Version VB-PC-2026-01 · Effective from September 14, 2026 · Replaces the previous version ·

This Policy explains which cookies and similar technologies we use on our Website, what they are used for, who manages them, how long they remain active, and how you can accept them, reject them or change your mind at any time. It supplements the Privacy Policy, which governs the processing of your personal data.

1. What cookies are

1.1 A cookie is a small file that is downloaded to your computer, phone, tablet or other device when you visit a website. It allows the site to recognize your browser and remember information about your visit, such as your language or the fact that you have already signed in, so that you do not have to identify yourself on every page.

1.2 This Policy also covers other technologies with an equivalent purpose, such as pixels, web beacons and local browser storage. When we refer to cookies, we mean all of these technologies.

2. Who is responsible

Controller: GENELINK, S.L., owner of the Vivabioma™ brand. NIF B98649494. Registered address: calle Arquitecto Mora 5, piso 2, puerta 4, 46010 Valencia, Spain. Telephone: +34 960 090 596. Email: info@vivabioma.com. Data Protection Officer: dpo@tellmegen.com.

Vivabioma and tellmeGen are brands of GENELINK, S.L. and share certain corporate systems. The cookie preferences you configure on this Website apply only to this site.

3. What we use cookies for and what we do not do with them

3.1 We use them to ensure that the Website functions properly, to remember your preferences, to measure how the site is used and, only if you consent, to show you advertising tailored to your interests.

3.2 We do not store sensitive information in cookies, such as your password, postal address or payment details.

Cookies and analytics or advertising tools never access your sample, your microbiome analysis data or the content of your reports. This information is processed in a separate environment and is governed by the Informed Consent and the Privacy Policy.

3.3 You can browse the Website without accepting non-essential cookies. Rejecting them does not prevent you from accessing the site or making a purchase, although some personalization features may be limited.

4. Types of cookies we use

4.1 According to who manages them:

•      First-party cookies: managed by us from our own domains.

•      Third-party cookies: managed by another entity that provides us with analytics, advertising or functionality integrated into the Website.

4.2 According to how long they remain active:

•      Session cookies: deleted when you close your browser.

•      Persistent cookies: remain on your device for the period indicated for each one in the preferences panel.

4.3 According to their purpose:

•      Technical or essential cookies: necessary for the Website to function. They allow you to browse, sign in, access private areas, complete an order, maintain security and balance service load. They do not require your consent and cannot be disabled from the panel, although you can block them in your browser, with the resulting loss of functionality.

•      Preference or personalization cookies: remember options such as language, country or display settings.

•      Analytics or measurement cookies: allow us to count visits, identify traffic sources and understand how the Website is used so that we can improve it. They require your consent.

•      Behavioral advertising cookies: record your browsing behavior in order to show you advertisements tailored to your interests, either here or on other sites. They require your consent.

5. Which specific cookies this Website installs

5.1 A detailed and up-to-date list of the cookies we use —including their name, provider, purpose, type and duration— is permanently available in the cookie preferences panel, which can be accessed at any time from the footer of the Website.

5.2 This list is generated and updated automatically whenever the cookies present on the site change, so that it always reflects the actual situation. You can consult it before making a decision and at any later time.

5.3 If you identify a cookie that is not described there, please write to us at dpo@tellmegen.com and we will review it.

6. Legal basis and how we ask for your consent

6.1 The installation and reading of non-essential cookies require your prior consent in accordance with information society services legislation. Any subsequent processing of personal data obtained through them is governed by Regulation (EU) 2016/679 and is explained in the Privacy Policy.

6.2 Technical or essential cookies do not require consent because they are necessary to provide the service you request.

6.3 When you first enter the Website, we display a panel where you can, with the same ease and at the same level, accept all cookies, reject all cookies or configure them by category. Rejecting is as easy as accepting and requires no additional steps.

6.4 Until you make a choice, no cookies other than essential cookies are installed. Closing the notice without choosing does not constitute acceptance, nor does continuing to browse.

7. How to change or withdraw your consent

7.1 You can modify or withdraw your consent at any time from the cookie preferences panel, which is permanently accessible from the footer. Withdrawing consent is as easy as giving it.

7.2 Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before consent was withdrawn.

7.3 After you withdraw consent, the affected cookies will no longer be installed. Cookies already installed can be deleted from your browser as described in section 8.

8. How to manage cookies from your browser

8.1 In addition to the panel, you can allow, block or delete cookies installed on your device through your browser settings. Instructions can be found on the help pages of Google Chrome, Mozilla Firefox, Microsoft Edge, Safari and Opera.

8.2 Please note that blocking cookies in your browser is not the same as withdrawing your consent on our Website: these are different mechanisms, and we recommend using the preferences panel so that your decision is recorded.

8.3 If you block essential cookies, some parts of the Website may stop working properly.

9. Third parties involved

9.1 For measurement functions and, if you consent, advertising functions, we share certain information with specialized providers, including Google, which act in accordance with their own policies and Google's European Union User Consent Policy.

9.2 You can consult Google's privacy and terms page to learn how it uses information from sites that use its services.

9.3 The identity of each third party, its purpose and the link to its policy are shown next to the relevant cookie in the preferences panel.

9.4 These third parties never receive data from your sample, your microbiome analysis or the content of your reports.

10. Retention and renewal of consent

10.1 Each cookie has its own duration, indicated in the preferences panel. Session cookies are deleted when the browser is closed, and persistent cookies expire after the period specified for each one.

10.2 Your cookie choice is retained for a maximum of 13 months. Once that period has elapsed, we will ask for your consent again. We will also ask for it again if the purposes change or if we introduce third parties other than those previously disclosed.

10.3 Personal data obtained through cookies is retained for the periods indicated in the Privacy Policy and is then blocked or deleted.

11. International transfers

11.1 As a general rule, data obtained through cookies is processed by providers located in the European Economic Area or in countries covered by an adequacy decision of the European Commission.

11.2 Where a provider processes data outside the European Economic Area in a country without an adequacy decision, we apply the European Commission's Standard Contractual Clauses together with the relevant impact assessment and any supplementary measures that may be necessary.

11.3 The specific destinations used by each provider and the safeguards applied are identified in the cookie preferences panel. You can request additional information about these safeguards at dpo@tellmegen.com.

11.4 Vivabioma does not sell its customers' personal data to third parties.

12. Your rights

12.1 You may exercise your rights of access, rectification, erasure, restriction, portability and objection in relation to data obtained through cookies by writing to lopd@tellmegen.com, under the terms and within the time limits set out in the Privacy Policy.

12.2 You may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country of residence.

13. Changes to this Policy

13.1 We may update this Policy when the cookies used, the third parties involved, the technology or the applicable legislation changes. Each version has a code and date.

13.2 You may request the version history at dpo@tellmegen.com.

13.3 If a change affects the purposes or introduces new third parties, we will ask for your consent again before installing the relevant cookies.

13.4 For any questions about this Policy: dpo@tellmegen.com.