This Privacy Policy describes how Optiheart EU ("we", "us", "our") collects, uses, stores and protects personal data when you visit our websites, place an order, or interact with our services across the European Union and partner countries, including the Czech Republic, Greece, Portugal, Spain, Slovakia, Italy, Germany, Lithuania, Austria, Cyprus and Colombia.
We are committed to protecting your privacy and complying with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws.
1. Data Controller
The data controller responsible for processing your personal data is Optiheart EU, which operates the websites accessible at optiheart.eu and its country-specific subdirectories.
If you have any questions about this Privacy Policy or how we handle your personal data, you can reach us using the contact details provided at the end of this document.
2. Data We Collect
We may collect and process the following categories of personal data:
- Identification data: first name, surname, and any additional information you voluntarily provide.
- Contact data: telephone number and, where applicable, email address.
- Delivery data: shipping address, city, postal code and country.
- Order data: products ordered, order value, payment method (cash on delivery) and order history.
- Technical data: IP address, browser type, device information, operating system and referring URL.
- Usage data: pages visited, time spent on the website, clickstream data and interactions with our forms.
- Communication data: any messages, reviews or feedback you submit to us.
We do not collect special categories of personal data (such as health data, biometric data, or data revealing racial or ethnic origin) unless you voluntarily provide such information.
3. Purposes of Processing
We process your personal data for the following purposes:
- To process and fulfil your orders, including delivery and cash-on-delivery confirmation.
- To contact you by telephone to confirm your order and delivery details.
- To provide customer support and respond to your enquiries.
- To comply with legal and accounting obligations.
- To improve our website, products and services.
- To detect and prevent fraud, abuse or security incidents.
- To send you marketing communications only where you have given your consent or where permitted by law.
4. Legal Basis for Processing
We rely on the following legal bases under Article 6 of the GDPR:
- Performance of a contract – to process your order and deliver the products you have purchased.
- Consent – for marketing communications and non-essential cookies, which you may withdraw at any time.
- Legal obligation – to comply with tax, accounting and consumer protection laws.
- Legitimate interests – to improve our services, prevent fraud and ensure the security of our website, always balanced against your rights.
5. Data Sharing
We may share your personal data with:
- Delivery and logistics partners – to ship your order to the address provided.
- Payment and cash-on-delivery providers – to process payment upon delivery.
- IT and hosting providers – who support the operation of our website and order management systems.
- Marketing and analytics partners – only where you have given your consent or where permitted by law.
- Legal and regulatory authorities – where required by applicable law.
All third parties are contractually required to protect your personal data and to process it only for the purposes for which it was shared.
6. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. In particular:
- Order and delivery data are retained for the period required by tax and accounting legislation.
- Marketing consent records are retained until you withdraw your consent.
- Technical and usage data are retained for a limited period for analytics and security purposes.
When data is no longer needed, we securely delete or anonymise it.
7. Your Rights
Under the GDPR, you have the following rights:
- Right of access – to obtain a copy of the personal data we hold about you.
- Right to rectification – to correct inaccurate or incomplete data.
- Right to erasure – to request deletion of your data where legally applicable.
- Right to restriction – to limit how we process your data.
- Right to data portability – to receive your data in a structured, machine-readable format.
- Right to object – to object to processing based on legitimate interests or for direct marketing.
- Right to withdraw consent – at any time, without affecting the lawfulness of prior processing.
- Right to lodge a complaint – with your national data protection authority.
8. Security Measures
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse or alteration. These include:
- Encrypted data transmission using SSL/TLS technology.
- Restricted access to personal data on a need-to-know basis.
- Regular monitoring and updating of our security infrastructure.
- Secure storage and periodic backup procedures.
9. Cookies
Our website uses cookies and similar technologies to ensure proper functionality, analyse traffic and improve your user experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
10. Children's Data
Our products and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so that we can take appropriate action.
11. International Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) where our service providers operate. When such transfers occur, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated version will be published on this page with a revised effective date. We encourage you to review this page periodically.
13. Contact
If you have any questions, requests or complaints regarding this Privacy Policy or the processing of your personal data, please contact us through the contact form available on our official website. We will respond to your request within the timeframes required by applicable law.