Privacy policy

PRIVACY POLICY

Last updated: September 2026

At ODIS, we are committed to protecting your privacy and handling your personal data transparently, securely and in accordance with applicable data protection legislation, including Regulation (EU) 2016/679 (the “GDPR”) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (“LOPDGDD”).

This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website, place an order, subscribe to our communications, contact us or otherwise interact with ODIS.

1. DATA CONTROLLER

The data controller responsible for the processing of your personal data is:

Company: RESTATE2000, S.L.
Trade name: ODIS
CIF: B67662015
Address: Plaza del Baix, 13, 03202 Elche, Alicante, Spain
Email: contact@odis.es

For any questions regarding this Privacy Policy or the processing of your personal data, you may contact us at the email address above.

2. PERSONAL DATA WE COLLECT

Depending on how you interact with ODIS, we may collect the following categories of personal data:

Identification and contact information

Name and surname
Email address
Telephone number
Billing address
Shipping address

Order and transaction information

Products purchased
Order history
Order value
Shipping information
Returns and refunds
Customer service communications

Payment information

Payments are processed through third-party payment providers. ODIS does not normally receive or store your complete credit or debit card information.

We may receive information relating to the status and confirmation of your payment from the relevant payment provider.

Account information

If you create or use a customer account, we may process information associated with that account, including your contact details and order history.

Marketing information

Newsletter subscription status
Marketing preferences
Interaction with our marketing communications
Where applicable, information relating to advertising campaigns

Technical and browsing information

When you use our website, certain information may be collected automatically, including:

IP address
Browser type
Device information
Operating system
Pages visited
Interaction with the website
Referral source
Cookie and similar technology identifiers

Further information about these technologies is available in our Cookie Policy.

3. HOW WE USE YOUR PERSONAL DATA

We may process your personal data for the following purposes:

Managing your orders

We process your information to:

Process and confirm your order
Process payments
Arrange shipment and delivery
Provide order updates
Manage returns, exchanges and refunds
Resolve issues relating to your purchase

The legal basis for this processing is the performance of the contract between you and ODIS.

Customer service

We process personal information when you contact us in order to answer questions, resolve problems and provide assistance regarding our products, orders or services.

Depending on the circumstances, this processing may be necessary for the performance of our contract with you or based on our legitimate interest in providing appropriate customer service.

Legal and administrative obligations

We may process and retain information where necessary to comply with legal obligations, including accounting, taxation, consumer protection and other applicable regulatory requirements.

Fraud prevention and security

We may process information where reasonably necessary to:

Detect fraudulent transactions
Prevent misuse of our website
Protect our customers
Protect ODIS and its systems
Maintain the security of our services

This processing may be based on our legitimate interests and, where applicable, our legal obligations.

Marketing communications

Where legally permitted, we may use your contact information to send you information about:

New collections
Product launches
Events
Promotions
ODIS news
Other relevant commercial communications

Where consent is required, we will only send these communications after you have provided your consent.

You may unsubscribe from marketing communications at any time using the unsubscribe link included in our emails or by contacting us at contact@odis.es.

Withdrawing your consent does not affect the lawfulness of processing carried out before its withdrawal.

Website analytics and improvement

Subject to applicable consent requirements, we may use analytical technologies to understand how visitors interact with our website and to improve its performance, design, functionality and customer experience.

Advertising and measurement

Where you have provided the required consent, we may use cookies and similar technologies to measure advertising performance and deliver or personalize advertising through third-party platforms.

For more information, please see our Cookie Policy.

4. LEGAL BASIS FOR PROCESSING

Depending on the purpose, ODIS processes your personal data on one or more of the following legal bases:

Performance of a contract
Where processing is necessary to process your purchase, payment, delivery, return or other services requested by you.

Legal obligation
Where processing is necessary to comply with applicable legal requirements.

Consent
Where you have expressly authorized us to process your data for a specific purpose, such as certain marketing, analytics or advertising activities.

Legitimate interests
Where processing is necessary for our legitimate business interests and those interests do not override your fundamental rights and freedoms, for example in connection with website security, fraud prevention or certain customer service activities.

5. WHO WE SHARE YOUR PERSONAL DATA WITH

We do not sell your personal data.

We may share personal information with third-party service providers where necessary to operate our business and provide our services.

