Effective Date: 2 April 2026
- Introduction
This GDPR Policy explains how Aesthetic Labs EU SRL complies with the General Data Protection Regulation (EU) 2016/679.
- Data Processing Overview
We process personal data strictly for:
- Order processing and fulfillment
- Shipping and logistics
- Customer communication
- Legal compliance
- Data Processing Partners
We may work with trusted third-party service providers for:
- Order fulfillment and logistics
- Courier and delivery services
- Payment processing
- Website, hosting, analytics, and other essential business services
We only share personal data with third parties where necessary to provide our services, process orders, complete payments, or meet legal and operational requirements. Where applicable, these service providers are required to comply with GDPR and applicable data protection laws.
- Legal Basis
Processing is based on:
- Contractual necessity (Art. 6(1)(b))
- Legal obligations
- Legitimate interest
- Data Storage
Personal data is stored and processed securely through:
- Our website and e-commerce platform
- Order fulfillment and logistics systems
- Secure cloud-based infrastructure and hosting services
We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, loss, or misuse.
- Data Access Control
Access is restricted to:
- Authorized staff only
- Verified third-party partners
- Data Protection Measures
We apply:
- Encryption protocols
- Secure servers
- Access controls
- Regular monitoring
- User Rights
Users can request:
- Data access
- Correction
- Deletion
- Restriction
📩 Contact: support@aestheticlabs.eu
- Data Breach Policy
In case of a data breach, we will:
- Notify authorities within 72 hours (if required)
- Inform affected users where necessary