Last updated: 1 September 2026
1. Data controller
The controller responsible for processing data on this website is:
AESTX Aesthetic Systems
Email: info@aestx-systems.com
Full company and address details are currently being finalised and will be added here shortly.
2. General information on data processing
We process personal data only insofar as necessary to provide a functioning website and our content and services. Depending on the processing activity, the legal bases are Article 6(1)(a) GDPR (consent), Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) GDPR (legitimate interests).
3. Hosting and content delivery
This website is hosted by Hostinger International Ltd. . Content is delivered through the content delivery network of Cloudflare, Inc. When you visit the website, server log files are automatically collected, including your IP address, access date and time, page requested, volume of data transferred, browser type and operating system. This processing ensures the secure and stable operation of the website (Article 6(1)(f) GDPR).
4. Consent management (cookie banner)
We use a consent management tool to obtain and document your consent to non-essential cookies and similar technologies. Your choice is stored in your browser. You can withdraw or adjust your consent at any time with future effect using the relevant link in the footer.
Statistics and marketing services are loaded only after you have given your consent.
5. Processing orders in the online store
To process your order, we process the customer and contractual data you provide: name, billing and delivery addresses, email address, order contents and payment information. The legal basis is Article 6(1)(b) GDPR. Commercial and tax retention obligations remain unaffected.
Shipping is handled by DHL (Deutsche Post DHL Group). We provide the shipping carrier with the address and contact details necessary for delivery.
6. Web analytics: Google Analytics 4
With your consent, we use Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies and similar technologies to analyse use of our website. Data collected includes pages visited, time spent, approximate location, device used and interactions in the store, such as product views, cart activity and completed purchases.
Google truncates the IP address and does not combine it with other Google data. Transfer to the USA cannot be ruled out; Google is certified under the EU-US Data Privacy Framework. The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. User and event data is retained for 14 months.
7. Google Tag Manager
To manage the scripts used, we use Google Tag Manager provided by Google Ireland Limited. Tag Manager itself does not collect personal data; it controls the loading of other services according to your consent.
8. Meta Pixel (Facebook & Instagram)
With your consent, we use the Meta Pixel provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. It allows us to measure the effectiveness of our advertisements and show you interest-based advertising on Facebook and Instagram. Information about your use of this website is transmitted to Meta and may be linked to your Meta account.
The legal bases are Article 6(1)(a) GDPR and Section 25(1) TDDDG. For further information, see Meta’s Privacy Policy.
9. Newsletters and email communication
If you subscribe to our newsletter, we process your email address and, optionally, your name. Newsletters are sent using software hosted on our own server. Subscription uses a double opt-in process; the subscription time and IP address are logged as evidence. The legal basis is Article 6(1)(a) GDPR. You can unsubscribe at any time using the link in each email.
We track newsletter opens and link clicks to improve our content.
10. Contacting us
If you contact us through the contact form or by email, we process your information to handle your enquiry. The legal basis is Article 6(1)(b) or (f) GDPR. Data is deleted once it is no longer required for that purpose and no retention obligations apply.
11. Your rights
You have the following rights at any time:
- Access to your stored personal data (Article 15 GDPR)
- Rectification of inaccurate data (Article 16 GDPR)
- Erasure (Article 17 GDPR)
- Restriction of processing (Article 18 GDPR)
- Data portability (Article 20 GDPR)
- Objection to processing based on legitimate interests (Article 21 GDPR)
- Withdrawal of consent with future effect (Article 7(3) GDPR)
To exercise your rights, simply send an informal message to info@aestx-systems.com.
12. Right to lodge a complaint with a supervisory authority
Without prejudice to other remedies, you have the right to lodge a complaint with a data protection supervisory authority, particularly in the Member State of your residence, workplace or the location of the alleged infringement (Article 77 GDPR).
13. Changes to this Privacy Policy
We update this Privacy Policy whenever the legal requirements or services used on this website change.