Educational resource only — we do not sell supplements or medical products. Content is general nutrition information, not medical or dietary advice. Outcomes vary by individual. Consult a qualified professional before dietary changes.
Vivolivingia.ddd logo

Privacy Policy

Last updated: 8 June 2026

1. Data Controller

The data controller responsible for your personal data is:

Vivolivingia.ddd
Coolhaven 104a, 3024 AJ Rotterdam, Netherlands
KVK: 71753044
BTW: NL8588.35.599.B02
Email: reachus@vivolivingia.world
Phone: +31 6 20747889

2. Scope and Applicable Law

This Privacy Policy describes how we collect, use, store, and protect personal data when you visit vivolivingia.world or contact us. We process personal data in accordance with:

  • the General Data Protection Regulation (EU) 2016/679 (GDPR);
  • the Dutch GDPR Implementation Act (Uitvoeringswet Algemene verordening gegevensbescherming, UAVG);
  • the Dutch Telecommunications Act (Telecommunicatiewet), where cookies and similar technologies are involved;
  • the Dutch Civil Code (Burgerlijk Wetboek) and EU consumer protection rules where relevant to our communications with you.

This policy fulfils our information obligation under GDPR Articles 13 and 14 and the corresponding provisions of the UAVG. We do not process special categories of personal data as defined in GDPR Article 9, and we do not carry out automated decision-making or profiling within the meaning of GDPR Article 22.

2.1 Website Purpose and Online Advertising

Vivolivingia.ddd is an educational publisher of free articles about food and nutrition. We do not sell supplements, vitamins, or medical products. We may use online advertising platforms, including Google Ads, to promote our educational content to relevant audiences.

Where advertising or analytics tools are used, we process data only in accordance with this policy and our Cookie Policy. Marketing and analytics cookies require your prior consent under the Dutch Telecommunicatiewet. We do not use contact form or newsletter data for behavioural advertising without separate, explicit consent. Our content and advertising practices are designed to comply with Google Ads policies for healthcare and nutrition information and with Dutch consumer information requirements.

3. Personal Data We Collect

3.1 Data You Provide Directly

  • Contact form: name, email address, message content, and GDPR consent confirmation.
  • Newsletter subscription: email address and explicit consent checkbox submitted via the homepage form.
  • Cookie preferences: your choices regarding analytics and marketing cookies, stored locally in your browser.

3.2 Data Collected Automatically

  • Technical data: IP address (anonymised where analytics cookies are accepted), browser type, operating system, referring URL, pages visited, and timestamps.
  • Cookie data: see our Cookie Policy for details on specific cookies used.

4. Purposes and Legal Bases for Processing

Purpose Legal Basis (GDPR Art. 6) Retention Period
Responding to contact enquiries Consent (Art. 6(1)(a)) / Legitimate interest (Art. 6(1)(f)) 12 months after resolution
Newsletter delivery Consent (Art. 6(1)(a)) Until unsubscribe or 24 months of inactivity
Website functionality and security Legitimate interest (Art. 6(1)(f)) Session duration / 12 months
Analytics (with consent) Consent (Art. 6(1)(a)) 26 months (anonymised aggregates)
Marketing (with consent) Consent (Art. 6(1)(a)) Until consent withdrawn
Legal compliance Legal obligation (Art. 6(1)(c)) As required by applicable law

5. Data Processors and Recipients

We do not sell your personal data. Where we use service providers that process personal data on our behalf, we enter into data processing agreements as required by GDPR Article 28 and the UAVG. Recipients may include:

  • Hosting provider (EU/EEA): website infrastructure, server logs, and form submission storage.
  • Analytics provider (Google): only after you accept analytics cookies; configured with IP anonymisation and Google Consent Mode v2.
  • Email service provider: delivery of newsletter messages and replies to contact enquiries.
  • Competent authorities: Dutch or EU regulators, courts, or law enforcement when we are legally obliged to disclose information.

Transfers of personal data outside the European Economic Area (EEA) take place only where a valid legal mechanism applies, such as an adequacy decision by the European Commission, Standard Contractual Clauses (SCCs), or Binding Corporate Rules. You may request further information about safeguards by contacting us.

6. Obligation to Provide Data

Providing personal data through our contact form or newsletter is voluntary. However, if you do not provide the required fields (name, email, message, and GDPR consent for the contact form), we cannot respond to your enquiry. For newsletter subscription, only an email address is required. Failure to accept strictly necessary cookies may limit certain website functions; optional analytics and marketing cookies are never required to use the site.

7. Your Rights Under GDPR and the UAVG

As a data subject, you have the following rights under GDPR and the UAVG:

  • Right of access (Art. 15): obtain confirmation of whether we process your data and receive a copy.
  • Right to rectification (Art. 16): request correction of inaccurate or incomplete data.
  • Right to erasure (Art. 17): request deletion where processing is no longer lawful or necessary.
  • Right to restriction (Art. 18): request limited processing in specific circumstances.
  • Right to data portability (Art. 20): receive data you provided in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
  • Right to object (Art. 21): object to processing based on legitimate interests, including direct marketing at any time.
  • Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

To exercise your rights, send a request to reachus@vivolivingia.world. We may ask you to verify your identity before responding. We will reply within one month of receipt, as required by GDPR Article 12. This period may be extended by two further months where necessary due to complexity; we will inform you of any extension and the reasons within the initial one-month period.

Requests are generally free of charge. Where a request is manifestly unfounded or excessive, we may charge a reasonable fee or refuse the request in accordance with GDPR Article 12(5).

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens (AP)
Bezuidenhoutseweg 30, 2594 AV Den Haag, Netherlands
Website: autoriteitpersoonsgegevens.nl
Telephone: +31 70 888 8500

8. Direct Marketing and Newsletter

We send newsletters only to individuals who have actively subscribed and given consent. Each marketing email includes a clear unsubscribe link. You may also withdraw marketing consent by emailing us. We maintain a suppression list to ensure unsubscribed addresses are not contacted again. Processing for direct marketing is based on your consent (GDPR Art. 6(1)(a)) and you may object to such processing at any time without cost.

9. Data Security and Breach Notification

We implement appropriate technical and organisational measures to protect your personal data, including:

  • HTTPS encryption for all data transmitted between your browser and our servers.
  • Access controls limiting personal data access to authorised personnel only.
  • Regular security reviews of our hosting infrastructure.
  • Encrypted storage of contact form submissions.
  • Prompt deletion of data that is no longer required for its original purpose.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the Autoriteit Persoonsgegevens within 72 hours where required by GDPR Article 33, and inform affected individuals without undue delay where required by GDPR Article 34.

10. Children's Data

Our website is not directed at children under 16 years of age, which is the minimum age of digital consent in the Netherlands under GDPR Article 8 read with the UAVG. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Record of Processing Activities

As a data controller, we maintain an internal record of processing activities as required by GDPR Article 30. This record documents the categories of processing, purposes, data subjects, recipients, retention periods, and security measures applied to personal data processed through this website.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in Dutch or EU law, guidance from the Autoriteit Persoonsgegevens, or our processing practices. Material changes will be communicated via a prominent notice on our website before they take effect. The date at the top of this page indicates the latest revision.

13. Contact

For any privacy-related questions or to exercise your rights, contact our data controller at:

Vivolivingia.ddd
Coolhaven 104a, 3024 AJ Rotterdam, Netherlands
KVK: 71753044 | BTW: NL8588.35.599.B02
Email: reachus@vivolivingia.world
Phone: +31 6 20747889