CGV
YOUR RIGHTS UNDER THE GDPR
As a data subject within the European Economic Area (EEA), you have specific rights under the General Data Protection Regulation (GDPR), which include:
-
Right of Access – You have the right to request access to your personal data that we process.
-
Right to Rectification – You have the right to request that we correct inaccurate or incomplete personal data.
-
Right to Erasure ("Right to be Forgotten") – You can request that we delete your personal data under certain conditions.
-
Right to Restriction of Processing – You have the right to request that we restrict the processing of your personal data in certain circumstances.
-
Right to Data Portability – You have the right to receive the personal data we have about you in a structured, commonly used, and machine-readable format, and to transmit it to another data controller.
-
Right to Object – You have the right to object to our processing of your personal data where the processing is based on our legitimate interests or for direct marketing purposes.
-
Right to Withdraw Consent – If we process your data based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
-
Right to Lodge a Complaint – You have the right to file a complaint with a data protection authority if you believe that our processing of your personal data violates applicable data protection laws.
To exercise any of these rights, please contact us at:
📧 contact@ollyna.com
We may request verification of your identity before fulfilling any request related to your personal data.
DATA RETENTION
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. When we no longer need to use your personal data, we will delete or anonymize it.
DATA SECURITY
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, misuse, alteration, or destruction. These include encryption, firewalls, secure servers, and access controls.
While we take reasonable steps to protect your personal data, no method of transmission over the internet or method of electronic storage is 100% secure. Therefore, we cannot guarantee absolute security.
INTERNATIONAL DATA TRANSFERS
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), where data protection laws may be different from those in your country. In such cases, we ensure that adequate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to protect your personal data.
CHILDREN’S PRIVACY
Our website and online products are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16 without parental consent. If we become aware that a child under 16 has provided us with personal data without such consent, we will take steps to delete the data.
CHANGES TO THIS PRIVACY POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we do, we will revise the "Effective Date" at the top of this page. If the changes are significant, we will notify you via our website or by email (if applicable).
We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal data.
CONTACT US
If you have any questions, concerns, or requests related to this Privacy Policy or the way we process your personal data, please contact us at: