1. Controller
LipoCellTech B.V., Kerkplein 9-G, 3764 AW Soest, The Netherlands. Contact: info@lipocelltech.com, +31 (0)35 3039 150.
2. Data processed
Depending on how you use the platform, we process contact and company data, order and shipping data, contract and partner data, technical connection data and information submitted through forms or the portal. Referral visits may include partner code, visitor/session identifiers, timestamps, destination pages and security signals. M.A.R.C. does not use raw IP addresses as attribution identifiers; hashed values may be used where technically necessary.
3. Purposes and legal bases
Data is processed to respond to enquiries, perform orders and contracts, manage partners and commissions, prevent fraud and abuse, secure the platform, meet legal obligations and improve services where lawful. Legal bases include contract performance/pre-contractual steps, legal obligations, legitimate interests and consent where required.
4. Service providers
Hosting is provided through Hostinger infrastructure. Database, authentication and server-side functions use Supabase. Cloudflare Turnstile may protect public forms. Cloudflare Workers AI is used only for AI functions explicitly enabled. Email is sent via the SMTP provider configured in the portal. YouTube videos are loaded in the internal viewer through youtube-nocookie.com only when opened.
5. Referral and affiliate system
A valid partner link may store a referral code so an enquiry or order can be attributed correctly. LocalStorage/session storage and server-side attribution events may be used. This supports recommendation attribution, customer price advantages and agreed partner commissions. A recommendation does not increase the displayed customer price.
6. Cookies and local storage
Technically required local storage is used for language, theme, cart and referral context. Non-essential analytics or marketing technologies are used only if actually enabled and legally permitted.
7. Recipients and international transfers
Only parties requiring the data for the stated purposes receive access. Where providers process data outside the EEA, appropriate GDPR safeguards are used where required.
8. Retention
Data is retained only as long as necessary for the purpose, contract performance, security interests or statutory retention obligations and is then deleted or anonymised where possible.
9. Your rights
Subject to the GDPR, you may have rights of access, rectification, erasure, restriction, portability and objection. Consent may be withdrawn for the future. You may also lodge a complaint with a competent data protection authority.
10. Security and updates
We use technical and organisational safeguards and restrict privileged access. This notice is updated when functions, providers or legal requirements change.