Our Approach to Personal Data Protection
At Ostraviel, we aim to handle personal information responsibly, transparently, and only for legitimate purposes connected with our online furniture shopping services. This notice explains how personal data may be collected, used, stored, disclosed, and protected when you browse our products, place an order, contact customer support, or interact with our website.
The General Data Protection Regulation (GDPR) applies where legally required. The rights and obligations described below depend on the applicable law, your location, and the circumstances of the processing.
Personal Information We May Process
Depending on how you interact with our website, the information processed may include your name, billing and delivery addresses, email address, telephone number, order details, payment-related information, customer service communications, and technical information such as your IP address, browser type, device information, and website interaction records.
Payment card details are handled according to the payment methods and processing arrangements used for a transaction. We do not claim to store complete payment card details unless this accurately reflects our actual practices.
We seek to collect only information reasonably necessary for the purposes described in this notice.
Why We Use Personal Data
Personal data may be processed to receive and fulfill orders, arrange delivery, process payments and refunds, respond to questions, provide order updates, prevent fraud, maintain website functionality, resolve disputes, meet legal obligations, and protect our legitimate interests.
Where analytics, personalized content, or marketing technologies are used, the relevant information may also be processed for those purposes, subject to applicable consent requirements and privacy choices.
Legal Grounds for Processing
Where the GDPR applies, personal data is processed only when a valid legal basis exists. Depending on the circumstances, this may include taking steps at your request before entering into a contract, fulfilling a purchase contract, complying with a legal obligation, pursuing legitimate interests that do not override your rights, or obtaining your consent.
You may withdraw consent at any time where processing relies on consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
Sharing and International Data Transfers
Personal information may be shared with service providers that help us operate our shopping services, such as payment processors, shipping carriers, website hosting providers, customer support providers, and technical service providers, where those services are actually used.
Information may also be disclosed when required by law, to respond to valid legal requests, to protect rights and security, or in connection with a legitimate business reorganization where permitted by law.
If personal data is transferred outside the European Economic Area, the United Kingdom, or another relevant jurisdiction, we will apply the transfer safeguards required by the applicable law where necessary. Depending on the circumstances, these may include an adequacy decision or appropriate contractual safeguards.
Data Retention and Security
Personal data is retained only for as long as reasonably necessary to fulfill the purposes for which it was collected, including order fulfillment, customer support, accounting, legal compliance, and dispute resolution. The retention period depends on the type of information, the reason it is held, and applicable legal requirements.
Appropriate technical and organizational safeguards should be used to help protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. No method of electronic transmission or storage can be guaranteed to be completely secure.
Your Data Protection Rights
Where the GDPR applies and its legal conditions are met, you may have the right to request access to your personal data, obtain a copy of it, correct inaccurate information, request deletion, restrict certain processing, and receive certain data in a portable format.
You may also have the right to object to processing based on legitimate interests, including certain forms of direct marketing. Where processing is based on consent, you may withdraw that consent. Some rights are subject to legal exceptions, and we may need to verify your identity before responding to a request.
You may exercise applicable rights by contacting us using the contact details provided below. We will review and respond to requests within the time limits required by applicable law.
Right to Complain to a Supervisory Authority
If you believe that the processing of your personal data violates the GDPR or other applicable data protection law, you have the right, where provided by law, to lodge a complaint with a competent data protection supervisory authority.
You may generally contact the supervisory authority in the European Union member state where you habitually reside, work, or where the alleged infringement occurred. You do not have to contact us first before lodging a complaint. However, you may contact us if you wish to raise a concern directly.
The appropriate authority depends on your circumstances and the applicable jurisdiction. Information about national supervisory authorities is available through the European Data Protection Board.
Cookies and Similar Technologies
Our website may use cookies or similar technologies to support essential website functions, remember preferences, understand website performance, or support marketing activities. Where required by law, non-essential cookies or similar technologies will be used only after obtaining the necessary consent.
You can manage available cookie preferences through the controls provided on the website or through your browser settings. The technologies actually used and the choices available to you should be accurately described in the website's cookie notice and consent interface.
Automated Decisions
We do not intend to make decisions producing legal effects or similarly significant effects on individuals solely through automated processing unless permitted by applicable law and any required safeguards are in place. If such processing is used, additional information and applicable rights will be provided as required by law.
Changes to This Notice
This notice may be updated to reflect changes in applicable law, our services, or our personal data handling practices. The latest revision date will be displayed at the beginning of this notice.
Contact for Data Protection Requests
For questions about this notice or to submit a personal data request, please contact us:
Email: customer@ostraviel.com
Phone: +81 24-682-7395
Customer support hours: Monday through Friday, 9:00 AM–6:00 PM Eastern Time (ET)
Mailing address: 15 Aihamada Aigota, Soma City, Fukushima 976-0022, Japan