Privacy notice
How personal information is handled when you visit Aesthetic Times or contact the editorial office.
Who is responsible
The person responsible for this website is identified in the publisher and contact details on this page. Please use the listed contact address for questions about the processing of your personal information.
Accessing the website
The public website is delivered through Linevast in Germany. Access generates technically necessary connection data, such as IP address, access time, requested address and browser information. These data support delivery, troubleshooting and security.
Processing is based on the legitimate interest in providing a secure information service under Article 6(1)(f) of the GDPR. Technical logs are retained only for as long as required by the relevant security or troubleshooting purpose.
The editorial system
Published pages and the editorial database are operated on our web hosting. International press feeds may be retrieved server-side through OpenAI Sites. Visitors’ personal sign-in details and cookies are not passed to that service.
Editorial staff sign in on this domain using their own credentials. Access uses a technically necessary session cookie with Secure, HttpOnly and SameSite protections over HTTPS. Passwords are stored only as cryptographic hashes. Sessions end after two hours of inactivity and, in all cases, after twelve hours.
To prevent abuse, sign-in attempts are recorded using a hash derived from the IP address and the editorial account. Attempts are assessed within a 15-minute rate-limit window. Entries outside that window no longer count toward the limit and are removed when the stored attempt log is next updated.
The connected editorial system stores content and article revision histories, including author and contact details and publication approvals. For authorised editorial access, it also receives the editor’s account email address and a request-verification token (CSRF token). Passwords and session cookies are not forwarded to it.
Contact, site assets and links
When you email us, we process the information you provide to handle your enquiry. It is deleted when that purpose no longer applies, unless legal retention obligations require otherwise.
We use no first-party analytics or advertising trackers and no tracking cookies on the public website. Fonts and images are served through our own domain. External links open the respective provider’s website.
Your rights
Subject to the GDPR, you have rights of access, rectification, erasure, restriction, data portability and objection. You may contact us using the details on this page or lodge a complaint with the Belgian Data Protection Authority.
Autorité de protection des données / Gegevensbeschermingsautoriteit
