Privacy Policy

Date: 7 February 2025

Oli’s Lab may need to collect your personal data when you browse on one of its platforms (the website https://olislab.com/ or mobile app) altogether referred to as the “Platforms” for the purpose of this policy. Oli’s Lab takes the protection of your privacy very seriously. As the controller of the data, it collects and it ensures that it maintains confidentiality of your personal data at all times. Such data is stored with the utmost care and is subject to the most appropriate security measures.

Please read our Privacy Policy carefully, as it describes the nature of the personal information that we collect from our clients and users, how it is processed, and who we may share it with. It enables you to understand your rights about the processing of your personal data, the measures that are implemented to guarantee the security of your personal information and how long your personal information is stored.

This policy applies to all the personal data and browsing data that you provide, and which is collected and processed by us on different occasions.

You acknowledge that by browsing on our Platforms, and in particular by placing orders or setting up alerts on our Platforms, you accept the terms of this Privacy Policy and consent to collection, disclosure and process of your Personal Data in accordance with this Privacy Policy.

Note to non-European users: for the time being, the Platforms are intended for European users only. If you are outside Europe and still access or use the Platforms and share your personal information, you are consenting to the transfer of your personal information in Europe as well as its process and record in Europe. Your personal information will then be processed in accordance with this Privacy Policy.

1. What is personal data?

The term personal data refers to any information relating to a natural person who is likely to be identified, either directly or indirectly, through their name, photo, fingerprint, email address, telephone number, IP address, login ID or shopping habits, geolocation

2. Who is the controller of your personal data?

Oli’s Lab SARL

limited liability company with registered capital of CHF 20,000

VAT number: CHE-163.287.575

registered in the Geneva Trade and Companies Register under number CHE-163.287.575

with registered office is located at 21, route de Pregny, 1292 Pregny-Chambesy, Switzerland

is the controller of personal data collected on the Platforms within the meaning of the applicable laws and regulation, and more particularly the European General Data Protection Regulation (GDPR - EU regulation 2016/679) relating to the protection of physical data with respect to processing of personal data and the free circulation of data.

3. What information do we collect from you and how do we collect it within the framework of our activity?

We collect your personal data from different sources, which are as follows:

Information that you provide us with, in particular through order forms, when you visit our Platforms, in your telephone or email conversations with our support department, via our social network pages or any event we organise. The processed personal information about you relates, for example, to: identity (first name and surname), username*, mail and billing address, email address, telephone number, details and history of your purchases, choices and preferences for our products and services, notification of availability of one (or several) product, information given to our customer services, payment details**, information or content with, for example, photographs, videos, survey answers and comments and information via social networks when you browse on our pages on social networks.
We do not have access to your password so we will be unable to send it to you on request. In the event of a loss of your password, you will need to apply for a password reset through one of our platforms.
** We would like to remind you that your bank card details never transit in plain text via our Website, but via a secure payment platform, and are encrypted with SSL protocol, to guarantee a secure environment for your payment methods.*
Information collected indirectly, either automatically or following your consent, through various technologies or platforms, in particular the cookies described according to the terms of our Cookies Policy, to gather information about:
- Technical data, for example the IP address used to connect your device on the Internet, your browsing software, your device's ID and your login information;
- Data relating to your visit on our Platforms, including all URLs visited before, during and after our Platforms, pages visited and downloaded, page response times, download errors and products that you have viewed or searched for.
Legitimate external sources with respect to your personal data that we collect from third-party companies, with which we work closely, such as, for example commercial partners, subcontractors responsible for delivering your orders, technical services, payment services, advertising agencies, credit agencies and statistical analysis service providers which are likely to send us, with your consent, personal information about you.

4. When can we collect your personal data?

We collect your personal data on these different occasions:

You create an account on our Platforms
You set up a product availability alert on your account;
You subscribe to our newsletter;
You consent to receive marketing and advertising communications;
You browse on our Platforms;
You make purchases on our Platforms;
You talk to our customer services through different channels, in particular mails, emails and telephone;
You take part in a promotional event, game or competition that we organise;
You share content on social networks using the hashtag #olislab, hashtags that we create;
You follow and/or comment on our pages on social networks (such as Instagram, Facebook, LinkedIn or YouTube);
You have given your consent to third parties for them to send us your personal data.

