Privacy policy

The protection of personal data is important to us. In this privacy policy, we explain how we process personal data in accordance with the General Data Protection Regulation (GDPR), the Personal Data Protection Act applicable in Australia, and European Union regulations.

1. Data controller
The data controller is AAA i-commerce, registered under number: 93918119, VAT number: NL005052409B52, with its registered office at Rademakerstraat 143, 3769 LB Soesterberg, The Netherlands.

Contact: support@olivoir.com, tel. +31645700434.

2. What data we process
We process the following categories of personal data: order and account data (e.g. name, delivery address, email address, payment details to the extent necessary), website usage data (IP address, browser type, access time) and newsletter data – only if consent has been given.

3. Purposes and legal bases for processing
Personal data is processed for the following purposes: (a) order fulfilment and processing; (b) payment processing and invoicing; (c) communication with customers; (d) compliance with tax and accounting obligations; (e) analysis and marketing activities – only with your consent. The legal bases are: performance of a contract (Article 6(1)(b) of the GDPR), legal obligation (Article 6(1)(c)), consent (Article 6(1)(a)) and legitimate interests of the controller (Article 6(1)(f)), e.g. website security and fraud prevention.

4. Data sharing
Data is only shared to the extent necessary to fulfil the order: with payment operators, courier companies, IT and hosting service providers. Our shop operates on the Shopify platform. Data may be processed outside the EU/EEA, including in Canada and the USA. Shopify participates in data transfer mechanisms that comply with EU law.

For more information, see Shopify's privacy policy.

5. Payments
When using direct payment gateways, data is processed in accordance with security standards (e.g. PCI-DSS). Transaction data is only stored for as long as is necessary to process the payment and comply with legal requirements.

6. Analysis and marketing
We use Google Analytics to analyse website traffic. Provider: Google Ireland Ltd. The data processed includes, among other things, your anonymised IP address and data on user behaviour. The legal basis is your consent (Art. 6(1)(a) GDPR), given via the cookie banner. You can withdraw your consent at any time.

Opting out of Google Analytics.

7. Cookies
We use cookies on our website to enable basic functions (e.g. shopping basket, login) and, with your consent, for analytical and marketing purposes. Necessary cookies are required for the website to function. Analytical and marketing cookies are only activated after consent has been given. You can change or withdraw your consent at any time via the cookie banner settings.

More information: Shopify Cookie Policy.

8. Data security
Data is transmitted using SSL/TLS encryption and stored on secure servers. We use technical and organisational measures in accordance with the requirements of the GDPR and Polish law.

9. Storage period
We store personal data only for as long as is necessary to achieve the purposes indicated above, as well as for the periods required by tax and accounting regulations in Australia and the EU.

10. Your rights
You have the rights under the GDPR: access to data, rectification of data, erasure of data, restriction of processing, data portability, objection to processing and the right to withdraw consent. To exercise your rights, please contact us at support@olivoir.com

11. International transfers
When transferring data outside the EU/EEA, we use appropriate safeguards, such as adequacy decisions, standard contractual clauses or other mechanisms provided for in the GDPR.

12. Policy changes
The privacy policy may be updated. The version published on our website is always valid. We will notify you of any significant changes if required by law.