Olivah respects its customers’ privacy and is committed to protecting the personal data they provide. Our Privacy and Data Protection Policy, which can be viewed on our dedicated page, describes how we collect, process, and protect our users’ personal data in accordance with applicable laws, including the General Data Protection Regulation (GDPR).
1. Who is responsible for processing your personal data?
Olivah, Unipessoal Lda, with its registered office at Rua Pulido Valente, No. 1, 7th Floor, B, 2675-670 Odivelas, and Tax Identification Number (NIF) 516 396 013, is the legal entity responsible for processing your personal data. For any questions regarding data protection, please contact us at:
- Email: info@olivah.pt
- Phone: (+351) 219673433
- Address: Rua Pulido Valente, No. 1, 7th Floor, Unit B, 2675-670 Odivelas
2. What personal data is collected and processed?
Olivah collects the personal data necessary to process your orders and ensure a positive shopping experience. The data collected may include, but is not limited to:
- Contact information: Name, email address, phone number, address (for billing and shipping).
- Payment information: Payment details, including credit/debit card information, if you choose this payment method.
- Browsing and website usage information: Information about your device, browser, IP address, browsing history, and preferences, collected through cookies and similar technologies.
- Additional information: Any other information you provide to us directly, such as feedback or communications with customer support.
3. How do we collect your data?
We collect personal data through the following channels:
- Registration forms: When you create an account or make a purchase on our website.
- Payment process: When you make payments for products or services.
- Cookies and similar technologies: We use cookies to improve your browsing experience on our website. To learn more about how we use cookies, please see our [Cookie Policy].
4. For what purpose do we process your personal data?
Olivah processes your personal data for the following purposes:
- Order processing: To complete and process your purchases, including payment processing, shipping, billing, and product delivery.
- Account and Profile Management: To create and maintain your customer account, allowing you to access your orders, purchase history, and manage your preferences.
- Customer Service: To answer questions, resolve issues, and improve your shopping experience.
- Marketing and commercial communications: To send you information about new products, promotions, and offers, provided you have given your explicit consent to do so.
- Compliance with legal obligations: To comply with legal obligations, including issuing invoices, managing returns and complaints, and communicating with the relevant authorities when necessary.
5. What is the legal basis for the processing of your data?
The processing of your personal data is based on the following legal grounds, as provided for in the GDPR:
- Contract performance: Processing is necessary for the performance of a sales contract or a service contract (e.g., order processing and payments).
- Consent: When you give us your explicit consent to send you commercial or marketing communications (for example, subscribing to a newsletter).
- Legitimate interest: When processing is necessary for our legitimate interests, such as improving our website and services, provided that your rights and freedoms do not override those interests.
- Compliance with legal obligations: To comply with legal obligations, including issuing invoices, managing returns and complaints, and communicating with the relevant authorities when necessary.
6. Who do we share your data with?
Olivah may share your personal data with third parties in the following situations:
- Service providers: We work with companies that provide us with services related to payment processing, package delivery, customer management, marketing, and data analysis. These service providers process personal data solely for the contracted purposes and in accordance with our instructions.
- Authorities and legal entities: When necessary to comply with legal obligations or respond to legal proceedings, court orders, or requests from other competent authorities.
- Other companies in the group: If necessary for administrative purposes or to improve our product and service offerings.
7. International data transfers
In some cases, your personal data may be transferred outside the European Union (EU), for example, when we use service providers located outside the EU. In such situations, we ensure that these transfers are carried out in accordance with applicable legal provisions, using appropriate safeguards such as standard contractual clauses or third-country adequacy.
8. How do we protect your personal data?
Olivah implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Among other measures, we use encryption technologies (SSL) to protect transactions and sensitive information during the payment process.
9. How long do we retain your personal data?
Personal data will be retained only for as long as necessary for the purposes for which it was collected. After this period, the data will be deleted or anonymized, except where it is necessary to retain it to comply with legal obligations (such as tax obligations) or to resolve disputes.
10. What are your rights?
Under the GDPR, you have the following rights regarding your personal data:
- Right of access: You may request information about the personal data we hold about you.
- Right to rectification: You may request the correction or updating of inaccurate or incomplete personal data
- Right to erasure: You may request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected.
- Right to restriction of processing: You may request that the processing of your personal data be restricted under certain circumstances.
- Right to data portability: You may request that your personal data be transferred to another data controller in a structured, machine-readable format.
- Right to object: You have the right to object to the processing of your personal data, including processing for direct marketing purposes.
- Right to withdraw consent: If you have given your consent to the processing of personal data, you may withdraw it at any time, without affecting the lawfulness of the processing carried out up to that point.
To exercise your rights, you can contact us using the methods listed above.
11. Right to lodge a complaint with the supervisory authority
If you believe that the processing of your personal data violates the provisions of the GDPR, you have the right to file a complaint with the National Data Protection Commission (CNPD), the supervisory authority in Portugal. For more information, please visit the CNPD website: www.cnpd.pt.
Changes to Privacy, Data Protection, and Cookie Policies
We may change the information contained in the Privacy and Data Protection and Cookies Policies whenever we deem it appropriate. If we make such changes, you will be notified via the Website (e.g., through a banner, pop-up, or push notification) or by email, when the changes in question are relevant to your privacy, so that you can review and evaluate them and, if necessary, contest or cancel any service or feature. In any case, we advise you to periodically review the Privacy, Data Protection, and Cookie Policies in case minor changes or interactive improvements have been made. We remind you that these Policies are always available for information on our Website.