5. For which purposes and for what usage do we collect your personal data?

We will only collect the data necessary to fulfil explicit, legitimate and determined purposes for which it is processed. Within the framework of our activity, the main purpose of processing your personal data is to make our Platforms available to you, to ensure ergonomic and optimal browsing and to guarantee a safe environment, in particular:

to provide you with all the services available via the Platforms, telephone and via email;
to create and manage access to your account;
to process and manage the monitoring of your orders;
to manage your participation to commercial events, competitions or loyalty programs offered to our customers;
to manage our customer relationship through our CRM software to get to know your choices better, to personalise our offers according to your preferences and to send marketing communications or newsletters, on condition that you have previously given your consent;
personalise the Platforms’ features according to your preferences;
handle your requests or questions in the FAQs;
make secure online transactions and prevent fraud and payment incidents and manage recovery;
check, authenticate and identify the personal data you have sent;
analyse your shopping habits;
ensure that the Website and mobile app operate smoothly and constantly improve it;
guarantee the Website’s or mobile app’s security;
gather statistics and analyse Website and mobile app visits.

6. On what legal bases can we justify collection and processing of your Personal Data?

The ‘legal bases’ are the bases on which a company is authorised to process a natural person’s personal data.

Our policy is to ensure that your personal data is processed with the following justification:

we use the personal information concerning you, to enable us to fulfil our obligations resulting from a sales contract, which binds us to you, and to ensure optimal management and performance of your orders;
it is our legitimate interest, for marketing management purposes, to offer you the best online browsing and shopping experience on our Platforms;
the legal provisions sometimes will require that we collect and use our customers’ personal data. These are, for example, requests from the administrative authorities requiring the data of people who are involved in fraudulent or criminal activities. Or sometimes, tax laws may require that we store data relating to orders and payment for our products;
in some cases, we may ask for your consent before using your personal data, in particular for the purposes of managing our sales canvassing and your browsing data via cookies.

Whether or not personal data is required or optional and the potential consequences of not providing the requested data are stated when it is collected.

7. What are your rights and how can you exercise them?

Pursuant to the data protection amended law of 6 January 1978, and the General Data Protection Regulation no. 2016/679 of 27 April 2016, you have the following rights:

Right to access to a copy of your personal data that we have collected;
Right of rectification of your personal data;
Right to restrict processing of your personal data on legitimate grounds, in particular, if you consider that this processing would cause you damage;
Right of erasure of your personal data subject to legitimate grounds,
Right to portability of your personal data to request that it be sent to another data controller;
Right to withdraw by requesting that your consent be withdrawn at any time, at no cost.

You can exercise your rights by contacting:

Oli’s Lab SARL

21 Route de Pregny

1292 Pregny-Chambesy

Switzerland

Email: DPO@olislab.com

All requests must at least contain the following information: surname, first name, mail address and/or email address. It must be supported by a copy of the latter’s ID. You will receive a response from us within 1 month of receipt of the request.

You may also consult the website of the competent data personal authority in your country or in one of the countries of the European Union, and hand in a complaint under the conditions indicated by a competent personal data authority of the European Union.

8. Who can we disclose your personal data to?

We are the priority recipients of your personal data and it may under no circumstances be sold by us.

Personal information concerning you is mainly processed by Oli’s Lab employees and by people who we have granted access to in order to enable us to fulfill our contractual obligations towards you, for example to process an order.

Insofar as necessary, we may also share your personal data with trusted third parties or subcontractors, whom we require to comply with applicable laws and regulations as well as to adhere to our terms, and to take necessary technical and organisational measures to maintain the security and confidentiality of your personal data. We only provide personal information that is necessary for them to provide their services and we require that they do not use your personal data for any other purposes.

These are mainly, and necessarily, the following services providers that we use within the framework of our activity:

Website hosting and personal data collection solution service providers;
financial intermediaries such as banks or payment service providers;
shipping and delivery services for the products that you have ordered
analysis providers to collate statistics;
service providers in charge of communication for our company and canvassing on social networks, for example advertisers and advertising networks to publish targeted adverts in our name;
Service providers in charge of our email campaigns;
analysts and search engine providers to help us optimise browsing and ergonomics of our Platforms.

Based on legal or regulatory grounds, we may be obliged to disclose or share your personal Data with administrative, tax or judicial bodies and authorities.

9. What is our policy for transferring your data abroad and outside the European Union?

Sometimes we share or transfer your personal data with or to trusted third parties who are located outside the European Union, in countries whose personal data protection laws are different to those applicable in Europe. In such circumstances, we take technical and organisational measures to guarantee your rights and freedom and to ensure security and confidentiality for each of your personal information, in particular by gathering your consent and ensuring that the service providers take the necessary technical and organisational measures to guarantee security and protection of at least an equivalent level.

10. How do we protect your Personal Data?

We endeavour to secure your data and protect our systems and our activity on the Internet, and in this context, we take adequate technical and organisational measures to guarantee the security and confidentiality of your Personal Data.

However, despite our efforts to deploy and improve security, IT and physical measures, taking into account the sensitivity of certain Personal Data, we are not immune to the risks of computer piracy, given the functions and nature of the Internet as a communication method without borders, and we cannot guarantee that we will eliminate all risks related to third-party intrusion or abusive use of your data.

