Privacy Policy

1. Introduction

Welcome to Oilstonery (accessible via www.oilstonery.com). We respect your privacy and are committed to protecting your personal data. This privacy policy informs you as to how we look after your personal data when you visit our website and tells you about your privacy rights and how the law protects you.

2. Data Controller

The data controller responsible for your personal data is Oilstonery, located in Germany. If you have any questions about this privacy policy, please contact us via email at aroma@oilstonery.com.

3. The Data We Collect About You

Personal data means any information about an individual from which that person can be identified. We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:

Identity Data: includes first name, last name, or similar identifier.
Contact Data: includes billing address, delivery address, email address, and telephone numbers.
Financial Data: includes payment details. Please note that all financial transactions are processed securely through our payment service provider, Stripe. We do not store full credit card details on our servers.
Transaction Data: includes details about payments to and from you and other details of products you have purchased from us.
Technical Data: includes internet protocol (IP) address, browser type and version, time zone setting and location, browser plug-in types and version, operating system, and other system infrastructure on the devices you use to access this website.

4. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Where we need to perform the contract we are about to enter into or have entered into with you.
Where it is necessary for our legitimate interests and your fundamental rights do not override those interests.
Where we need to comply with a legal obligation.

5. Payment Processing via Stripe

To process your payments, we utilise Stripe as our payment processing service provider. When you make a purchase, your payment information is transmitted directly to Stripe. Stripe processes your data in accordance with its own privacy policies and applicable regulatory standards. We do not retain complete payment card details in our internal databases.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In accordance with German and European statutory retention obligations (such as those under the German Commercial Code (HGB) and the German Fiscal Code (AO)), financial records, invoices, and transaction data are retained for statutory periods of 6 to 10 years.
When personal data is no longer required for its specified purpose or statutory retention periods expire, we securely delete or anonymise it.

7. Your Legal Rights

Under the General Data Protection Regulation (GDPR) and European data protection laws, you have rights in relation to your personal data, including the right to:

Request access to your personal data.
Request correction of your personal data.
Request erasure of your personal data.
Object to processing of your personal data.
Request restriction of processing your personal data.
Request transfer of your personal data.
Right to withdraw consent at any time.

If you wish to exercise any of the rights set out above, please contact us at aroma@oilstonery.com.

8. Data Security

We have implemented appropriate organisational and technical measures to guard against your personal data being accidentally lost, used, accessed improperly, altered, or disclosed. Furthermore, we limit access to your personal data to those personnel, agents, contractors, and other entities who have a business need to know.