Privacy Policy
Last revised: January 2026 · Revision 01-A
Olamiren, operating from ul. Chmielna 18, 00-644 Warsaw, Poland (hereinafter "we", "us", or "Olamiren"), is the data controller responsible for your personal data when you access and interact with the website located at olamiren.info.
This Privacy Policy describes what personal data we collect, the purposes for which we process it, how long we retain it, and the rights available to you under the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Polish data protection legislation.
By visiting olamiren.info, you acknowledge that you have read and understood this Privacy Policy. If you have questions or concerns about how your data is handled, please contact us at [email protected] or by post to the address stated above.
Olamiren products are nutritional food-supplements registered with the applicable local regulatory authority under food-supplement classification. Products meet compositional and labelling requirements for nutritional supplement categories. This website does not provide individual nutritional guidance. We recommend speaking with a qualified wellness or nutrition professional before introducing any supplement to your daily routine, particularly if you have specific dietary requirements.
2.1 Data provided directly by you
When you submit our contact form, we collect the following categories of personal data:
- —Name: your first and/or last name as entered in the contact form.
- —Email address: used to respond to your enquiry.
- —Message content: the text of your enquiry or correspondence.
Provision of this data is voluntary. However, without a valid email address we are unable to respond to your enquiry.
2.2 Data collected automatically
When you visit olamiren.info, our web server and third-party analytics tools may automatically record:
- —Your IP address (anonymised where technically possible)
- —Browser type and version, operating system
- —Pages viewed, time on page, referral source
- —Date and time of access
This data is collected through cookies and similar tracking technologies. Please refer to our Cookie Policy for a full breakdown.
2.3 Special category data
We do not intentionally collect special category personal data (e.g. data concerning health, ethnicity, religion, or biometric identifiers). Please do not include such data in correspondence submitted through our contact form.
We process your personal data on the following legal bases as defined under Article 6 GDPR:
Where processing is based on legitimate interests (Art. 6(1)(f)), we have conducted a balancing assessment. The processing does not override your fundamental rights and freedoms, as the data involved is limited in scope and sensitivity, and you retain the right to object at any time.
Olamiren does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes.
We may share your data with the following categories of recipients in the course of operating our services:
- —Hosting & infrastructure providers: our website is hosted on servers located within the European Economic Area (EEA). Server-level access logs may be processed by the hosting provider under a data processing agreement.
- —Analytics providers: anonymised usage data may be processed by analytics software operating within the EEA or under Standard Contractual Clauses where applicable.
- —Legal and regulatory authorities: we may disclose personal data when required to do so by applicable law, court order, or competent supervisory authority.
Where personal data is transferred outside the EEA, we ensure that adequate safeguards are in place, including Standard Contractual Clauses (Art. 46(2)(c) GDPR) or adequacy decisions adopted by the European Commission.
Under GDPR, you have the following rights in relation to your personal data. You may exercise any of these rights by contacting us at [email protected].
Right of access (Art. 15)
You have the right to obtain confirmation of whether we process personal data about you, and if so, to receive a copy of that data together with information about the processing.
Right to rectification (Art. 16)
You have the right to request correction of inaccurate personal data and, where incomplete, to have it completed.
Right to erasure (Art. 17)
You may request erasure of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where you object to processing and there are no overriding legitimate grounds.
Right to restriction (Art. 18)
You may request that we restrict processing of your data in certain circumstances, such as while you contest its accuracy or while an objection is being assessed.
Right to data portability (Art. 20)
Where processing is based on consent or a contract and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format.
Right to object (Art. 21)
Where processing is based on legitimate interests, you have the right to object on grounds relating to your particular situation. We will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Right to withdraw consent (Art. 7(3))
Where processing is based on your consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, if you believe that your data is being processed in violation of applicable law.
We will respond to data subject requests within one calendar month. In cases of complexity or high volume, this period may be extended by a further two months, of which you will be notified.
We implement appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These include HTTPS encryption, access controls, and regular review of data handling practices.
Despite these measures, no transmission over the internet can be assured as fully secure. Should a personal data breach occur that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and, where required, inform you directly.
This Privacy Policy may be updated from time to time to reflect changes in our data practices or applicable legislation. The revision date at the top of this page will be updated accordingly. Continued use of olamiren.info following a revision constitutes acknowledgement of the updated policy.