Privacy Policy

1. Who We Are (Data Controller)

The data controller responsible for processing your personal data in connection with CEE Longevity Summit & Retreat 2026 and the website ceelongevity.com is:

For any questions regarding the processing of your personal data, please contact us at gcp@go-create.sk.

2. What Personal Data We Collect

Depending on your interaction with our website, we may collect the following categories of personal data:

Partnership inquiry form

• Full name, position, company name, country
• Email address, phone number, website
• Industry/sector, company description
• Partnership preferences, goals, notes and questions

Newsletter subscription

• Email address

Technical data (via cookies — only with your consent)

• IP address (anonymized), browser type and version, device type
• Pages visited, time spent, referral source
• Interactions with forms and buttons

3. Legal Basis for Processing

We process your personal data on one or more of the following legal bases under Article 6(1) of the General Data Protection Regulation (Regulation EU 2016/679, "GDPR"):

• Consent (Art. 6(1)(a)) — newsletter subscription, analytics and marketing cookies
• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) — partnership inquiries and related communication
• Legitimate interest (Art. 6(1)(f)) — website security, fraud prevention, basic functionality
• Legal obligation (Art. 6(1)(c)) — accounting records, tax obligations

4. Purposes of Processing

• Responding to partnership inquiries and managing partner relationships
• Sending newsletters about the event (only with your consent)
• Improving the website and user experience through anonymous analytics
• Measuring the effectiveness of our marketing campaigns (only with your consent)
• Complying with legal obligations

5. Recipients of Your Personal Data

We do not sell your personal data. We share data only with the following categories of recipients, and only to the extent necessary:

• Mailchimp (Intuit Inc., USA) — newsletter delivery, only if you subscribe. Data transferred under Standard Contractual Clauses and the EU–US Data Privacy Framework.
• Google LLC (USA) — Google Analytics for anonymized analytics, only if you consent. EU–US Data Privacy Framework certified.
• Meta Platforms Inc. (USA) — Meta Pixel for advertising measurement, only if you consent. EU–US Data Privacy Framework certified.
• GitHub Inc. (USA) — website hosting (GitHub Pages).
• Public authorities — where required by law.

6. International Data Transfers

Some of our service providers are located outside the European Economic Area (primarily in the USA). Such transfers are protected by Standard Contractual Clauses approved by the European Commission and, where applicable, by the EU–US Data Privacy Framework.

7. Data Retention

• Partnership inquiries: 3 years after last contact, unless a contractual relationship is established
• Newsletter subscribers: until you unsubscribe
• Cookie consent records: 12 months
• Accounting records: as required by Slovak law (typically 10 years)

8. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access (Art. 15) — request a copy of your data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — request deletion of your data
• Right to restriction (Art. 18) — limit how we process your data
• Right to data portability (Art. 20) — receive your data in a structured format
• Right to object (Art. 21) — object to processing based on legitimate interest
• Right to withdraw consent (Art. 7(3)) — withdraw consent at any time without affecting prior processing
• Right to lodge a complaint — with the Slovak Data Protection Office

To exercise any of these rights, contact us at gcp@go-create.sk. We will respond within one month.

9. Supervisory Authority

10. Automated Decision-Making

We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects on you.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. This includes encrypted connections (HTTPS), restricted access controls and regular security reviews.

12. Children's Privacy

Our website and event are intended for adults. We do not knowingly collect personal data from individuals under 16 years of age.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via our website. The "Last updated" date at the top indicates the most recent version.

14. Cookies

For details on the cookies we use, see our Cookie Policy.