Privacy Policy

This Privacy and Cookie Policy informs users (“Users”) of the www.olta.eu site (the “Site”) about the processing of their personal data by the data controller and about the data protection rights available to them. This Privacy and Cookie Policy concerns this Site only and not any other sites that the User might access via links on this Site.

THE DATA CONTROLLER

The data controller is Olta -olta sp. j. K.K. Zawistowscy with registered office at Ignatkach, Ignatki 40/6 16-001 Kleosin, Poland, NIP: 9662123924, contact email: info@olta.eu. (the “Data Controller”, “we” or “Olta”).  

LEGAL BASIS FOR DATA PROCESSING

The personal data referred to on this page are processed by the Data Controller for the purposes of managing the Site, providing dedicated information notices and where necessary obtaining the consent of the data subjects involved, so as to be able to offer and perform services on the Site.

Where the Data Controller uses, for direct marketing of its products or services, the details of the email supplied by a data subject for the sale of a product or service, the Data Controller can refrain from requesting the data subject’s consent on condition that the products and services in question are similar to those sold and that the data subject, once suitably informed, does not object to such use either initially or on receiving subsequent communications. The data subject must be informed of the option of objecting to such processing at any time, easily and free of charge, both at the time of collecting the data and when sending any communications for the purposes referred to above. In this case the legal basis for data processing is the legitimate interest of the Data Controller.

TYPE OF DATA PROCESSED

Browsing data

The IT systems and software procedures used to power this Site collect, as part of their normal workings, personal data, the transmission of which is implicit in the use of internet communications protocols. This information is not collected for the purpose of being linked to the relevant identified Users, but such information could by its very nature be employed to identify Users through specific procedures and correlation with data held by third parties. This data category includes: IP addresses and domain names of computers used by Users connecting to the Site; the addresses of the resources requested in URI  (Uniform Research Identifier) form; the time of the request; the method used to submit the request to the server; the size of the file obtained in response; the numerical code indicating the status of the response given by the server (successful, error, etc.); and other parameters relating to the operating system and the IT environment of the User. Such data are used exclusively to collect anonymous statistical information on Site use and to monitor the correct working of the Site and are deleted immediately after processing. Where appropriate they could also be used to identify guilty parties in cases of unlawful computer activities against the Site. Except in such cases, such data on web contacts are currently not stored for more than seven days.

This Website uses Google Signals, a feature of Google Analytics that associates the information about views collected by this Website with Google information coming from the accounts of Google users who have consented to this association for the personalization of ads. This Google information may include the User’s location, search history, YouTube history and data from Google partner sites and is used to provide aggregate and anonymous information on the transversal behavior of Users.
If a User falls within the association described above, he may access and/or delete such Data through the MyActivity function provided by Google (at https://myactivity.google.com/myactivity?pli=1).

Data provided voluntarily by the User

The optional, express and voluntarily sending of emails to the addresses specified on this Site and the subscription to our newsletter will involve subsequent recording of the user’s email address, name and country, which is necessary to respond to the request, together with any other personal data contained in the message. Relevant information notices are provided or viewable on the dedicated pages of the Site for provision of certain services on a request basis.  [Additionally, by registering for an account on the Site or making a purchase, we will collect your name, address, email address, credit card information, and phone number.

Third Party Sources

The Site may collect information from third parties to whom you have provided your information, and consented to the sale, rental or transfer thereof (for example, through social media).

OPTIONAL DATA

Apart from the provisions regarding browsing data, Users are free to provide their personal data as entered into request forms. Failure to provide such data may render the service requested impossible.

TYPE OF DATA PROCESSED

Only data collected through browsing protocols, data resulting from use of cookies and data voluntarily provided during browsing or during subsequent contacts will be processed.

RECIPIENTS OF DATA

The data collected following accessing of the Site as specified above may be disclosed to the entities appointed as data processors, for the services of development, provision and operational management of the technological platforms used.
The personal data collected are also processed by the persons in charge of processing appointed by the controller, acting in accordance with specific instructions provided on the purposes of and methods used for processing. These include couriers, IT service providers, marketing agencies, customer services and other entities. Third parties who perform these operations are only permitted to use the information provided to them to perform their function and for no other purpose.  Please contact us at info@olta.eu to receive a full list of third party providers who may receive your information.

We may share your information with companies affiliated with Olta, including licensees and joint venture partners, who may be located outside the United States, including for such companies’ marketing purposes.  These parties may only use your information in compliance with this Privacy Policy. 

In the event that there is a change in the corporate structure of the Data Controller including, by way of example, a merger, consolidation, sale, liquidation or transfer of substantial assets, we may communicate the personal data collected on and through the Site to one or more third parties involved in the corporate transaction. In this case, it will be up to the new legal entity, the Data Controller, to provide the data subject with an updated privacy policy.

We may disclose a user’s information when required to do so to comply with applicable law or legal process or to respond to a request from law enforcement authorities.  We may also provide your information where necessary for the defense of legal claims or for fraud prevention purposes.

PROCESSING METHODS AND PURPOSES

Personal data will be processed using automatic means for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures will be put in place to avoid loss, unlawful or improper use and unauthorized access to the data.  

