GDPR Compliance

Last Updated: October 20, 2025

1. What is GDPR?

The General Data Protection Regulation (GDPR) is a regulation in EU law on data protection and privacy for all individuals within the European Union and the European Economic Area. It also addresses the export of personal data outside the EU and EEA areas.

2. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to your personal data
• Right to Rectification: You have the right to request correction of inaccurate personal data
• Right to Erasure: You have the right to request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: You have the right to request restriction of processing your personal data
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used format
• Right to Object: You have the right to object to processing of your personal data
• Right to Withdraw Consent: You have the right to withdraw consent at any time
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority

3. How We Collect Your Data

We collect personal data that you provide to us directly when you:

• Create an account on our website
• Make a purchase or place an order
• Subscribe to our newsletter
• Contact us through our contact form or email
• Participate in surveys or promotions
• Use our website (through cookies and similar technologies)

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

• Consent: You have given clear consent for us to process your personal data for a specific purpose
• Contract: Processing is necessary for a contract we have with you, or because you have asked us to take specific steps before entering into a contract
• Legal Obligation: Processing is necessary for us to comply with the law
• Legitimate Interests: Processing is necessary for our legitimate interests or the legitimate interests of a third party

5. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

• Encryption of personal data
• Regular security assessments
• Access controls and authentication
• Regular backups
• Employee training on data protection
• Incident response procedures

6. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.

7. International Data Transfers

Your personal data may be transferred to, and processed in, countries other than the country in which you are resident. When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place.

8. Third-Party Processors

We may share your personal data with third-party service providers who process data on our behalf. These processors are contractually obligated to:

• Process data only according to our instructions
• Implement appropriate security measures
• Not use the data for their own purposes
• Delete or return data when the service ends

9. How to Exercise Your Rights

To exercise any of your GDPR rights, please contact us at:

• Email: support@opart.live
• Subject: GDPR Data Request

We will respond to your request within 30 days of receipt. In some cases, we may need to verify your identity before processing your request.

10. Data Protection Officer

If you have any questions or concerns about how we process your personal data, you can contact our Data Protection Officer at: support@opart.live

11. Changes to This Policy

We may update this GDPR compliance statement from time to time. We will notify you of any material changes by posting the new statement on this page.

12. Supervisory Authority

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with your local data protection supervisory authority.