These may include:

E-commerce and website infrastructure providers
Hosting and technology providers
Payment processors
Banks and financial service providers
Shipping, courier and logistics companies
Customer service providers
Email marketing and CRM providers
Analytics providers
Advertising and marketing platforms
Fraud prevention and security providers
Accounting, legal and professional advisers
Public authorities where required by law

These third parties may process personal information only to the extent necessary to provide their respective services, subject to applicable legal and contractual requirements.

6. SHOPIFY

Our online store is operated using Shopify.

Shopify may process certain personal data when you visit our website, create an account, make a purchase or otherwise interact with our store.

Shopify may act as a service provider or processor on behalf of ODIS and, in certain circumstances, may process information for its own purposes in accordance with its own privacy terms and applicable law.

7. SHIPPING AND PAYMENT PROVIDERS

In order to process and deliver orders, we may share necessary personal information with payment providers, shipping companies, logistics partners and other service providers involved in fulfilling your purchase.

The specific provider used may vary depending on your location, selected payment method, delivery destination and service availability.

Only the information reasonably necessary to perform the relevant service will be shared.

8. INTERNATIONAL DATA TRANSFERS

Some of our service providers may process personal data outside Spain or outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we take appropriate steps to ensure that the transfer complies with applicable data protection legislation.

Depending on the circumstances, these safeguards may include:

European Commission adequacy decisions
Standard Contractual Clauses approved by the European Commission
Other legally recognized transfer mechanisms

9. DATA RETENTION

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal requirements.

Retention periods may vary depending on the type of information and purpose of processing.

For example:

Order and transaction information
May be retained for the period necessary to comply with accounting, tax, consumer and other legal obligations.

Customer service communications
May be retained for as long as reasonably necessary to manage your request and any potential subsequent claims.

Marketing information
May be processed until you withdraw your consent, unsubscribe or object to the relevant processing, subject to any information we must retain to demonstrate compliance with your request.

Cookies and similar technologies
Are retained for the periods specified in our Cookie Policy.

When personal data is no longer required, it will be deleted, anonymized or securely blocked where required by applicable law.

10. COOKIES AND SIMILAR TECHNOLOGIES

Our website uses cookies and similar technologies for purposes including:

Essential website functionality
Shopping cart functionality
Security
Website analytics
Performance measurement
Personalization
Advertising, where applicable

Non-essential cookies and technologies will be used subject to the consent requirements applicable to them.

You can find further information about the cookies and technologies we use in our Cookie Policy.

11. YOUR DATA PROTECTION RIGHTS

Under applicable data protection legislation, you may have the right to:

Access
Request confirmation as to whether we process your personal data and obtain a copy of that information.

Rectification
Request correction of inaccurate or incomplete personal data.

Erasure
Request deletion of your personal data where the applicable legal requirements are met.

Restriction of processing
Request that the processing of your personal data be restricted in certain circumstances.

Data portability
Receive certain personal data in a structured, commonly used and machine-readable format and, where applicable, request its transmission to another controller.

Object to processing
Object to certain processing based on legitimate interests and to processing for direct marketing purposes.

Withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time.

Withdrawal of consent will not affect the lawfulness of processing carried out before your withdrawal.

To exercise any of these rights, please contact:

contact@odis.es

Please provide sufficient information for us to identify your request. Where necessary and legally permitted, we may request additional information to verify your identity.

12. RIGHT TO LODGE A COMPLAINT

If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with the competent supervisory authority.

In Spain, the supervisory authority is:

Agencia Española de Protección de Datos (AEPD)
www.aepd.es

We encourage you to contact us first at contact@odis.es so that we can try to resolve any concerns directly.

13. CHILDREN'S PRIVACY

Our website and products are not specifically directed at children.

We do not knowingly intend to collect personal information from children in violation of applicable law.

If you believe that a child has provided us with personal information improperly, please contact us at contact@odis.es.

14. DATA SECURITY

We implement appropriate technical and organizational measures designed to protect personal data against:

Unauthorized access
Loss
Destruction
Alteration
Unauthorized disclosure
Other unlawful processing

However, no online system or transmission method can guarantee absolute security.

15. THIRD-PARTY LINKS

Our website may contain links to websites or services operated by third parties.

ODIS is not responsible for the privacy practices of third-party websites. We recommend reviewing the privacy policy of any third-party service before providing personal information.