Privacy policy

The controller of the personal data collected through the website www.olivyx.es is:

Legal name: VI-BAC SOLUTIONS, S.L.

Trading name: OLIVYX

Tax ID (CIF): B01693258

Registered office: C/ Lorenzo Estepa, nave 55, 14500 Puente Genil, Córdoba, Spain.

Companies Register: Companies Register of Córdoba, Section 8, Sheet CO-48996, Entry 5.

Email: info@olivyx.es

Website: www.olivyx.es

VI-BAC SOLUTIONS, S.L. (hereinafter, “OLIVYX”) is responsible for ensuring that its users’ personal data are processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD), and other applicable rules.

If you have any questions about the processing of your personal data, you can write to us at info@olivyx.es.

We only collect personal data that is necessary to offer our products, manage our services and communicate with you.

Depending on how you interact with OLIVYX, we may obtain personal information through different channels:

Purchases made in our online store. When you place an order, we may request information such as your first name, last name, email address, phone number, shipping and billing address, as well as the data needed to process payment and delivery.

Contact forms. If you write to us through our website, we will collect the data you provide so that we can respond to your enquiry or request.

Email. When you contact us directly, we process the information you share in order to handle your communication.

Subscription to commercial communications. If you choose to subscribe to our newsletter or receive information about our products, we may collect your name and email address, as well as your communication preferences where applicable.

Social media. When you interact with our official profiles, we may access information you voluntarily share with us, in accordance with each platform’s privacy terms.

Browsing our website. We may obtain certain technical and browsing information through cookies and similar technologies, always respecting the privacy preferences you have configured.

In no case will we request personal data that is not adequate, relevant or necessary for the purposes indicated.

The personal data we collect are used exclusively for legitimate purposes related to our commercial activity, the provision of our services and the improvement of the user experience.

The main processing activities are as follows:

Purchase and order management

We use the data needed to process your purchases, confirm orders, manage payments, prepare shipments, issue invoices and keep you informed about the status of your orders.

Legal basis: performance of a sales contract under Article 6(1)(b) GDPR, and compliance with legal obligations where applicable.

Returns, warranties and after-sales support

We process the information needed to handle return requests, refunds, warranties, complaints or incidents related to our products.

Legal basis: performance of the contract and compliance with applicable legal obligations under Articles 6(1)(b) and 6(1)(c) GDPR.

Handling enquiries and requests

When you contact OLIVYX, we use the data provided to answer your questions, offer information about our products and handle any request.

Legal basis: legitimate interest in responding to communications received under Article 6(1)(f) GDPR, or taking pre-contractual steps where appropriate.

User account management

If our online store has a customer area and you choose to register, we will process the data needed to manage your account, facilitate access and allow you to track your purchases.

Legal basis: performance of a contract under Article 6(1)(b) GDPR.

Newsletter and commercial communications

When you authorise us to do so, we may send you information about news, launches, promotions, products and content related to OLIVYX and skincare.

Legal basis: consent of the data subject under Article 6(1)(a) GDPR.

Where a prior contractual relationship exists, we may also send commercial communications about our own similar products to those purchased, provided the requirements of Article 21.2 of Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE) are met.

Analysis and improvement of the website experience

We may analyse information about the use of our website to understand how users interact with it, detect possible issues and improve how it works.

Where such analysis involves cookies or other technologies that require authorisation, we will request your consent beforehand.

Legal basis: user consent under Article 6(1)(a) GDPR, where required.

Advertising and personalised communications

When these features are enabled, we may use digital advertising tools to show ads related to our products or adapt certain communications to users’ interests.

These processing activities will only take place where there is a valid legal basis and, where applicable, the necessary consent for advertising cookies has been obtained.

Legal basis: consent of the data subject under Article 6(1)(a) GDPR, in cases where it is required.

We want you to receive information from OLIVYX only when there is a legal basis that allows us to send it.

If you choose to subscribe to our newsletter, we will use your email address to share brand news, product launches, promotions and content related to our activity.

