Privacy Policy

Protection of personal data on the website of Orrache.com

VERSION FROM: [2024]

We would like to emphasize that your personal information is confidential when you visit this website, unless you voluntarily choose to disclose it.

We collect only that personal information that you voluntarily provide and only for the purposes specified in these privacy policies. We do not require you to submit this information to us in order to allow you access to our site, and we do not ask you to disclose more information than is necessary to participate in any activity on our site.

When we collect personal data, we are obliged to comply with the provisions of the relevant regulations on the protection of personal data.

Please read all the information below, and if you have any questions or concerns about our Privacy Policy or would like to share your experiences on this website, please let us know by email hello@orrache.com

If you are a minor, please do not send us your personal data!

 

1. GENERAL ASPECTS

When you use the website https://www.orrache.com/ ("Website"), which also includes the online store ("Virtual Store"), Gelebo BV. ("Orrache" or "Data Operator") processes as a data operator a series of personal data about you, in accordance with the relevant legislation on the protection of personal data.

This privacy policy ("Policy") describes what types of data are processed, how they are used and what your rights are in relation to this processing.

We recommend that you read this Policy before using the Web Page. If you do not agree with its provisions, please stop using the Website.

 

2. PERSONAL DATA PROCESSED BY THE COMPANY

"Personal data" means any information relating to an identified or identifiable natural person ("Data Subject").

We collect personal information in accordance with applicable regulations, for example, to send you news and emails, to enter and participate in prize competitions, to notify winners, to send publications, brochures and other materials promotions or respond to your questions, complaints and comments.

We process your personal information only on the basis of your consent, the laws or the legitimate interests of the data controller, such as processing your data for marketing purposes directly related to the advertising of our products or services ("commercial communication"), through electronic means or through other forms of communication. In certain cases, the collection of your personal information will be necessary for the performance of a contract between you and Orrache, for example when you purchase products from our webshop, so that we can deliver the product to the requested delivery address and the like.

The company processes the following categories of personal data:

1. Contact and identification data required to create a user account on the Web Page and/or to enroll in Orrache's loyalty programs;

2. Contact and identification data required to order products in the Virtual Store and for their delivery to the requested address;

3. Data regarding the purchases made through the Virtual Store such as the products purchased, the amounts invoiced and collected, including data regarding the payment method chosen by the user, the frequency of purchases;

4. Data from users' correspondence with the Data Operator (including their content);

5. Data on user interaction with the Web Page – The operator collects data on how you interact with the Web Page through the use of cookies. For details on these technologies and how they are used, please see Section 8 (Cookie Policy).

We may offer you the possibility to use social login data (eg Facebook). If you choose to use your social profile, please be aware that the social platform, depending on your profile settings on that social network, may share your profile information with us.

We do not retrieve, record or use the personal data of minors, within reasonable limits of our knowledge, except with the consent of the parents or, as the case may be, of their legal representatives.

If you are a minor, please do not send us your personal data, i.e. name, surname, address, telephone number or e-mail address, as well as any other data that could help identify you. If you still choose to send us correspondence in which you disclose personal data to us even though you are minors and do not have the consent of your parents or, as the case may be, legal representatives, we inform you that the Company will expressly refuse to process this correspondence.

If, despite this fact, a contact is established at the request of the minor, in the case of the transfer of personal data by the minor, Orrache expressly refuses to accept any material or moral requirements resulting from the processing of the contact

Personal data processed by Orrache is stored in Croatia and/or another member state of the European Economic Area ("EEA"). In certain cases, Orrache transfers personal data to service providers or other persons who process such personal data in third countries. For example, PNI transfers certain personal data (for example, a telephone number or other contact information) to marketing communication service providers who process this data in third countries outside the EEA, such as Switzerland. In this case, the transfer of data to a third country is permitted on the basis of an adequacy decision of the European Commission which sets out how the relevant third country ensures an adequate level of protection of personal data, in accordance with Article 45 of the Regulation general. Regulations. The European Commission's adequacy decisions are available at the following link: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_ro. In all other cases of data transfer to third countries for which the European Commission has not taken a decision on adequacy, PNI will transfer data only on the basis of adequate safeguards in accordance with Article 46 of the General Regulation, including standard data protection clauses issued by European Commission. in accordance with the derogation rules for special situations in accordance with Article 49 of the General Regulation. Copies of the standard data protection clauses can be accessed via the following link: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32010D0087&from=enui.

