Scope and Applicability
This GDPR Policy explains how personal data may be processed in connection with Ostavon and the website ostavon.com.
Ostavon primarily serves consumers in the United States. The General Data Protection Regulation (“GDPR”) does not automatically apply to every visitor, customer, or individual whose information is processed through the website. GDPR rights and protections apply only where the GDPR applies to the relevant processing of personal data.
If you are located in the European Economic Area (“EEA”) or another jurisdiction where the GDPR applies to the processing of your personal data, you may have additional rights described in this Notice. The availability and scope of those rights depend on the circumstances of the processing and applicable law.
This GDPR Notice should be read together with our Privacy Policy and Cookies Policy, which provide additional information about how we collect, use, and protect information.
Personal Data We May Process
Where the GDPR applies, we may process personal data that is reasonably necessary for website operations, customer service, and ecommerce activities. Depending on how you interact with us, this may include:
Name
Contact information
Shipping and billing information
Order information
Account information, where applicable
Website usage information
Information collected through Cookies or similar technologies
Communications and related information you provide when contacting customer service
We do not collect personal data beyond what is reasonably necessary for the purposes described in this Notice, our Privacy Policy, or our Cookies Policy.
Payment information may be processed as necessary to complete transactions. We do not represent that we retain complete payment card numbers or CVV information.
How We Use Personal Data
Where applicable, we may process personal data for the following purposes:
Processing and fulfilling orders;
Providing products and services requested by customers;
Communicating with customers regarding orders, inquiries, and customer service matters;
Operating and maintaining the website;
Supporting account-related functions, where applicable;
Understanding website usage and improving the user experience;
Maintaining website security and preventing misuse;
Complying with applicable legal or regulatory requirements; and
Other purposes described in our Privacy Policy or Cookies Policy.
We use personal data only for purposes that are appropriate and permitted under applicable law.
Legal Bases for Processing
Where the GDPR applies, we may rely on one or more of the following legal bases depending on the particular processing activity:
Consent
Where consent is required or otherwise appropriate, we may process personal data based on your consent. You may withdraw your consent as described below.
Contract
We may process personal data when processing is necessary to perform a contract with you, take steps at your request before entering into a contract, or provide products or services you have requested.
For example, certain information may be necessary to process and fulfill an order.
Legal Obligation
We may process personal data when necessary to comply with an applicable legal or regulatory obligation.
Legitimate Interests
We may process personal data where processing is necessary for our legitimate interests, provided that those interests are not overridden by your rights and interests under applicable law.
Depending on the circumstances, legitimate interests may include operating and maintaining the website, providing customer service, improving our services, maintaining security, and preventing misuse.
The legal basis applicable to a particular processing activity depends on the circumstances. Not every processing activity is necessarily based on all of the legal bases described above.
Your GDPR Rights
Where the GDPR applies to the processing of your personal data, you may have certain rights under the GDPR. These rights are subject to the conditions and limitations provided by applicable law.
Right to Access
In certain circumstances, you may have the right to request access to the personal data we process about you and, where applicable, information about how that data is processed.
Right to Rectification
You may have the right to request correction of inaccurate personal data or completion of incomplete personal data.
Right to Erasure
In certain circumstances, you may have the right to request deletion of your personal data. This right is not absolute, and we may be permitted or required to retain certain information under applicable law.
Right to Restriction
In certain circumstances, you may have the right to request restriction of the processing of your personal data.
Right to Object
Where the requirements of applicable law are met, you may have the right to object to certain processing of your personal data, including processing based on legitimate interests.
Right to Data Portability
Where applicable, you may have the right to receive certain personal data you have provided to us in a structured, commonly used, and machine-readable format and, in certain circumstances, request that the data be transmitted to another organization.
Right to Withdraw Consent
If processing is based on your consent, you may have the right to withdraw that consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew your consent.
If another lawful basis permits or requires us to continue processing the relevant personal data, withdrawing consent does not necessarily mean that we must stop all related processing.
Right to Lodge a Complaint
Where the GDPR applies, you may have the right to lodge a complaint with a supervisory authority responsible for data protection in the applicable jurisdiction.
