Effective Date: 2 April 2026

1. Introduction

This GDPR Policy explains how Aesthetic Labs EU SRL complies with the General Data Protection Regulation (EU) 2016/679.

2. Data Processing Overview

We process personal data strictly for:

• Order processing and fulfillment
• Shipping and logistics
• Customer communication
• Legal compliance

3. Data Processing Partners

We work with:

• HELPSHIP SRL – order fulfillment
• Courier companies (DHL, GLS, etc.) – delivery
• Payment processors

All partners comply with GDPR requirements.

4. Legal Basis

Processing is based on:

• Contractual necessity (Art. 6(1)(b))
• Legal obligations
• Legitimate interest

5. Data Storage

Data is stored securely on:

• Website platform (Shopify / WooCommerce / WordPress)
• Fulfillment systems (Helpship)
• Secure cloud infrastructure

6. Data Access Control

Access is restricted to:

• Authorized staff only
• Verified third-party partners

7. Data Protection Measures

We apply:

• Encryption protocols
• Secure servers
• Access controls
• Regular monitoring

8. User Rights

Users can request:

• Data access
• Correction
• Deletion
• Restriction

📩 Contact: support@aestheticlabs.eu

9. Data Breach Policy

In case of a data breach, we will:

• Notify authorities within 72 hours (if required)
• Inform affected users where necessary