Privacy Policy
1. Introduction
We appreciate your interest in our online store. Protecting your personal data is of utmost importance to us.
This Privacy Policy informs you about the processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.
2. Data Controller
The controller responsible for data processing on this website is:
SKINSDIAMOND Institution FZCO
Dubai Silicon Oasis DDP
341041 Dubai
United Arab Emirates
Email: info@longevitycullinan.com
3. Processing of Server Log Data
When visiting our website, information relating to access to the website is automatically stored in server log files. Such information may include:
-
IP address of the requesting device;
-
Date and time of access;
-
Name and URL of the retrieved file;
-
Referrer URL;
-
Browser type and operating system.
This data is technically necessary to display the website correctly and to ensure its stability and security.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in maintaining the security and functionality of the website).
Retention period: This data is automatically anonymized after seven (7) days unless it is required for investigating security-related incidents.
4. Hosting and Provision of the Website
Our website is hosted by Webflow. Webflow stores data on servers located in the United States. Data processing is carried out on the basis of Standard Contractual Clauses pursuant to Article 46 GDPR approved by the European Commission to ensure an adequate level of data protection.
Further information can be found in Webflow’s Privacy Policy: https://webflow.com/legal/privacy
Our domain is hosted by Checkdomain, which does not process any additional personal data.
Legal basis: Article 6(1)(b) GDPR (performance of a contract).
SSL Encryption
To protect the transmission of your data, our website uses SSL encryption.
5. Categories of Data Collected and Purposes of Processing
a) Analytics and Statistical Information
Webflow provides us with the following analytical data:
-
IP address;
-
Page views;
-
Session duration;
-
Bounce rate;
-
Traffic sources;
-
Device information;
-
Browser information;
-
Geographic information.
This information is processed to analyze the use of our website and optimize its content.
Legal basis: Article 6(1)(a) GDPR (consent).
Analytics are only performed after obtaining your consent via our cookie banner.
Retention period: Data is retained in accordance with Webflow's retention policies.
Payment Service Providers (PayPal and Stripe)
We use PayPal and Stripe to process payments. When using these services, your payment information (e.g., credit card details or bank account information) is transmitted directly to the respective provider.
PayPal Privacy Policy: https://www.paypal.com/webapps/mpp/ua/privacy-full
Stripe Privacy Policy: https://stripe.com/privacy
Data processing is carried out solely for the purpose of payment processing.
Legal basis: Article 6(1)(b) GDPR (performance of a contract).
b) Error Tracking
Webflow utilizes internal logging systems for error analysis (e.g., server errors). Such information is not directly shared with us and is used exclusively for system maintenance purposes.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring website functionality).
Retention period: Error logs are deleted by Webflow after a maximum period of thirty (30) days.
c) Content Delivery Network (CDN)
Static content, such as images, CSS files, and JavaScript resources, is delivered through Fastly, a Content Delivery Network (CDN).
Fastly processes data globally in order to optimize loading times. Servers are also located within the European Union.
Legal basis: Article 6(1)(f) GDPR (legitimate interest in ensuring fast and secure content delivery).
Retention period: No personal data is permanently stored.
d) Google Fonts and Adobe Fonts
Our website uses Google Fonts and Adobe Fonts, which are loaded from external servers. As a result, your IP address may be transmitted to Google or Adobe.
Further information:
Google Fonts: https://fonts.google.com/about
Adobe Fonts: https://www.adobe.com/privacy/policies/adobe-fonts.html
Legal basis: Article 6(1)(a) GDPR (consent).
International Data Transfers: Google and Adobe rely on Standard Contractual Clauses to ensure an adequate level of data protection, as certain servers are located in the United States.
Retention period: Data is processed in accordance with the respective providers’ privacy policies.
e) Contact Form
If you contact us through our contact form, the information you provide (such as your name, email address, and message) will be processed for the purpose of handling your inquiry.
Legal basis: Article 6(1)(b) GDPR (performance of a contract or pre-contractual measures) or Article 6(1)(f) GDPR (legitimate interest in responding to inquiries).
