STPHARMA SRL is committed to the protection of personal data. We continuously strive to ensure compliance with the General Data Protection Regulation (GDPR), the ePrivacy Directive, and the Belgian law of July 30, 2018, concerning the protection of individuals regarding the processing of personal data.

This policy outlines the type of personal data we collect, how we use your personal data, and the rights you have to control its usage.

As per GDPR:

• “personal data” refers to any information related to you that allows for your direct or indirect identification.
• “processing of personal data” includes any operation or set of operations performed on personal data.

For information on personal data protection, you can also refer to the website of the Belgian Data Protection Authority (APD) at the following address: https://www.autoriteprotectiondonnees.be/.

Article 1 – Data Controller

The data controller is STPHARMA SRL.

Personal data is collected on the website http://oyl-cbd.com/ and is processed by STPHARMA SRL at Rue Van Soust 262 A, 1070 Anderlecht, Brussels, Belgium.

Article 2 – Legal Basis

The collection of personal data is justified by various legal grounds:

• Consent: notably when you respond to our questions and provide feedback on our products;
• Contract: processing personal data is necessary for the execution of the contract between STPHARMA SRL and you;
• Legal obligation;
• Legitimate interest of STPHARMA SRL to ensure the proper functioning of the http://oyl-cbd.com/ site and to prevent fraud.

Article 3 – Why Are My Data Collected

Your data is collected for various purposes:

• Customer relationship management, requiring identification data such as your name and contact information.
• Order, payment, and delivery of products, necessitating information like your name, email address, billing and delivery addresses, phone number, product selections, and payment details.
• Enhanced website navigation, customizing our services and messages, including offering products similar to those you’ve bought or viewed, requiring data about your browsing and purchases.
• Personalized online advertising and communication campaigns, involving the collection of browsing and purchase information.
• Loyalty program participation, requiring identification and purchase data.
• Sending commercial communications if you subscribe to the newsletter, needing data during account creation, such as your email address and phone number.
• Responding to inquiries about our products or brand sent to info@oyl-cbd.com.
• Managing product reviews, requiring at least your email address.
• Customer insights and website performance statistics, involving data collection to better understand our customers.

Article 4 – Personal Data Collected and Timing

We collect and process data such as name, first name, optional date of birth (with express consent), email address, password, phone number, postal address, IP address, connection data, browsing data, order history, viewed products, delivery incidents, and complaints.

These data are typically collected when:

• You access and browse our http://oyl-cbd.com/ website;
• You create and log in to your customer account;
• You write a comment;
• You select products;
• You confirm and pay for an order.

Article 5 – Data Retention Period

User Personal Data is not retained beyond the strictly necessary period for the pursued purposes, in accordance with Applicable Regulations.

Data related to an active customer is retained:

• For the entire duration of the contractual relationship;
• Until a request for deletion is received;
• Up to three years after a period of inactivity.

When you contact us for information about our products and brands, data is kept for the duration necessary to process your request.

Article 6 – Data Protection

We use GDPR Cookie Consent software to encrypt your information.

Article 7 – Data Sharing with Third Parties

The data we collect is shared with service providers we use to provide our services, such as carriers, online payment services, outsourced loyalty programs, etc.

Your data will not be transmitted outside the European Union.

Article 8 – Minors

Our website is not intended for minors, and we do not sell products to them. Consequently, we do not process their data.

Article 9 – Your Rights

According to Regulation (EU) no 2016/679 of April 27, 2016, you have rights related to your personal data that you can exercise at any time:

• Right of access;
• Right of rectification;
• Right to restrict data processing (especially if you dispute the accuracy of data, processing will be limited during the verification period);
• Right to erasure, also known as the “right to be forgotten.” However, we may be compelled to retain certain data for legal or imperative legitimate reasons;
• Right to data portability, meaning the right to receive your provided personal data in a structured, commonly used format and to transmit this data to another data controller;
• Right to opt-out of any commercial prospecting;
• You can also specify directives regarding the storage, erasure, and communication of your personal data after your passing.

You can exercise your rights with STPHARMA SRL at the following address: info@oyl-cbd.com.

For any request or in case of a dispute between STPHARMA SRL and users regarding the processing of their personal data, users can address their request or complaint to STPHARMA SRL at the following address: info@oyl-cbd.com.

STPHARMA SRL will make every effort to find a satisfactory solution to ensure compliance with applicable regulations.

In the absence of a response from STPHARMA SRL or if the dispute persists despite STPHARMA SRL’s proposal, users have the option to lodge a complaint with the supervisory authority of the European Union member state where the user usually resides.

Article 10 – Cookies

Browsing the XXXXX website may result in the installation of cookies on the user’s computer.

Definition: A cookie is a small file that does not identify the user but stores information related to a computer’s website navigation. The data obtained is aimed at facilitating future navigation on the site and enabling various visitor measurements.

Duration: Data collected by cookies issued are retained for a maximum of thirteen months.

Information Banner: An information banner is visible on your first connection to our site. It allows you to accept, customize cookie management, or decline cookies.

How to Block Cookies: Users can configure their computer to block cookie installation as follows:

In Internet Explorer: go to the Tools tab (gear icon in the upper right) / Internet Options. Click on Privacy and select Block All Cookies. Confirm with OK.

In Firefox: at the top of the browser window, click the Firefox button and go to the Options tab. Click on the Privacy tab. Set the Retention Rules to “Use custom settings for history” and uncheck to disable cookies.

In Safari: Click on the menu icon (gear symbol) in the upper right corner of the browser. Select Preferences. Click on Show advanced settings. In the “Privacy” section, click on Content Settings. In the “Cookies” section, you can block cookies.

In Chrome: Click on the menu icon (three horizontal lines) in the upper right corner of the browser. Select Settings. Click on Show advanced settings. In the “Privacy” section, click on Preferences. In the “Privacy” tab, you can block cookies.

Deletion – Users can delete them in the browser settings. However, deleting these cookies may result in some disruptions in the site’s functionality.