 

3. THE PURPOSES FOR WHICH PERSONAL DATA ARE PROCESSED

The purposes of personal data processing are:

3.1. Opening user profiles on a Web Page and / or membership profiles in Orrache loyalty programs;

3.2. Online order processing and order delivery to the address requested by the user;

3.3. Providing various benefits to members of loyalty programs of the Company;

3.4. Sending commercial communications via email, mobile phone or post or courier (within the limits of your consent);

3.5. Participation in surveys, quizzes and contests with prizes organized by Orrache. For details on this type of processing, please see Section 7 (Surveys, Surveys and Marketing Promotions);

3.6. Responding to questions you submit or to your advice, complaints, comments and the like;

3.7. Carrying out various reports / statistics on the way of using the Website and the services offered by Orrache, respectively on the way in which the contractual relations with the Company were carried out;

3.8. The resolution of any disputes or complaints related to or resulting from the activities provided by the Company.

 

4. COMMUNICATION OF DATA TO OTHER ENTITIES

We do not sell, transfer or disclose the information we collect on our site to anyone outside of Orrache without your consent, except (1) as required by law and when necessary to comply with legal obligations; (2) when it is necessary for the protection of life or bodily integrity and you are unable to consent to the processing of personal information; (3) when this is necessary for the performance of public interest tasks, (4) when you personally disclosed this information, and (5) when it is necessary to protect our legitimate interests. We will retain your personal information only for the time necessary to achieve the above purposes. E.g:. Data whose processing is necessary for the execution of the contract (e.g. when purchasing our products) or to take measures at your request before concluding the contract, will be processed no later than 5 years after the fulfillment or termination of the contract. Personal data that we are required to retain in order to comply with our legal obligations will be processed until the expiration of the retention periods specified in the relevant regulations.

The Company may disclose all or part of the personal data to other recipients as shown below:

4.1 To the authorized persons appointed to process personal data on his behalf and on his behalf, such as suppliers or collaborators who assist the Company in maintaining and developing the services offered through these web pages (e.g. providers of page production and maintenance services web, delivery service providers for ordered products or promotional materials, suppliers / collaborators in the realization / execution of marketing campaigns and similar, collaborators or suppliers who can provide the best answers to your questions)

4.2. To the legal successor or successors, in case of change of status due to division, merger, restructuring or other transfer of control within the company;

4.3. Other recipients to whom Orrache is authorized or required to disclose personal information of individuals based on applicable regulations.

5. SAFETY OF CREDIT CARD USE

Orrache is committed to applying maximum security measures to protect the interests of customers and to prevent the possibility of misuse of information. The products/services available in the Virtual Store are sold through the online payment solutions offered by Shopify Payments.

Credit card payment transactions are protected by 3D-Secure authentication technology with 256-bit SSL encryption, which is considered a safe way to conduct financial transactions. This method enables the secure transmission of information and prevents unauthorized access to data during direct communication between your computer and Shopify Payments (the operator of the online payment system) and vice versa.

The payment transaction takes place through the Shopify Payments payment interface (operator of the online payment system). Therefore, credit or debit card numbers are not stored and are not accessible to Orrache.

The personal data required for payment processing is collected directly by Shopify Payments (the operator of the online payment system) as a data controller.

Gelebo BV cannot be held liable for incorrect use, which cannot be established as a result of a security breach of the web store or the omission of Gelebo BV.

