Privacy Policy

This policy explains how the personal data collected through this site is processed, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

The data controller is AI LAB L.L.C-FZ, Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates.

Tax identifier: TRN 105142922100003. The TRN (Tax Registration Number) is an identifier issued by the authorities of the United Arab Emirates: it is not a VAT number and not an EU VAT identification number.

For any matter concerning the processing of your data you can write to info@aurabeauty.app.

Representative in the European Union (Art. 27 GDPR)

The data controller, not being established in the European Union, has designated its representative in the Union under Article 27 GDPR: PERLA BEAUTY SRL, Via Cappuccio 11, 20123 Milano, Italy.

The representative acts as a point of contact for data subjects and for supervisory authorities on matters relating to the processing of personal data.

To exercise your rights, or for any request, you can write to info@aurabeauty.app.

Data we collect

Through the contact form we collect your name, your business name (optional), your email address, the message you choose to write to us (optional) and the language of the page you sent the request from.

Name, email address and consent are necessary in order to act on your request. The other fields are optional and leaving them empty has no consequence, other than a less targeted reply from us.

Your IP address is also processed for technical and security reasons: it is data that any connection to a web server generates automatically. Besides being processed by the infrastructure serving this site, when you submit the form it is used to limit the number of submissions allowed from the same address within a given interval of time, as protection against automated abuse. For that check the IP address is not kept beyond the time needed to carry it out, and it is never used to identify or profile you.

Why we process your data

We process the data you send us for a single purpose: to answer your commercial request for information or for a product demonstration, to get back to you and to continue the conversation you started.

We do not use your data for profiling, we do not take automated decisions concerning you, and we do not transfer or sell it to third parties for marketing purposes.

Legal basis for processing

The legal basis is your consent, given freely, specifically and on an informed basis by ticking the box in the form before submitting it: Article 6(1)(a) GDPR.

Consent is optional. Withholding it only means you cannot submit the form, and carries no other consequence.

You can withdraw your consent at any time by writing to info@aurabeauty.app. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

How long we keep your data

We keep the data collected through the form for 24 months from the last communication between you and the controller concerning your request.

This period reflects the typical length of a commercial evaluation cycle in our sector: a demo request can turn into a decision several months later, and a shorter period would stop us from picking the conversation up where it left off. After 24 months the data is deleted.

If you withdraw your consent or ask for erasure, the data is deleted straight away, without waiting for that deadline.

Who we share your data with

Your data is not disseminated. Besides the controller's staff handling commercial enquiries, it is accessible to the providers listed here, which process it on our behalf as processors under Article 28 GDPR.

Web3Forms: delivery of the messages sent through the contact form. It receives the form data for the sole purpose of forwarding it to the controller's mailbox.

Cloudflare: site hosting, content delivery network (CDN) and cookieless usage statistics. It processes technical connection data, including the IP address.

We use no other providers to process the data collected through this site.

Transfer of data outside the European Union

The data controller is established in the United Arab Emirates. The data you send us is therefore processed in a country outside the European Union.

The United Arab Emirates are not covered by an adequacy decision of the European Commission under Article 45 GDPR: the Commission has not established that the country offers a level of protection of personal data essentially equivalent to the one guaranteed within the Union.

The transfer takes place on the basis of your explicit consent, under Article 49(1)(a) GDPR. By giving your consent in the form you accept the transfer, having been informed that, in the absence of an adequacy decision and of appropriate safeguards, you may not have the same means of redress available under Union law, and that local authorities may be able to access the data in circumstances that do not match those provided for by the European legal framework.

If you would rather not transfer your data on these terms, do not submit the form: consent is free, and withholding it has no other consequence.

Your rights

As a data subject you can exercise the rights set out in Articles 15 to 22 GDPR at any time.

Access: obtain confirmation as to whether your personal data is being processed and, if so, receive a copy of it together with information on the purposes, recipients and retention period.

Rectification: have inaccurate data corrected or incomplete data completed.

Erasure: obtain the deletion of your personal data.

Restriction: ask that processing be restricted to storage only, in the cases provided for by the GDPR.

Portability: receive the data you provided to us in a structured, commonly used and machine-readable format, or ask for it to be transmitted directly to another controller.

Objection: object to the processing of your personal data.

Withdrawal of consent: withdraw the consent you gave at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights write to info@aurabeauty.app. We reply without undue delay and in any case within one month of receiving the request.

Lodging a complaint with a supervisory authority

If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority.

You can address the supervisory authority of the Member State of your habitual residence, of your place of work, or of the place where the alleged infringement occurred.

Cookies and usage statistics

This site uses no profiling cookies, no third-party cookies, and does not track your browsing across other sites.

Usage statistics are collected with Cloudflare Web Analytics, a tool that measures visits without cookies and without device fingerprinting, producing aggregate data that cannot identify you.

Since the site sets no cookies requiring your consent, no cookie consent banner is shown.

Changes to this policy

This policy may be updated to reflect regulatory or organisational changes. The version published on this page is always the one in force.