11. For how long do we have the right to store your personal data?

Pursuant to the applicable laws and regulations recommendations, we store your personal data only for the time necessary to fulfil the goals or purposes for which we have collected and processed your Personal Data, within the limits permitted by law. When the use of your Personal Data is no longer justified, we delete it or take all the measures to anonymise your personal information.

Purposes	Legal basis	Data retention period
To provide you with our services available on our Platforms	Performance of a contract to which you are party and/or taking steps at your request prior to entering into a contract	When you have created your account: personal data are retained for the duration of your account. Your connection logs are kept for 1 year. If your account is inactive for a period of 2 years, it will be deleted if you do not respond to our reactivation email. When you have not created your account: your data are retained for 3 years for direct marketing purposes. In addition, personal data may be archived for probationary purposes for a period of 5 years.
To perform operations related to contracts, orders, deliveries, invoices, loyalty programs and customer relationship management	Performance of a contract to which you are party	Personal data are retained for the duration of our business relationship. In addition, the data relating to your transactions (with the exception of your banking data) are archived for probationary purposes for a period of 5 years. The data related to your credit card are retained by our payment service provider until full payment of your order The CVV2 (Card Verification Value), listed on your credit card details, will not be stored.
To create a database of customers and prospects	Our legitimate interest in developing and promoting our business	For our customers: their personal data are retained for the duration of our business relationship. For our prospects: their personal data are retained for a period of 3 years starting from the last contact with us (e.g. communication, action). In addition, personal data may be archived for probationary purposes for a period of 5 years
To send newsletters, requests and direct marketing mailings	For our customers: our legitimate interest in winning customer loyalty and informing our customers of our latest news For our prospects: your consent	Personal data are retained for a period of 3 years starting from the last contact with us (e.g. communication, action) or until you withdraw your consent.
To manage your opinions on our products, services or content	Our legitimate interest in collecting your opinions on our products, services	2 years from the publication of the opinion
To comply with our legal obligations to report illegal content on the Platforms	Comply with our legal and regulatory obligations imposed in connection with our Platforms.	Your identification data is kept for 5 years after the end of the validity of the Terms of Use, the closing of your account or the closing of the report. Other information provided by the user, including payment information, is kept for one year from the end of the validity of the Terms of Use, the closing of your account or the closing of the report. The technical data allowing to identify the source of the connection or those relating to the terminal equipment used are kept for a period of one year as from the connection or the use of the terminal equipment.
To answer to your information request and other inquiries	Our legitimate interest in responding to your inquiries	Personal data are retained during the processing of your request and is deleted once the request has been processed.
To comply with our legal and regulatory obligations	Legal and regulatory obligations	Invoices are archived for a period of 10 years. In addition, the data relating to your transactions (with the exception of your banking data) are archived for probationary purposes for a period of 5 years.
To organize contests and promotional operations	Our legitimate interest in winning clientele loyalty and offering them gifts	The personal data is kept for the duration of the contests or promotional operations and may be archived for 5 years for evidential purposes.
To elaborate analytics of navigation, site audience visited pages and purchases.	Our legitimate interest in analyzing the composition of our customer base and improving our services	The personal data are retained for 13 months
To display personalized advertising	Your consent	The personal data are retained for 13 months
Combating money laundering and terrorist financing	Comply with our legal and regulatory obligations	Data relating to the fight against money laundering and the financing of terrorism are kept for 5 years from the end of the contract.
To process data subjects’ requests to exercise their rights	Our legitimate interest in responding to your requests and keeping records of them	If we ask you for proof of identity: we only retain it for the necessary time to verify your identity. Once the verification has been carried out, the proof is deleted. If you exercise your right to object to direct marketing: we keep this information for 3 years. The information allowing the management of your requests to exercise your rights under the GDPR will be kept for 3 years from the date of the request.

12. What is our responsibility policy on social networks?

Our Platforms may contain links that direct you to social network websites or our partners’ websites, which are neither operated nor controlled by us. We would like to inform you that each of these networks has its own Privacy Policy and Cookies policy, which may differ from ours. Even if we make every effort to ensure that the confidentiality and security of your personal data are observed by our partners, Oli’s Lab does not assume any liability for their confidentiality policy and the content of their website.

13. Our Newsletters — Your consent and your right to unsubscribe are important to us

With your consent, we will use your email address to send you our newsletters. You may unsubscribe for free from receiving our newsletter at any time by clicking the unsubscribe link included in each of the newsletters sent.

14. Updating our Privacy Policy

Please note that we reserve the right to amend the terms of our Privacy Policy at any time and when necessary, in particular to ensure compliance with the law and regulation. Each update will be indicated clearly at the beginning of this policy.