Legal

Privacy policy

Last updated: 13 October 2026

In short: we collect only the data you give us yourself, through the waiting-list form or by email. We use it to contact you about Longevity House. We do not sell it to anyone. You can ask us to delete it at any time by writing to hello@longevity-house.pl.

1. Who is the controller of your data

The controller of your personal data is LONGEVITY HOUSE SILESIA spółka z ograniczoną odpowiedzialnością, with its registered office at ul. Nowogrodzka 31, 00-511 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register under number KRS 0001238200, NIP 7011311173, REGON 544607666, registry files kept by the District Court for the Capital City of Warsaw, 12th Commercial Division.

For anything concerning personal data, write to hello@longevity-house.pl or to the registered address above. We have not appointed a data protection officer; requests are handled directly by the company management.

2. What data we collect and why

Waiting-list form First name, last name, email address, optionally company and role, the chosen stay format and the content of your message. We process it to answer your enquiry, run the waiting list and tell you when bookings open. Legal basis: Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in running the list and contacting interested people).
Marketing consent If you tick the separate box, we will also use your email address to send you information about the programme, dates and Longevity House events. Legal basis: Art. 6(1)(a) GDPR (your consent) and Art. 398 of the Polish Electronic Communications Law of 12 July 2024. You can withdraw this consent at any time, without affecting the lawfulness of processing before withdrawal: one email, or the link at the bottom of any message, is enough.
Correspondence The data you give us when writing to us directly by email. We process it to conduct and document the correspondence. Legal basis: Art. 6(1)(f) GDPR.
Technical data Our hosting provider records standard server logs (IP address, browser type, time of request). These serve security and the correct operation of the site only. Legal basis: Art. 6(1)(f) GDPR.

3. Health data

We do not collect health data through this website and we ask you not to put it in the form or in a message. Health information is collected only at the medical qualification stage, by licensed healthcare providers: our clinical partners, who are then separate controllers of that data and inform you about their own processing rules in their own documents. Longevity House is not a medical provider.

4. Who we share data with

We do not sell your data and we do not share it with third parties for their marketing. It may be entrusted only to the providers that support us technically:

Some of these providers are established outside the European Economic Area. In that case the transfer takes place on the basis of standard contractual clauses approved by the European Commission, or another mechanism provided for in Chapter V GDPR.

5. How long we keep your data

6. Your rights

At any time you have the right to: access your data and obtain a copy of it, rectify inaccurate data, have data erased, restrict processing, data portability, object to processing based on our legitimate interest, and withdraw consent where processing is based on it.

To exercise any of these rights, write to hello@longevity-house.pl. We reply without undue delay and in any case within one month. If you believe we process your data unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

7. Cookies and browser storage

This site does not use cookies for analytics, profiling or advertising. We do not embed tracking scripts or advertising pixels. The site stores only your language choice in your browser local storage; that information is never sent anywhere and you can remove it by clearing site data in your browser. Fonts are loaded from Google Fonts servers, which means your device IP address is disclosed to Google when the page loads.

8. Security

The site runs entirely over an encrypted HTTPS connection. Only authorised people within the company have access to form submissions. We apply organisational and technical measures appropriate to the risk, including limiting access to data to the necessary minimum.

9. Changes to this policy

We may update this policy, for example when we change the scope of our services or our providers. The current version is always available at this address and the date of the last update is shown at the top of the page.