Privacy Policy

We appreciate your interest in our online shop. We take the protection of your personal data very seriously and treat it confidentially and in accordance with the statutory data protection regulations (GDPR, BDSG) and this privacy policy.

1. Responsible person

Petsamor Co., Limited
Room 1508, 15/F., Office Tower Two, Grand Plaza, 625 Nathan Road
Kowloon, Hong Kong
Email: info@osteovitalis.eu

2. Processing via Shopify

Our online shop is powered by Shopify.
Provider: Shopify International Ltd., Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
Shopify may transfer personal data internally to servers in Canada and the USA.
According to Article 45 of the GDPR, Canada is considered a third country with an adequate level of data protection.
For transfers to the USA, Shopify relies on standard contractual clauses pursuant to Art. 46 GDPR.
Further information: https://www.shopify.com/legal/privacy

3. Payment providers

We use the following payment services to process payments:
PayPal
Provider: PayPal (Europe) S.à rl et Cie, SCA, Luxembourg.
PayPal may conduct credit checks and risk assessments.
Klarna
Provider: Klarna Bank AB (publ), Sweden.
When selecting "purchase on account" or "installment purchase", Klarna conducts a credit check.
Legal basis: Art. 6 para. 1 lit. b GDPR.
Shop Pay / Apple Pay / Google Pay
Data is transmitted to the relevant providers for payment processing.
We only transmit data to payment providers that is necessary for processing the contract.

4. Tracking & Analysis

For the purpose of analyzing and optimizing our services, we use the following tools:
Google Analytics
Provider: Google Ireland Ltd., Dublin.
Data may be transferred to the USA. Legal basis: Art. 46 GDPR (Standard Contractual Clauses).
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
Meta Pixels (Facebook/Instagram)
Provider: Meta Platforms Ireland Ltd.
Purpose: Conversion tracking, remarketing.
Legal basis: Art. 6 para. 1 lit. a GDPR.
TikTok Pixel
Provider: TikTok Information Technologies UK Limited.
Purpose: Conversion tracking, performance marketing.
Legal basis: Art. 6 para. 1 lit. a GDPR.
No tracking cookies will be set without your consent.

5. Email Marketing

We use an email service provider to send emails (e.g., newsletters, campaigns, order information).
The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR (consent).
You can withdraw your consent at any time.

6. Cookies & Consent

For the use of cookies that are not technically necessary, we obtain consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with §25 TTDSG.
This is done via a Consent Management Platform (CMP).
Without your consent, only technically necessary cookies will be set.

7. Rights of data subjects

You have the following rights under Articles 15–21 GDPR:
l information
l Correction
l Deletion
l restriction
l Data portability
l contradiction

Complaints can be addressed to:
Data protection authority in your place of residence.

8. Storage duration

Personal data is stored only as long as is necessary to fulfill the respective purpose or as required by statutory retention periods.

9. Revocation of consent

Consent can be withdrawn at any time with effect for the future.

10. Changes to the Privacy Policy

We reserve the right to amend this privacy policy as needed.