Subscription is voluntary and is not a requirement to purchase our products.

To receive commercial communications where your consent is required, you must express your acceptance through a clear affirmative action, such as ticking the corresponding box on a form.

We may also send you communications about our own similar products to those you have previously purchased, in the cases permitted by Article 21.2 LSSI-CE, provided you have been offered the chance to opt out of such messages.

You may stop receiving our commercial communications at any time, free of charge, using the unsubscribe link included in the emails or by writing to us at info@olivyx.es.

Withdrawing consent will not affect the lawfulness of processing carried out previously.

OLIVYX does not sell its users’ personal data.

However, to carry out our activity and offer our services, certain external providers may need to access or receive personal information in order to provide their services.

These may include:

• Transport and logistics companies responsible for managing delivery and, where applicable, collection of orders.
• Payment service providers needed to process financial transactions.
• E-commerce and web hosting platforms that enable the operation and maintenance of our online store.
• Customer service and communication tools.
• Email marketing and commercial automation providers, when such services are used.
• Web analytics and digital advertising platforms, when enabled and a valid legal basis exists.
• Tax, accounting and administrative advisers, where necessary to meet our legal obligations.

When these providers act as processors, OLIVYX will put in place the agreements and safeguards required by Article 28 GDPR.

We may also disclose personal data to public authorities, competent bodies, courts and tribunals where there is a legal obligation or a legitimate request.

Our providers will not use the data for their own purposes that are incompatible with those that have been authorised.

We keep personal data only for as long as necessary to fulfil the purposes for which they were collected.

Retention periods will depend on the nature of the information and applicable legal obligations.

Data related to purchases and invoicing: kept for the time needed to manage the commercial relationship and, afterwards, for the periods established by tax, accounting and commercial law.

Customer service data: kept for as long as needed to handle the enquiry or resolve the incident and, where applicable, for the periods needed to address possible liabilities.

Registered user data: kept while the account remains active, without prejudice to applicable legal retention periods.

Data used for commercial communications: processed until you withdraw your consent or exercise your right to object. We may keep the minimum information needed to evidence the handling of your unsubscribe request.

Browsing data: kept for the periods set out in our Cookie Policy, according to the technologies used.

Once the corresponding periods have ended, the data will be securely deleted, anonymised or blocked where there is a legal retention obligation.

Applicable law recognises a series of rights you may exercise in relation to your personal data.

At any time you may request:

Access: to know what personal data we process about you and obtain information about how it is used.

Rectification: to ask us to correct data that are inaccurate or incomplete.

Erasure: to ask for your data to be deleted when the circumstances provided by law apply.

Restriction of processing: to ask us to temporarily restrict the use of your data in certain situations.

Objection: to object to the processing of your data where the legal basis is legitimate interest, under the conditions provided by law, or where data are used for direct marketing.

Portability: to receive your data in a structured, commonly used and machine-readable format and, where technically possible and legally applicable, to have them transmitted to another controller.

Withdrawal of consent: to withdraw at any time an authorisation you previously granted.

Rights regarding automated decisions: not to be subject to decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, except in the cases provided by law.

How can you exercise these rights?

You may submit your request through the following channels:

By email: info@olivyx.es

By post:

VI-BAC SOLUTIONS, S.L.

C/ Lorenzo Estepa, nave 55

14500 Puente Genil, Córdoba, Spain.

To process your request, we will need you to indicate the right you wish to exercise and to provide the information needed to identify you. We will only request additional identity documentation where there are reasonable doubts about it.

We will respond within a maximum of one month from receipt of your request. This period may be extended by a further two months where necessary due to the complexity or number of requests, and we will inform you of this within the first month.

If you consider that your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

As a general rule, you do not need to provide identifying personal data to browse our website.

However, certain services — such as making a purchase, requesting information or arranging a shipment — require you to provide some data.

Fields marked as mandatory on our forms are required to handle the corresponding request. Information requested in the remaining fields is voluntary.

