Data Protection

Privacy Policy

1. Introduction

Orovista is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and share your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Who We Are (The Data Controller)

The entity responsible for your personal data is Orovista s.r.o., located at Ivanská cesta 19111/32D, 821 04 Bratislava, Slovakia. Contact us at privacy@orovista.eu.

3. Data Collection

We collect various types of data, including:

Identity Data: First and last name.
Contact Data: Billing/delivery address, email, and phone number.
Document Data: Data from your ID card or passport used for identification.
Financial Data: Bank account or payment card details (processed securely by gateways; we do not store full card details).
Technical Data: IP address, browser type, and location.

4. How We Use Your Data

Purpose	Legal Basis
Process/deliver orders	Performance of a contract
Manage relationship/notify of changes	Legal obligation; Legitimate interests
Website security/fraud protection	Legitimate interests
Regulatory compliance (AML, Tax)	Legal obligation

5. Data Retention and Sharing

We retain data as long as necessary to fulfill the purposes for which it was collected, or as required by law (e.g., for tax and AML purposes). We may share data with payment providers, shipping companies, and governmental bodies to comply with legal obligations.

6. Your Legal Rights

Under GDPR, you have the right to access, rectify, or erase your data, as well as the right to data portability and the right to object to processing. To exercise these rights, contact privacy@orovista.eu.

7. Complaints

If you believe your data protection rights have been violated, you may turn to the courts or contact us first to resolve your concerns.