Privacy Policy

Privacy Policy

This website is operated by InBody Europe B.V., Gyroscoopweg 122, 1042 AZ Amsterdam, The Netherlands.

We take your privacy very seriously and process your personal data in accordance with the General Data Protection Regulation (GDPR). Please read this privacy policy carefully, as it contains important information about:

• The personal data we collect about you

• The reasons and legal basis for processing your personal data

• Security measures

• With whom your personal data may be shared

• The rights you have regarding the processing of your personal data

We are the data controller (meaning we are responsible for controlling and processing your personal data).

You can contact us via:

By post:
Data Processing Manager Mr. Billy Nam
Gyroscoopweg 122
1042 AZ Amsterdam
The Netherlands

By email: healthcare.cs.eu@inbody.com

By phone: +31 (0)20 238 6080

---

What Personal Data Do We Collect?

We collect personal data relating to your visit to our website and your interactions with us, including product support, clinical support, customer service support, and newsletter registration.

The following categories of data may be processed:

Technical customer support:
Device serial number, name, telephone number, email address, address

Contact inquiries:
Name, email address, telephone number, address

Online shop:
Name, email address, telephone number, address

We also collect personal data when you contact us, provide feedback, post material on our website, complete customer surveys, or participate in competitions.

If you are under 16 years of age, your registration and consent must be approved by a person with parental responsibility. You must provide us with that person’s mobile phone number so we can obtain approval. If approval is not received within 10 days, your personal data will be deleted.

---

Personal Data About Other Individuals

If you provide personal data on behalf of someone else (such as a child), you confirm that the individual has authorized you to act on their behalf and has agreed that you may:

• Give consent on their behalf for processing their personal data

• Receive data protection notices on their behalf

---

Reasons and Legal Basis for Processing

We process your personal data for the following purposes:

• Communicating with you about us and/or our products

• Monitoring and recording communications (such as calls and emails) to improve service quality and/or prevent fraud

• Sending newsletters (if subscribed)

• Regulatory compliance and corporate governance

• Supporting regulatory investigations or legal proceedings

• Operational purposes (e.g., recording transactions)

• Training and quality control

• Protecting commercially sensitive information

• Investigating complaints or alleged criminal activity

• Statistical analysis and service improvement

• Providing customer service and marketing

Legal Basis

We process your data based on:

• Performance of a contract

• Pursuit of our legitimate interests (e.g., promoting and selling our products, conducting business, improving services, preventing fraud)

• Compliance with legal obligations (tax laws, healthcare regulations, etc.)

• Consent (for newsletters and marketing communications)

You may unsubscribe from our newsletter at any time.

You are not obliged to provide personal data. However, failure to do so may prevent us from providing website access, responding to inquiries, or contacting you.

We only process personal data for the purposes listed above and do not collect more data than strictly necessary.

---

Security

We take appropriate organizational and technical measures to protect your personal data against misuse, loss, or alteration. Personal data is stored in encrypted form on our servers. Data transmission between our servers and you takes place via a secure encrypted internet connection.

While we make reasonable efforts to protect your data, the internet is not completely secure, and we cannot guarantee the integrity of data transmitted online.

---

Right to Complain

If you have a complaint about our use of your data, we encourage you to contact us first so we can address your concerns. You may also contact the competent supervisory authority in your country.

---

Systems Used for Processing Personal Data

We collect personal data directly from you and via our websites, apps, and technical systems, including:

• Computer networks and connections

• Communication systems

• Hardware and software owned, used, or provided by or on behalf of us

---

Use of Cookies

A cookie is a small text file stored on your device when you use our website or app.

We use:

Functional cookies

These ensure the website functions properly (e.g., account creation).

Analytical cookies

These help us understand how visitors use our website so we can improve it. We analyze data only on an aggregated level, not individually.

We use Google Analytics (Google Inc.) under a data processing agreement. The application has been configured in a privacy-friendly manner in accordance with Dutch Data Protection Authority guidance.

IP addresses are anonymized (the last octet is removed) before storage or processing. Google is not permitted to use or share our analytics data for other purposes.

You can disable cookies in your browser settings, though some website functions may not operate correctly.

Where legally required, prior consent is obtained for cookie usage.

---

Sharing of Personal Data

We may share your data with:

• Companies within our corporate group

• Agents and service providers

• Law enforcement authorities

• A third party acquiring InBody

• Software providers you authorize to access your InBody device data

Transfers Outside the EEA

Your personal data is stored on servers within Europe and will not be transferred outside the EEA without your consent.

---

Retention Periods

Your data is retained in accordance with our retention policy. Generally, we retain data until you request deletion. Longer retention may apply where legally required.

---

Your Rights

You have the right to:

• Access your personal data

• Request correction of inaccurate data

• Request deletion in certain circumstances

• Receive your data in a structured, commonly used, machine-readable format (data portability)

• Object to processing for direct marketing

• Object to processing in certain circumstances

• Restrict processing in certain circumstances

• Withdraw consent at any time

To exercise your rights, contact our Data Protection Manager and provide sufficient identification details.

You may also file a complaint with privacy.eu@inbody.com or with the Information Commissioner’s Office or your local supervisory authority.

---

Changes to This Policy

We may update this privacy policy from time to time. Updates will be published on our website.

---

Contact Us

If you have questions about this privacy policy or your personal data:

Email: privacy.eu@inbody.com
Address: Gyroscoopweg 122, 1042 AZ Amsterdam, The Netherlands
Phone: +31 20 238 6080

---

Last updated: September 2025