By providing us with your data, you undertake that they are truthful, accurate and up to date.

If any of the information you have provided changes, you may notify us so that we can keep our records updated.

When you provide personal data of third parties, you must have a legitimate basis for doing so and, where applicable, comply with the applicable information obligations.

Our e-commerce products and services are primarily aimed at adults.

Minors who wish to make a purchase must have the involvement or authorisation of their legal representatives where legally required.

Where personal-data processing is based on consent, the conditions set out in applicable law will apply, including Article 7 LOPDGDD.

If we detect that personal data of a minor have been collected without meeting the corresponding legal requirements, we will take the necessary steps to regularise the processing or delete such data.

OLIVYX may maintain official profiles on social media and digital platforms to share information about the brand, its products and its activities.

When you interact with our profiles, comment on posts or send us private messages, we may process the information you voluntarily share with us in order to respond to your enquiries and manage the communication.

Please note that these platforms have their own privacy policies and may process personal data according to their terms of use.

We recommend consulting their policies before providing personal information.

For security reasons, we advise against sharing particularly sensitive information through public comments or social-media messages.

OLIVYX will process data obtained through these channels exclusively for the corresponding purposes and in accordance with the applicable legal bases.

Our website may use first-party and third-party cookies to facilitate its operation, remember certain preferences and, when you authorise it, analyse browsing or carry out advertising actions.

Cookies strictly necessary to provide requested services or ensure the website works may be used without consent where legal requirements are met.

For analytics, advertising or personalisation cookies that are not exempt, we will request your prior authorisation.

You may accept, reject or configure these cookies through the consent-management panel available on the website.

You will find detailed information about the cookies used, their purposes, providers and retention periods in our Cookie Policy, available at www.olivyx.es.

At OLIVYX we apply the principle of data protection by design and by default, seeking to ensure that only the information needed for each purpose is collected and used.

In accordance with Article 32 GDPR, we will adopt technical and organisational measures appropriate to the risk to protect personal data against unauthorised access, loss, alteration, improper disclosure or unlawful processing.

These measures will be reviewed and adapted when necessary, taking into account the nature of the data processed, the services used and the associated risks.

Although we work to maintain a secure environment, no system for transmitting or storing information over the internet can guarantee absolute security.

If a personal-data security breach occurs, we will assess its possible consequences and make the notifications to the supervisory authority and to data subjects that applicable law requires.

Some of the technology services used for the operation of our website, commercial management or communications may involve processing personal data from countries outside the European Economic Area.

Where international transfers take place, OLIVYX must ensure they are carried out in accordance with the conditions set out in Chapter V GDPR.

To that end, legally recognised mechanisms may be used, such as European Commission adequacy decisions, standard contractual clauses or other valid safeguards.

Where applicable, the EU-US Data Privacy Framework may also apply for US entities that are duly certified.

You may request additional information about international transfers affecting your data and the corresponding safeguards by writing to us at info@olivyx.es.

When OLIVYX uses commercial automation tools or personalised advertising, certain data related to browsing and user interactions may be used to adapt communications to their interests.

These activities may include product recommendations, sending communications related to previous purchases or showing personalised ads, always provided there is an appropriate legal basis.

If these activities involve profiling, we will inform users about their purpose and the essential characteristics of the processing.

Users may object at any time to the processing of their personal data for direct marketing purposes, including profiling linked to that purpose.

Where advertising cookies are used, users may also withdraw their consent through the available configuration tools.

OLIVYX does not envisage adopting decisions based solely on automated processing that produce legal effects concerning users or similarly significantly affect them. If this circumstance changed, the required information would be provided and the legally required safeguards would apply.

OLIVYX may update this Privacy Policy when necessary to adapt it to regulatory changes, modifications in how our website works, the addition of new services or changes in personal-data processing.

The current version will be available at all times at www.olivyx.es.

When changes substantially affect the processing of your data, we will inform you through appropriate means and request your consent again where legally required.