How to Exercise Your GDPR Rights
If you believe that the GDPR applies to your personal data and you wish to exercise a right under the GDPR, please contact us by email. Email is our preferred method for privacy-related requests.
Email: support@ostavon.com
Phone: +1 (352) 592-1847
When submitting a request, you may need to provide information reasonably necessary to help us understand and process your request and, where appropriate, verify your identity.
Please do not send complete payment card numbers, CVV information, account passwords, or other unnecessary highly sensitive information through ordinary email.
We will evaluate and handle requests in accordance with applicable law. Whether a particular right applies and how a request may be handled depends on whether the GDPR applies to you and the specific circumstances of the request.
Cookies and Similar Technologies
We may use Cookies and similar technologies to support website functionality, remember user preferences, understand website usage, and improve the user experience.
Where the GDPR applies, certain processing activities involving Cookies or similar technologies may require your consent. Where applicable, you may manage or withdraw your consent through the options we make available.
For more information about our use of Cookies and similar technologies, please review our Cookies Policy. That policy provides more detailed information about the Cookies used in connection with the website.
Data Sharing and Processing
Where the GDPR applies, we may share personal data with relevant service providers or other lawful recipients when reasonably necessary for the following purposes:
Fulfilling orders and providing requested services;
Operating and maintaining the website;
Providing customer support;
Complying with applicable legal or regulatory obligations;
Maintaining security and preventing misuse; or
Carrying out other lawful activities described in our Privacy Policy.
Where third parties process personal data on our behalf, they may process such information only as appropriate for providing the relevant services and achieving the relevant purposes, and subject to applicable legal requirements.
Unless otherwise stated in our applicable privacy notices, this Notice is not intended to identify or represent that we use any particular third-party service provider.
International Data Transfers
Because Ostavon is located in the United States, personal data may be processed in the United States or in other locations outside the jurisdiction where you are located.
Where the GDPR applies to the relevant personal data and such data is transferred internationally, we will take appropriate measures required by applicable data protection laws for such transfers. The safeguards applicable to a particular data transfer may depend on the circumstances and requirements of applicable law.
This Notice does not represent that we use any particular international data transfer mechanism or certification.
Data Retention
We retain personal data for as long as reasonably necessary for the purposes for which it was collected, including providing services, processing orders, maintaining business and transaction records, resolving disputes, protecting our legitimate interests, and complying with applicable legal obligations.
The appropriate retention period may vary depending on the type of information, the purpose of processing, and applicable legal requirements.
When personal data is no longer necessary, we may delete it or otherwise handle it in accordance with applicable law.
Data Security
We take reasonable technical and organizational measures designed to protect personal data against unauthorized access, use, disclosure, alteration, or loss.
No method of transmitting or storing information can be guaranteed to be completely secure. Therefore, while we take reasonable measures to protect personal data, we cannot guarantee absolute security.
U.S. Privacy Laws
Ostavon primarily serves consumers in the United States. Our processing of personal data may also be subject to applicable U.S. federal and state privacy laws.
The privacy rights available to an individual may vary depending on the individual's location, applicable law, and the specific circumstances of the processing.
The GDPR rights described in this Notice apply only where the GDPR applies. This Notice does not limit or replace rights you may have under applicable U.S. privacy laws or other applicable laws.
For additional information about our general privacy practices, please review our Privacy Policy.
Changes to This GDPR Policy
We may update this GDPR Notice from time to time to reflect changes to our privacy practices, applicable legal requirements, or the website.
If we make updates, we will revise this page as appropriate. We encourage you to review this Notice periodically to stay informed about how GDPR data protection rights and related privacy practices may apply to your personal data.
Contact Us
If you have questions about this GDPR Notice or our privacy practices, or if you wish to submit a privacy-related request, please contact us using the information below:
Address: 7039 Toucan Trl, Spring Hill, FL 34606, United States
Email: support@ostavon.com
Phone:
+1 (352) 592-1847
+1 (352) 592-1847
Customer Service Hours: Monday–Friday, 9:00 AM–6:00 PM (America/New_York)