Privacy policy

Thank you for your interest in our online shop. We take the protection of your personal data very seriously and treat it confidentially and in accordance with statutory data protection regulations (GDPR, BDSG) and this privacy policy.

1. Controller

Petsamor Co., Limited
Room 1508, 15/F., Office Tower Two, Grand Plaza, 625 Nathan Road
Kowloon, Hong Kong
Email: info@osteovitalis.eu

2. Processing through Shopify

Our online shop is operated through Shopify.
Provider: Shopify International Ltd., Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Shopify may internally transfer personal data to servers in Canada and the USA.
Canada is considered a third country with an adequate level of data protection under Art. 45 GDPR.
For transfers to the USA, Shopify relies on standard contractual clauses pursuant to Art. 46 GDPR.
Further information:https://www.shopify.com/legal/privacy

3. Payment providers

We use the following payment services to process payments:
PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg.
PayPal may carry out credit checks and risk assessments.
Klarna
Provider: Klarna Bank AB (publ), Sweden.
When selecting "purchase on invoice" or "instalment purchase", Klarna carries out a credit check.
Legal basis: Art. 6(1)(b) GDPR.
Shop Pay / Apple Pay / Google Pay
Data is transferred to the corresponding providers for payment processing.
We transfer to payment providers only the data required for contract processing.

4. Tracking & analytics

For the purpose of analysing and optimising our offer, we use the following tools:
Google Analytics
Provider: Google Ireland Ltd., Dublin.
Data may be transferred to the USA. Basis: Art. 46 GDPR (standard contractual clauses).
Legal basis: Art. 6(1)(a) GDPR (consent).
Meta Pixel (Facebook/Instagram)
Provider: Meta Platforms Ireland Ltd.
Purpose: conversion tracking, remarketing.
Legal basis: Art. 6(1)(a) GDPR.
TikTok Pixel
Provider: TikTok Information Technologies UK Limited.
Purpose: conversion tracking, performance marketing.
Legal basis: Art. 6(1)(a) GDPR.
No tracking cookies are set without your consent.

5. Email marketing

We use an email service provider to send emails, such as newsletters, campaigns and order information.
Processing takes place pursuant to Art. 6(1)(a) GDPR (consent).
You can withdraw your consent at any time.

6. Cookies & consent

For the use of cookies that are not technically necessary, we obtain consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25 TTDSG.
This is done through a consent management platform (CMP).
Without consent, only technically necessary cookies are set.

7. Data subject rights

You have the following rights under Art. 15-21 GDPR:
l access
l rectification
l erasure
l restriction
l data portability
l objection
 
Complaints may be directed to:
the data protection authority of your place of residence.

8. Storage period

Personal data is stored only for as long as required to fulfil the respective purpose or as long as statutory retention periods apply.

9. Withdrawal of consent

Consent may be withdrawn at any time with effect for the future.

10. Changes to this privacy policy

We reserve the right to amend this privacy policy as needed.