimate interest).

If your request contains special categories of data (e.g. health data), processing is based on your consent (Art. 9 (2) lit. a GDPR).

Data will be deleted once no longer necessary unless legal retention obligations apply.

Note: Unencrypted email communication carries risks of unauthorized access. For sensitive data (especially health data), please use the contact form or postal mail.

3. Newsletter

If you subscribe to our newsletter, we process your email address to send it. With your consent, we may also process additional data (e.g. name, membership status) for personalization.

Legal basis: Art. 6 (1) sentence 1 lit. a GDPR (consent).

We use a double opt-in procedure. You may withdraw your consent at any time via the unsubscribe link.

4. User Account, Customer and Member Records

To use our booking function or membership, you must register a user account.

We process:

Personal master data (name, gender, date of birth)
Contact data (address, email, phone)
Payment data (e.g. bank or credit card details)
Password
Optional information

Purpose: contract fulfillment, account management, billing, and providing access.

Legal basis:

Art. 6 (1) lit. b GDPR (contract)
Art. 6 (1) lit. f GDPR (legitimate interest)

Health data is processed based on consent (Art. 9 (2) lit. a GDPR).

a. Login

We process:

Login date and time
Email address
Password

Purpose: access to account (contract performance).

b. Membership Area & Health Questionnaire

To book services, you must provide health data via a questionnaire (e.g. height, weight, conditions, medications, allergies).

Legal basis: consent (Art. 6 (1) lit. a, Art. 9 (2) lit. a GDPR).

c. Storage Period

Health questionnaire data: stored for 12 months
Account data: stored during membership/account existence
Deletion: within 4 weeks after request or end of membership
Legal claims: up to 3 years
Legal obligations override deletion

Inactive accounts (33 months): deletion after notification unless reactivated.

3. Recipients of Personal Data

We only share your data:

With your consent
If legally required or permitted

If you book appointments with partner physicians, your data (including health data) is shared with them.

Legal basis:

Art. 6 (1) lit. b GDPR (contract)
Art. 9 (2) lit. a GDPR (consent)

Service providers (processors under Art. 28 GDPR) may also receive data (e.g. hosting, software, TAC for bookings/newsletters).

4. Storage Duration

We store personal data only as long as necessary for the requested services or legal obligations.

5. Cookies

We use cookies to:

Enable technical functionality
Improve user experience
Analyze usage and show advertising

Necessary cookies: based on legitimate interest (Art. 6 (1) lit. f GDPR).
Optional cookies: based on consent (Art. 6 (1) lit. a GDPR).

You can disable cookies in your browser settings.

Google Analytics

Used for website analysis and optimization.

Data may be transferred to the USA
IP anonymization is enabled
Processing only with consent

You can opt out via browser add-on or opt-out cookie.

Google Ads

Used for advertising and measuring campaign success.

Uses cookies for tracking interactions
We receive only aggregated statistics
Data may be transferred to the USA

Legal basis: consent (Art. 6 (1) lit. a GDPR).

Meta (Facebook) Pixel

Used for advertising and audience targeting.

Data collected includes:

Pages visited
Conversions
IP address
Technical device data

Data may be transferred to the USA.

Legal basis: consent (Art. 6 (1) lit. a GDPR).

6. Data Subject Rights

You have the right to:

Access your data (Art. 15 GDPR)
Rectification (Art. 16 GDPR)
Erasure (Art. 17 GDPR)
Restriction (Art. 18 GDPR)
Data portability (Art. 20 GDPR)
Object (Art. 21 GDPR)
Withdraw consent (Art. 7 (3) GDPR)

You may also lodge a complaint with a supervisory authority.

Competent authority:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18, 91522 Ansbach
Email: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de

Status of this Privacy Policy: March 2026