This Privacy Notice addresses the processing of personal data by eventis. For information on iiaa’s processing of personal data, please see the separate iiaa Privacy Notice.
Who is responsible for eventis’s processing of the personal data?
Which personal data and where does it come from?
What is the personal data used for and why?
Security of your personal data
Your personal data rights
Contact us
Changes to our privacy practices or to your personal data
Who is responsible for eventis’s processing of personal data?
The ‘Data Controller’ is responsible for how personal data is processed (e.g. how it is collected, used and stored in eventis and ensuring it is protected, etc.), and for eventis, there are two Data Controllers:-
- The International Institute for Active-Ageing (“iiaa”), the company that has developed the eventis skincare services and technologies consisting of the LaunchPad, transepidermal water loss probe, Consultation App, and Client App (“eventis”) to the Salon or Treatment Provider; and,
- The Salon or Treatment Provider that uses eventis to provide the individual with analyses and consultations to detect skin problems; offer advice, solutions and care; and, create bespoke treatment plans.
When “we“, “us” or “our” is used below it refers to both Data Controllers collectively.
Which personal data and where does it come from?
The individual is referred to as “the Client”, “I”, “you” and “your” below. The personal data is the information, images, statistics, measurements and other data related to you, that is required by eventis to provide you with an initial consultation for a unique skin analysis to identify skin concerns / imperfections and recommend an unparalleled skin journey (treatment plan); follow-up skin analysis and consultations, and show your skin improvements over time.
This includes your names; contact details; billing and address/es; profile data including username or similar identifier and password; payment information, transaction data and product purchase history; treatment plan and recommended products; marketing communications and cookie preferences; and, device, usage and content data including unique device identifiers, mobile network information, traffic and communication data. It also includes information relating to your skin health and conditions; your overall health including any allergies and medical conditions; your skin analysis images which may identify you and reveal your racial and ethnic origin; and your TEWL measurements; which is recognised by data privacy laws as ‘special category’ data, for which we require your prior explicit consent.
You provide us with most of this personal data directly when you: register to use eventis during your initial consultation with the Salon or Treatment Provider using eventis; install the eventis Client App; make an eventis in-App or in-store product purchase; track your skincare results, view your personal product recommendations or obtain guidance using eventis; and, contact us for assistance or to report a problem with eventis. We may also collect or receive your personal data indirectly and from other sources including third parties (for instance providers of technical, payment and delivery services).
What is the personal data used for and why?
Using eventis: eventis is not intended to be used for children under the age of 16 years and we do not knowingly collect or use or store personal data relating to children. If you are aged 16 years or above we use your personal data to provide you with an initial consultation for a unique skin analysis to identify skin concerns / imperfections and recommend an unparalleled skin journey (treatment plan); follow-up skin analysis and consultations and show your skin improvements over time. This use (processing) includes collecting, scanning and photographing, accessing, interpreting, analysing, editing / updating, transferring, sharing, storing, and otherwise processing your personal data. It also includes aggregating it for research; and deleting it when you ask us to or when it is no longer required for using eventis.
Lawful bases
We rely on the following legal justifications (lawful bases) depending on the context for the processing of your personal data: ‘explicit consent’ when we are processing your special category data; ‘performance of a contract’ in order to provide you with the eventis services (skin analysis, consultations, treatment plan, etc.); and ‘to fulfil our legal obligations’. We may also rely on the ‘legitimate interests’ lawful basis if the processing is necessary to run our businesses and improve our products and services and we have assessed and determined that it does not unduly affect your interests or fundamental rights and freedoms – we always seek to maintain a balance between our legitimate interests and your privacy.
Marketing
From time to time we would also like to send you marketing information (news and offers) for iiaa products and care. This is optional, and subject to you choosing to opt into our marketing communications separately. We process your personal data for this purpose, based on your prior consent. This may include profiling and segmenting your personal data, and combining it with other data collected or received indirectly from public sources or third parties (for instance, national census data) in order to send you only the marketing information that is relevant to your profile. You can opt out of our marketing communications at any time by using the unsubscribe link provided in each marketing communication.
Sharing & Disclosing
We do not share your personal data with any third parties for marketing purposes and we use it solely for the reasons outlined in this eventis Privacy Notice. We may share or disclose it with authorised personnel or third parties, only if required for the stated uses and only as allowed by the law; for instance, the Salon or Treatment Provider staff, or within the iiaa group of companies, and with our service providers (such as payment services providers and delivery companies). We may disclose it to government authorities and/or law enforcement officials, for fraud protection and credit risk reduction purposes, and as otherwise required by law.
Transfers
If the sharing or disclosure of your personal data required to fulfil our legal obligations involves international data transfers to countries outside the UK we ensure that it is to countries that have been deemed to provide an adequate level of protection in accordance with Data Protection Law; and/or we use standard contractual clauses or other mechanisms or instruments to mandate that the transfers are afforded the same degree of data protection and appropriate security measures as in the UK.