 

6. SENDING MESSAGES BY EMAIL

When you send us electronic correspondence (such as an e-mail message containing your question, comment, complaint, suggestion, and the like or through the contact form on the Web Page) that contains personally identifiable information, we will use that information to to satisfy your request. We may send your email address as well as your message / request to other collaborators (eg Suppliers) who can best answer your questions.

All the Company's collaborators and business partners are responsible for observing the rules of confidentiality of personal data.

 

7. SURVEYS, QUESTIONNAIRES, MARKETING PROMOTIONS AND JOB POSTINGS

We occasionally conduct surveys or may ask you to complete questionnaires on the Web Page. The data collected from these surveys and questionnaires are used exclusively within the Company. If we publish the results of a survey on a page or via our social media accounts, these are cumulative statistical data and do not contain personal data.

The Web Page may contain information about various contests we run ("contests") or job postings available on Orrache. For these contests and sweepstakes that allow electronic access, unless otherwise specified in the contest rules, we will use your personal information only for the purpose of conducting a contest (for example, to contact a winner and to fulfill our the legal obligations regarding the organization of the competition or for the recruitment process in the case of vacant jobs). We may disclose this information to service providers who help us run the competition and who are legally required to maintain the confidentiality of all available data or to public authorities for the purpose of complying with legal obligations. We may also publish certain personal data (e.g. name, surname and prize amount) to fulfill legal obligations or to ensure the transparency of contests organized by us.

Gelebo BV cannot be held liable for damages resulting from the use of the information on these pages for purposes other than the intended purpose.

 

8. COOKIE POLICY

The website uses so-called "Cookies". Cookies are small files, consisting of letters and numbers, which will be stored on your computer, mobile phone or other equipment, through a web browser, to provide the user with the best quality services and content of a user accessing the Internet. They store certain information (for example, your preferred language or web page settings), which your browser can re-transfer to us when you access the Web Page again (depending on the lifetime of the Cookie).

We use two categories of Cookies:

1. Cookies strictly necessary for the functionality of the website

Certain cookies are strictly necessary to allow you to explore this website and to use its services and fundamental features. Without these cookies, for example, you will not be able to access certain secure areas or track your online shopping cart. These cookies cannot be disabled.

We use the following mandatory cookies:

_secure_session_id	Identifier used to track a user's session through the multi-step checkout process and keep order, payment and delivery details linked.
cart_sig	Hash identifier of the shopping cart contents. This is used to verify the integrity of the basket and to secure operations on it.
keep_alive	Identifier that ensures that the user's session remains active and prevents automatic logout due to inactivity.
localization	Used in connection with checkout.
_cmp_a	Used to manage client privacy settings.
secure_customer_sig	Used to identify a user after logging into a store as a customer so that they do not need to log in again.
order	Used in conjunction with the order status page.
_tracking_consent	Stores the user's consent preferences related to cookies.
cart	Used in connection with the shopping cart.
cart_ts	Used in connection with checkout.

 

2.  Optional cookies

We use this type of cookies inside our site to allow you a better experience of using it. The information received from these cookies helps us to understand how our visitors use the website in order to improve the quality of the content presented to you and the browsing experience.

Optional cookies include, among others, Google Analytics cookies (a web analysis service of Google Inc.). This type of cookie monitors participation and analyzes the success of the site, which are available to Orrache as statistical data, without the personal data of individual users). There is the possibility of using social network cookies (eg Facebook), which allow the user to share specific content on social networks through his own account.

We use eCommerce Platform Provider Shopify to power our online store - you can read more about how Shopify uses your personal information here: https://www.shopify.com/legal/privacy

We also use Google Analytics to help us understand how our customers use the Site - you can read more about how Google uses your personal information here: https://www.google.com/intl/ro/ policies/privacy/. You can also opt out of Google Analytics here: https://tools.google.com/dlpage/gaoptout.