All marketing and personal data profiling activities will be performed only after obtaining the express and unequivocal consent of the data subject in question.

Your information is used, without limitation, for the following services:  

• Registration for an account or newsletter;
• Order fulfilment and related activities;
• Management of payments, including anti-fraud control when paying by credit/debit card;
• Marketing communications;
• Customization of content;
• Responding to customer service requests and similar communications from you; and
• Technical assistance.

RETENTION PERIOD

Browser data are stored only for the time strictly necessary for the purposes of browsing. Data provided on a voluntary basis will be stored for the period of time necessary for the requested services to be performed.

The Site will consider various factors to determine the appropriate storage period for personal data processed by the Site with the User’s consent, so as to ensure that personal data is not kept for longer than necessary. Such factors include the purpose for which the Site processes personal data and the current type of relationship with the data subjects in question (how often they access their account on the Site and open newsletters, or how regularly they browse or buy on the Site, etc.);

The Site will erase the personal data or render them anonymous once their storage is no longer possible or necessary in accordance with the applicable laws.

LINKS TO THIRD PARTY SITES

The Site contains links to third party websites, which we do not operate, control, monitor, endorse or guarantee.  This Privacy Policy does not apply to the collection and use of information by such third party websites.  We suggest that you carefully read the privacy policy and other policies of all third party websites.

We provide hyperlinks to third party websites only for the convenience of our users and is not a recommendation that users access such third party websites.  We do not guarantee the services or goods provided and sold by such third party websites to Internet users.  YOU AGREE THAT YOUR USE OF ANY THIRD PARTY WEBSITE IS AT YOUR SOLE RISK AND WITHOUT WARRANTIES OF ANY KIND BY OLTA, EXPRESS, IMPLIED OR OTHERWISE, INCLUDING, BUT NOT LIMITED TO, WARRANTIES OF TITLE, FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY OR NONINFRINGEMENT.  UNDER NO CIRCUMSTANCES SHALL OLTA BE LIABLE FOR DAMAGES ARISING FROM ANY TRANSACTION BETWEEN YOU AND ANY THIRD PARTY WEBSITE OR FOR ANY INFORMATION APPEARING ON THIRD PARTY WEBSITES.

Some of the Site’s services are integrated with social sharing features, e.g., liking or sharing a product on a social media platform.  Depending on your settings on your social media accounts, these activities may show up on your profile and be visible to your friends/followers and/or the public.  Please note that this Privacy Policy does not apply to third party social media sites, and you should always refer to the privacy policies of the relevant social media sites for information concerning their collection and processing of information.

Information Collected From And/Or Shared With Social Media Sites

When accessing the Site through a third party social media site and/or application, we may access some of your information from your social media account, such as name, email address, profile picture, location, friend list, posts and/or likes.  Please note that some aggregate information, that does not personally identify you, such as content viewed on the  social media site/application, may also be collected by us if you access the Site through a third party social media site.

DATA SUBJECT RIGHTS

Data subjects have the right to request of the Data Controller access to and rectification and erasure of their personal data, as well as limitation of the processing of such data, or to oppose data processing. Requests should be sent using the contact details given above.

Specifically, data subjects have the right to obtain:

1. updating, rectification or, where it is in their interest, completion of the data;
2. erasure, anonymization or blocking of data that have been processed unlawfully, including data the storage of which is unnecessary for the purposes for which they have been collected or subsequently processed;
3. certification to the effect that the operations as per letters a) and b) have been notified, also with regard to their contents, to the data processors and the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
4. suspension of data processing, where provided for under the law;
5. the portability of personal data, in other words the right to receive personal data concerning them in a structured, commonly used, machine-readable and interoperable format, within the limits provided for under the law;

Users also have the right to withdraw consent to processing of their data at any time.

Data subjects have the right object, in all or in part, to the processing of their personal data on legitimate grounds, both where the data are relevant to the purposes for which they have been collected, and in cases where they are used for advertising communication or marketing purposes.

For all correspondence and to exercise their rights, data subjects can contact the controller at the email address: info@olta.eu.

RIGHT OF COMPLAINT

Data subjects have the right to lodge a complaint with the supervisory authority if they believe that their data was processed in violation of the GDPR, or to take action before the courts.

CHILDREN’S RIGHTS

While we do not sell products or services for purchase by children, we may sell children’s products or services for purchase by adults.  If you are under 18 years old, you may use the Site only under the supervision of a parent or guardian.  In accordance with the Federal Children’s Online Privacy Protection Act of 1998 (COPPA), we do not knowingly collect, solicit or use personal information of children under the age of 13 provided without parental consent.  Should we become aware that a user under the age of 13 has registered without verifiable parental consent, any such information will be deleted.

DO NOT TRACK SIGNALS

Our Site does not recognize Do Not Track signals. Some third parties may collect aggregate information about the users’ online activities over time and across websites when they use the Site. While this information does not include personally identifiable information, certain processing activities that combine aggregate information with other information in possession of such third parties could result in the identification of users.

UPDATES TO OUR PRIVACY POLICY

We may amend or update all or any portion of this Privacy Policy, at any time, without notice, in its sole discretion.  Please access this section regularly to verify if any changes were made to our Privacy Policy and to review the updated Privacy Policy.