PRIVACY POLICY

Effective 5 August 2025

This Privacy Policy explains how OASLY AQUA, S.L. ("Oasly", "we", "us") collects, uses, shares and protects your personal data when you visit our website, purchase or subscribe to our products or services, or otherwise interact with us. The processing is carried out in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR") and Spanish Organic Law 3/2018 on Data Protection and Digital Rights ("LOPDGDD").

DATA CONTROLLER

  • Company name: OASLY AQUA, S.L.
  • Tax ID (CIF): B22655765
  • Address: C/ Dega Bahi 28, 08026 Barcelona, Spain
  • E‑mail: privacy@oasly.com
  • Phone: +34 689 44 85 08

PERSONAL DATA WE COLLECT

We may process the following categories of data:

  • a) Identification and contact data – name, surname, postal address, ID/NIE, e‑mail, telephone.
  • b) Contract data – plan type, device serial number, billing and payment history, service tickets.
  • c) Installation data – supply address, optional photos of the installation area, initial TDS readings.
  • d) Browsing data & cookies – IP address, device, pages visited, preferences (see Cookie Policy).
  • e) Marketing preferences – newsletter opt‑in, participation in referral programme.
  • f) Customer‑service recordings or correspondence – phone recordings, e‑mails or chat transcripts.

PURPOSES AND LEGAL BASES

PurposeLegal basis (Art. 6 GDPR)
Manage the contracting, delivery, installation, maintenance and invoicing of devices.Performance of a contract (Art. 6 (1)(b))
Respond to enquiries, complaints or rights requests.Legal obligation (Art. 6 (1)(c)) and/or legitimate interest (Art. 6 (1)(f))
Send marketing communications about Oasly products or promotions.Your consent (Art. 6 (1)(a)) or our legitimate interest in direct marketing (Art. 6 (1)(f); Recital 47 GDPR)
Operate the referral programme and grant bonuses.Performance of a contract (Art. 6 (1)(b))
Fraud and non‑payment prevention.Legitimate interest (Art. 6 (1)(f))
Compliance with accounting, tax and warranty obligations.Legal obligation (Art. 6 (1)(c))

DATA RETENTION

  • Contract data: 5 years after contract termination (tax and limitation periods).
  • Marketing data: until you withdraw consent or object to processing.
  • Call recordings: up to 6 months, unless required to manage incidents.
  • Browsing data: as set out in the Cookie Policy or up to 26 months in Google Analytics.

DISCLOSURES

Your data may be shared with:

  • • Tax authorities and other competent bodies where required by law.
  • • Financial institutions and payment gateways to process payments.
  • • Courier and logistics companies for device delivery and collection.
  • • IT service providers (hosting, CRM, ticketing, e‑mail marketing) acting as data processors under Article 28 GDPR and bound by confidentiality.

We do not transfer personal data outside the European Economic Area unless covered by an adequacy decision, Standard Contractual Clauses or equivalent safeguards.

SECURITY MEASURES

We implement appropriate technical and organisational measures – including in‑transit encryption (HTTPS), access controls, backups and staff training – to ensure confidentiality, integrity and availability of personal data.

YOUR RIGHTS

You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by writing to privacy@oasly.com or the postal address above and attaching proof of identity.

If you believe your request has not been satisfactorily addressed, you have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at www.aepd.es.

AUTOMATED DECISIONS AND PROFILING

Oasly does not take decisions based solely on automated processing that produce legal effects or significantly affect you. The limited profiling carried out for marketing purposes merely segments customers into broad categories (e.g., plan type) to send more relevant messages and has no significant impact on you.

COOKIES

We use first‑party and third‑party cookies for technical, analytical and advertising purposes. For details or to manage your preferences, please refer to our Cookie Policy.

CHANGES TO THIS POLICY

We may update this Policy to reflect legal or processing changes. We will post the new version on the website and notify you by e‑mail when the change is material. The "Effective" date at the top of this document indicates the latest revision.

CONTACT

For any questions about data protection, please contact our internal Data Protection Lead at privacy@oasly.com.

— END OF PRIVACY POLICY —