Privacy & GDPR Policy
1. Who we are
Ormelia is the distributor of ATHOS Greek extra virgin olive oil and table olives. The data controller is ANTONIADIS IOANNIS-HARALAMPOS PERSOANĂ FIZICĂ AUTORIZATĂ. For any question about your data, contact contact@ormelia.ro.
2. What we collect
When you place an order we collect the details entered at checkout: full name, email address, phone number, delivery address (street and number, town, postal code and optionally apartment or block details) and any note you add. Your basket, chosen language and cookie choice are stored only in your browser (local storage) and are not sent to us until you place an order.
2b. Stock reminders and reviews
Back-in-stock reminders. If you ask to be told when a product returns, we keep your email address and which product it was. If you also accept a browser notification, we keep the technical subscription your browser provides. We do not ask for your name and we do not add you to any newsletter.
Reviews. If you submit a review we keep the display name, email address, rating and review text, and the order code if you enter one. Only the name, rating, date and text are ever published — the email address and order code stay internal and are used solely to check that a review comes from a real buyer.
The review request after delivery. After an order we keep the order code, email address, the products ordered and the date, so that we can send you a single review request. We do not keep your delivery address, phone number or order total for this purpose.
3. Why we use it, and the legal basis
We use your data to process, confirm and deliver your order and to contact you about it. The legal basis is performance of the contract under Article 6(1)(b) GDPR. For analytics and advertising cookies, and for passing to Google the matching data described in section 5, the legal basis is your consent, under Article 6(1)(a) GDPR.
For stock reminders and reviews the legal basis is your consent (Article 6(1)(a) GDPR), given when you complete that form and withdrawable at any time by writing to us. For the review request sent after delivery, the legal basis is our legitimate interest in learning what customers think of what they bought (Article 6(1)(f) GDPR); it is a single message and you may object at any time.
4. Payment
You may pay by card online or cash on delivery. Card payments are processed by NETOPIA FINANCIAL SERVICES S.A. (NETOPIA Payments) on their own secure pages — your card details never pass through this site and never reach us. We receive only the outcome of the payment, the amount and a transaction reference. To be able to fulfil an order paid by card we keep the order details (name, email, phone, delivery address, items and amount) for at most 90 days from payment, the period in which a card payment can still be disputed with the bank; after that they are deleted automatically. We do not collect, process or store card or bank account details on this site.
5. Who we share it with
We share delivery details only with the courier needed to bring you your order, and with the transactional email provider through which we send your confirmation. If you accept cookies, usage data is processed by Google Analytics, and Google Ads is told that an order was placed, its value and its order code, so we know which ads brought it. Also only with your consent, the email address and phone number from the order are sent to Google irreversibly hashed (SHA-256), solely to match the order to an ad click ("enhanced conversions"); Google does not use them to contact you. The provider is Google Ireland Limited. We never sell your personal data. When you pay by card, your name, email, phone number and address are also passed to NETOPIA FINANCIAL SERVICES S.A. (NETOPIA Payments) as payment processor, which needs them to authorise the transaction and to prevent fraud.
6. How long we keep it
We keep order information only as long as needed to fulfil the order and to meet legal, tax and accounting obligations, after which it is deleted or anonymised.
Back-in-stock reminders: deleted as soon as we have sent your reminder, and in any case after 90 days if the product does not return. Deletion is automatic.
Data kept for the review request: at most 60 days from the order, then deleted automatically.
Submitted reviews: at most 12 months in the moderation queue. A published review stays up while it is published; you can ask us to withdraw it at any time.
Card orders: the order details needed to fulfil a card payment are kept for at most 90 days from payment — the period in which a card payment can still be disputed with the bank — and are then deleted automatically.
7. Cookies & local storage
This site uses Google Analytics 4 to measure traffic, and Google Ads to measure orders that come from our ads and to show you Ormelia ads after you have visited the shop. These cookies load only after you accept them in the banner shown on your first visit — until then consent is denied by default (Google Consent Mode v2). You may decline and the shop works identically. Independently of that choice, the site uses your browser's local storage to remember your basket, language and cookie preference. Full detail in our Cookie Policy.
8. Your rights
Under GDPR you have the right of access, rectification, erasure, restriction or objection to processing, data portability, and to withdraw consent at any time. You may also lodge a complaint with the data protection authority (in Romania, ANSPDCP). To exercise any right, write to contact@ormelia.ro.
9. Contact
For any privacy request or question, contact contact@ormelia.ro.