We use the following optional cookies:

_s	Shopify analytics identifier.
_shopify_s	Shopify analytics identifier.
_y	Shopify analytics identifier.
_shopify_y	Shopify analytics identifier.
_shopify_sa_t	Shopify analytics related to marketing and referrals.
_shopify_sa_p	Shopify analytics related to marketing and referrals.
_orig_referrer	Track landing pages.
_landing_page	Track landing pages.

When you first access the website, a label will appear warning you about the existence of cookies and asking for your approval to accept them. You can accept the use of cookies by clicking the OK button in the notification regarding the use of cookies on the site. Personal data will not be collected before you give your consent to data processing in the manner indicated

To the extent that cookies are managed on your own, you have the right to withdraw at any time the consent previously given to the use of cookies on this website by accessing the Cookies menu at the bottom left of the screen. By clicking on the black icon you will be able to access the complete list of cookies used and you will be able to change the type of consent offered.

If you refuse to accept cookies, the functionality and / or quality of the site's content could be affected. We exclude any liability for any loss of functionality and/or quality of the website content in these cases.

For more information on how you could configure your browser settings regarding cookies, you can access the following links:

Here to learn more about "Private Browsing" mode and Cookies settings in Firefox;

Here to read about "Incognito" mode and Cookies settings in Google Chrome;

Here to read about "InPrivate" mode and Cookies settings in Internet Explorer;

Here for more information on "Private Browsing" mode and Cookies settings in Safari.

 

9. RIGHTS OF DATA SUBJECTS

Consent to the processing of personal data is not mandatory, but the refusal to grant access to data processing as mentioned above may prevent the user from using all or part of the content offered by the website or accessing information about the products / services offered by Orrache.

By transmitting personal data to Orrache, the "data subject" does not waive his rights guaranteed by the international regulations for the protection of personal data and in particular the right to request the rectification or deletion of personal data from the database if they are incomplete, incorrect or unsuitable or their processing does not comply with the provisions of the regulations of Belgium.

As a data subject, you have a number of rights, including:

1. a) The right of access: Users whose data are processed have the right to receive confirmation, as well as access to the personal data related to them and to the processing information, the categories of personal data, the recipients of the data, the period for which the data will be stored and other rights

1. b) The right to rectification of data: Users have the right to request the modification of incorrect personal information or the completion of incomplete data.

Registered users have access to their data at any time and can edit / modify it directly from their account.

1. c) The right to delete personal data: Under certain conditions, users have the right to delete the personal information they refer to. Registered users can delete their account at any time.

1. d) The right to withdraw privileges: users have the right at any time to withdraw their consent given on a previous date for the processing of personal data.

If you only want to change the settings for a commercial communication, you can also change it at any time in your user profile.

1. e) Also, in certain circumstances, users have the right to submit objections to the processing of personal data, the right to request the restriction of data processing and the right to the portability of personal data.

For all matters related to the protection of personal data and for the enforcement of the rights mentioned above, please contact the contact address mentioned in Article 10 of these Rules.

1. f) The right to file a complaint with the supervisory authority: If you believe that your rights are being violated, you have the right to file a complaint with the National Supervisory Authority for the Processing of Personal Data.

Depending on the request of the user / "data subject", Orrache undertakes:

1. To confirm to the user whether or not they are processing their personal data relating to that user / "data subject";

2. To correct or delete, free of charge and without delay, personal data relating to the user / "data subject";

3. Limit or stop the processing of personal data of users / "data subjects".

 

10. CONTACT

For any questions regarding the protection of your personal data, as well as to fulfill the rights and requirements mentioned above, you can contact the data protection officer in Gelebo BV. by sending an e-mail to the address: hello@orrache.com or by post to the address of our headquarters: Gelebo BV, Kaphaanlei 230, Mortsel, Belgium. Orrache does not respond to anonymous requests.