Retention period: Data is deleted once your inquiry has been fully processed unless statutory retention obligations apply.
f) Orders
When placing an order, we collect personal information including:
-
Name;
-
Billing address;
-
Shipping address;
-
Payment information;
-
Purchased products.
This data is processed for order fulfillment and contractual performance.
Legal basis: Article 6(1)(b) GDPR.
Retention period: Order-related data is retained in accordance with statutory retention obligations (six years pursuant to Section 257 German Commercial Code (HGB) and ten years pursuant to Section 147 German Fiscal Code (AO)).
g) Customer Account
If you create a customer account, we process your login credentials (e.g., username, email address, password) and optional information such as billing and shipping addresses.
This facilitates the use of our website and future purchases.
Legal basis: Article 6(1)(b) GDPR.
Retention period: Data will be deleted when your customer account is deleted, unless statutory retention requirements apply.
h) Social Media Links
Our website contains links to our social media profiles, including:
-
Instagram
-
LinkedIn
-
Facebook
When clicking on these links, you leave our website and are redirected to the respective platform.
No data is transmitted to social networks through our website itself.
Please refer to the privacy policies of the respective providers.
i) Newsletter
If you subscribe to our newsletter, we process your email address in order to send you information regarding offers, products, and updates.
Legal basis: Article 6(1)(a) GDPR (consent).
Retention period: Your data will be deleted once you unsubscribe from the newsletter, unless legal retention obligations apply.
Withdrawal of Consent: You may withdraw your consent at any time by clicking the unsubscribe link contained in each newsletter.
6. Transfers of Data to Third Countries
The use of Webflow, PayPal, and Stripe may require the transfer of personal data, including IP addresses, to the United States.
Such transfers are carried out based on Standard Contractual Clauses pursuant to Article 46 GDPR in order to ensure an adequate level of data protection.
7. Cookies
Cookies help make websites more efficient and secure. Cookies cannot execute programs or transmit viruses to your device.
Types of Cookies
We use the following categories of cookies:
Necessary Cookies
These cookies are essential for the operation of the website and enable basic functions such as page navigation and access to secure areas.
Without these cookies, the website cannot function properly.
Legal basis: Article 6(1)(f) GDPR.
Functional Cookies
These cookies allow us to provide enhanced functionality, such as remembering your preferences (e.g., language settings or region).
Legal basis: Article 6(1)(a) GDPR.
Analytics and Performance Cookies
These cookies collect information regarding website usage, including:
-
Number of visitors;
-
Most frequently visited pages;
-
User navigation behavior.
The information helps us improve the functionality and performance of our website.
Legal basis: Article 6(1)(a) GDPR.
Cookie Consent
Upon your first visit, we ask for your consent through a cookie banner before using cookies that are not strictly necessary.
You may change or withdraw your cookie preferences at any time by clicking the cookie icon located in the footer of our website.
Additional information about individual cookies is available via the information icon displayed within the cookie settings panel.
Storage Duration and Cookie Control
The storage duration depends on the type of cookie used.
Session cookies are deleted when you close your browser, while persistent cookies remain stored on your device for a specified period.
You may delete cookies manually or restrict their use through your browser settings at any time.
Please note that restricting cookies may affect certain functionalities of our website.
8. Rights of Data Subjects
Under the GDPR, data subjects have the following rights:
-
Right of Access (Article 15 GDPR);
-
Right to Rectification (Article 16 GDPR);
-
Right to Erasure (Article 17 GDPR);
-
Right to Restriction of Processing (Article 18 GDPR);
-
Right to Data Portability (Article 20 GDPR);
-
Right to Object (Article 21 GDPR).
To exercise your rights, please contact us at:
Right to Lodge a Complaint
If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with a competent supervisory authority.
9. Data Retention
Personal data will be retained only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable legal retention obligations.
10. Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy in the event of changes in legal requirements or modifications to our services.
The current version of this Privacy Policy is always available on our website.