Privacy Policy

What Personal Data is Collected

The personal data collected on this website includes the following:

Information provided by visitors: When a visitor chooses to contact us through the contact form, they provide details such as full name, phone number, and email address in order to receive assistance.
IP address: The website automatically logs the Internet Protocol (IP) address of the visitor’s device via log files upon entry. The IP address is a unique numerical identifier assigned to the user’s device, and log files are server records where the website is hosted. This logging occurs automatically and cannot be bypassed, as it serves security purposes, such as protecting the site from malicious attacks.
Information collected through cookies: Cookies are stored on the visitor’s device if they consent to their use upon entering the site. The type of data collected depends on the type of cookies used and may include online identifiers that enable tracking, logging, and analysis of the user’s online behavior—both on this website and across other sites. This data is utilized for targeted advertising based on the visitor’s interests and preferences across affiliated social media, advertising, and analytics platforms.

For a detailed overview of the types of cookies we use, please refer to our “Cookie Policy.”

Why These Personal Data Are Collected

The aforementioned personal data are collected and processed exclusively for the following purposes, in accordance with the corresponding legal bases:

Legal Basis: Contract | Purpose: Serving website visitors
When you submit a message through the contact form, we process your personal data to assist you according to your request.

Legal Basis: Legitimate Interest | Purpose: Protecting our website from malicious attacks
The automatic logging of IP addresses through log files is necessary to safeguard our website from cyber threats, as it is in our legitimate interest to ensure its security.

Legal Basis: Legal Obligation | Purpose: Informing Authorities
The automatic logging of IP addresses is also required by law, as we have a legal obligation to report incidents of malicious attacks to the relevant authorities if necessary.

Legal Basis: Consent | Purpose: Ensuring a technically sound and functional website, monitoring website performance, and conducting advertising campaigns

If the visitor consents to the use of cookies, certain automated data collection processes take place for the above purposes.

For more details on the types of cookies we use, please refer to our Cookie Policy.

Who We Share Personal Data With

Contact Form Data:
The information provided by visitors through the contact form is not shared with third parties.

IP Address Logging:
The automatic logging of IP addresses through log files may be accessed by network service providers that host our website.

Cookie Data:
If a visitor consents to the use of tracking cookies, the collected information is shared with partnered social media, advertising, and analytics platforms such as Google LLC and Meta Platforms. These third parties utilize the data for statistical analysis, targeted advertising, and retargeting. In such cases, data may be transferred outside the European Union. Each third party processes personal data in accordance with its own privacy policy and under contractual safeguards. Visitors are encouraged to consult the privacy policies of these third-party platforms for more information on how they process personal data.

Legal Obligations:
If required by law or legal rights, we are obligated to share personal data with law enforcement agencies, as well as any other administrative, judicial, or public authority.

Data Transfers Outside the European Economic Area

Where personal data is transferred to countries outside the European Economic Area (EEA), such as the United States, we ensure that such transfers are made in accordance with applicable data protection laws. These safeguards may include:

Standard Contractual Clauses (SCCs) approved by the European Commission
Data processing agreements with third-party providers

How Long We Retain Personal Data

Personal data is retained for as long as necessary, depending on the purpose of collection, the type of processing, and any legal rights or obligations that apply.

Your Rights Under the GDPR Legal Framework

Right to Transparent Information: You have the right to know what personal data is collected and how it is used, as outlined in this Privacy Policy.
Right of Access: You can request access to the personal data we have collected about you.
Right to Rectification: You may correct or update any inaccurate or outdated information.
Right to Erasure (“Right to be Forgotten”): You can request the deletion of your personal data under certain circumstances.
Right to Restrict Processing: You have the right to request a restriction on the processing of your personal data.
Right to Data Portability: You may request a copy of your data in a structured, commonly used, and machine-readable format.
Right to Object: You can object to the processing of your personal data.
Right to Withdraw Consent: If data processing is based on your consent, you may withdraw it at any time.
Right to Lodge a Complaint: If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority within the European Economic Area.

California Privacy Rights (CCPA)

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

Right to Know: You have the right to request that we disclose the personal information we have collected about you in the past 12 months, the sources of that information, the purposes for collecting it, and the third parties with whom we have shared it.
Right to Delete: You may request that we delete the personal information we have collected from you, subject to certain exceptions.
Right to Opt-Out: We do not sell personal data, including that of California residents. However, if our practices change, we will provide a “Do Not Sell My Personal Information” link on our website.
Right to Non-Discrimination: You will not be discriminated against for exercising your rights under the CCPA.

To exercise your California privacy rights, please contact us at info@eternaloliveroots.com. We may need to verify your identity before processing your request.

Contact Information

If you would like to learn more about how your personal data is processed or wish to exercise your rights, you can contact us via email at info@eternaloliveroots.com

Last Update of the Privacy Policy

This Privacy Policy is updated whenever necessary. We encourage you to review it periodically to stay informed about how your data is protected.

Last Update 13/06/25