Privacy Policy.
This policy describes how Otaliven collects, uses, and handles personal data in accordance with the General Data Protection Regulation (GDPR) as applicable in Belgium.
1. Data Controller
The data controller for personal data collected through this website is:
Otaliven is an independent wellness resource focused on everyday nutrition and active lifestyle practices for men. The content is not affiliated with any governmental or institutional body.
2. Data We Collect
Otaliven collects personal data only when voluntarily provided by the visitor. The categories of data collected are:
- ■ Contact form submissions: name, email address, selected subject, and message content. This data is submitted voluntarily and is used solely to respond to the enquiry.
- ■ Usage data: anonymised technical data including browser type, device type, pages visited, and session duration. This data is collected via cookies and analytics tools where consent has been given. See the Cookie Policy for details.
- ■ Server logs: IP addresses and access timestamps recorded automatically by the hosting infrastructure. These logs are held for a maximum of 30 days and used only for security and error-resolution purposes.
3. Legal Basis for Processing
Otaliven processes personal data under the following legal bases as defined in Article 6 of the GDPR:
Analytics and non-essential cookies are set only after the visitor provides explicit consent via the cookie consent banner. Consent may be withdrawn at any time through the Cookie Settings link in the site footer.
Where a visitor submits a contact form enquiry, personal data is processed to respond to that enquiry. This constitutes the pre-contractual steps taken at the request of the data subject.
Server log data is retained for up to 30 days on the basis of legitimate interests in maintaining website security and identifying technical errors. This processing does not override the rights of the data subject.
4. How We Use Your Data
Personal data submitted through the contact form is used exclusively to respond to the enquiry described in the message. Otaliven does not use contact form data for outbound marketing, newsletter subscription, or any purpose beyond the direct response.
Anonymised usage data (where consent has been given) is used to understand how visitors navigate the catalogue, identify pages with high engagement, and improve the documentation resource. This data is not combined with personal identifiers.
Otaliven does not sell, rent, or share personal data with third parties for commercial purposes. Data is not transferred outside the European Economic Area.
5. Data Retention
Contact form enquiry data is retained for a period of 12 months from the date of the original submission. After 12 months, the enquiry record is deleted from the internal correspondence system unless an ongoing matter requires retention for a longer period, in which case the data subject is informed.
Server log data is retained for a maximum of 30 days. Anonymised analytics data (where consent has been given) may be retained for up to 24 months in aggregate form.
6. Your Rights Under GDPR
As a data subject, you have the following rights regarding personal data held by Otaliven:
- ■Right of access: you may request a copy of personal data held about you.
- ■Right to rectification: you may request correction of inaccurate personal data.
- ■Right to erasure: you may request deletion of personal data where no overriding legitimate interest or legal obligation applies.
- ■Right to object: you may object to processing based on legitimate interests.
- ■Right to withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- ■Right to lodge a complaint: you have the right to lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit) if you believe your rights have been infringed.
To exercise any of the above rights, contact Otaliven by email at [email protected]. Requests are responded to within 30 calendar days.
7. Third-Party Services
This website loads resources from the following third-party services. Each is loaded only where technically required or where consent has been provided:
- ■Google Fonts: typography assets loaded from fonts.googleapis.com. Google's privacy policy applies.
- ■Google Maps: an embedded map on the contact page loads from maps.google.com. Google's privacy policy applies to the map embed.
- ■CDN script libraries: JavaScript and CSS libraries are loaded from cdn.jsdelivr.net, unpkg.com, code.jquery.com, and cdnjs.cloudflare.com. These services may log IP addresses per their standard server logging.
Otaliven does not share personally identifiable visitor data with any of the above services beyond what is transmitted as part of a standard HTTPS request.
8. Data Security
This website enforces HTTPS for all connections. Contact form submissions are transmitted over an encrypted channel. Internally, access to correspondence records is restricted to the Otaliven specialist.
In the event of a data incident affecting personal data submitted through this site, Otaliven will notify the affected individual and the Belgian Data Protection Authority within 72 hours of becoming aware of the incident, as required under Article 33 of the GDPR.
9. Contact & Policy Updates
For any questions about this privacy policy or data handling practices, contact Otaliven at:
Otaliven, Rue de Rollebeek 57, 1000 Brussels, Belgium
This policy was last reviewed in October 2024. It may be updated to reflect changes in data handling practices or applicable law. The date at the top of this page will be revised when updates are made.