Retention
We keep and store (retain) your personal data securely for as long as we need to for the reasons described above, and for any additional term/s as required by applicable laws and/or to fulfil our legal obligations. Where you have given your explicit consent to use your images and TEWL measurements for research this includes compiling into reports the before and after images that illustrate your skin results (which may identify you and reveal your racial and ethnic origin) for analysis at the end of the trial, we may retain this data for the duration of our relationship with you, plus the life cycle of the concerned products and any additional term/s as required by applicable laws. We may aggregate your TEWL measurements before retention. Where you have given your explicit consent to use your before and after images for marketing, they may be retained for the promotion of iiaa’s products and services, and for incorporation in iiaa’s training materials. This includes publishing them in internal and external company publications (e.g., newsletters, presentations, intranet posts), in external communications (e.g., website, promotional materials, press releases), on social media platforms (e.g., LinkedIn, Twitter, Facebook, Instagram, YouTube, TikTok); and, in corporate events coverage.
If you do not use the eventis Client App for a period of 365 days then we treat the account as expired and your personal data is securely destroyed. Some may be retained to fulfil our legal obligations, for instance, your basic information for six years after you cease being a consumer, for tax purposes.
Security of your personal data
We take appropriate security measures to protect your personal data and keep it only as long as is necessary. We also use strict data security policies and procedures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised manner. Where we have provided you (or you have chosen) a password to access certain parts of eventis, you are responsible for keeping this password confidential and not share it with anyone. We have procedures in place to handle any suspected personal data breach in accordance with the Data Protection Law and in the event of a breach we will notify you and any applicable regulator when we are legally required to do so.
Your personal data rights
Under certain circumstances under Data Protection Law you have the following rights in relation to your personal data. To exercise your rights, please contact the Salon or Treatment Provider, or iiaa by emailing [email protected]. We respond to within one month. If your request is particularly complex we may take longer but we will notify you of the timeframe and keep you updated. You will not have to pay a fee exercise your rights, although we are allowed to charge a reasonable fee if your request is clearly unfounded, repetitive or excessive, and we may refuse to comply with your request in certain circumstances. Please note that we may need to ask you for specific information first to confirm your identity, so that we are not disclosing your personal data to someone who has no right to receive it.
Request access – to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
Request correction – to have any incomplete or inaccurate personal data we hold corrected, though we may need to verify the accuracy of the new data you provide.
Request erasure – to ask us to delete or remove personal data where there is no good reason for continuing to process it, or we may be processing it unlawfully, or, are required to erase it to comply with local law. If we are not able to comply for other specific legal reasons we will notify you at the time of your request.
Object to processing – where we are relying on a legitimate interest that you believe impacts on your fundamental rights and freedoms. We may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms. You may also object if we are processing your personal data for direct marketing purposes.
Request restriction of processing – to ask us to suspend the processing of your personal data if you want us to establish the data’s accuracy; where our use of the data is unlawful but you do not want us to erase it; where you need us to hold the data even if we no longer require it because you need it to establish, exercise or defend legal claims; or you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
Request the transfer – of your personal data to you or to a third party (such as another Salon or Treatment Provider to continue to use eventis for you), in a structured, commonly used, machine-readable format. This right only applies to automated information which you initially provided our explicit consent to use or where we have used the information to perform a contract with you.
Withdraw consent – where we are relying on your consent (e.g. to receive our marketing communications) you can opt out at any time by using the unsubscribe link provided in each marketing communication. Where we are relying on your explicit consent (i.e. to process your special category personal data) you may withdraw it at any time by telling the Salon or Treatment Provider or by contacting iiaa. If you do decide to withdraw your explicit consent the Salon or Treatment Provider will not be able to continue with or complete your treatment plan. Withdrawing your consent or explicit consent will not affect the lawfulness of any processing carried out beforehand.
You also have the right to make a complaint at any time to: the Information Commissioner’s Office (“ICO”), the UK regulator for data protection issues at http://www.ico.org.uk” if you are based in the UK; or, the Data Protection Commission (“DPC”), the Irish regulator for data protection issues at http://www.dataprotection.ie” if you are based in the Republic of Ireland; or any other regulatory authority for the member state where you reside at https://ec.europa.eu/info/index_en if you are based in the European Union. We would however, appreciate the chance to address your concerns first so please contact us in the first instance.
Contact us
To exercise any of your data rights, or if you have any eventis data privacy questions, please contact the Salon or Treatment Provider, or contact iiaa by emailing [email protected]
Changes to our privacy practices or to your personal data
We keep our privacy practices and this Privacy Notice under regular review to ensure that they meet legal requirements and industry standards. We may update them occasionally, with changes posted in this notice, and effective from the notice publication date. It is important that the personal data we hold about you is always accurate and current and it is your responsibility to keep us informed if any of it changes during our relationship with you. Please contact us to inform us of any changes.
Last updated 29 April 2025.