Privacy Policy

1. Who we are

The data controller responsible for your personal data is:

dpMarketingGroup, s.r.o.
Námestie sv. Egídia 55, 058 01 Poprad, Slovakia
IČO: 52526071  ·  DIČ: 2121051658  ·  IČ DPH: SK2121051658
Email: dpmarketinggroup@gmail.com

We operate the ONNYA brand and the website at onnya.shop.

2. What data we collect and why

When you submit your email address through our waitlist form, we collect:

• Email address — to notify you when ONNYA launches and to send you relevant product updates and promotional offers.

We do not collect any other personal data through this form (no name, phone number, or payment information).

3. Legal basis for processing

We process your email address on the basis of your explicit consent (Article 6(1)(a) GDPR), given when you tick the consent checkbox and submit the form.

You may withdraw your consent at any time by clicking the unsubscribe link in any email we send, or by contacting us at dpmarketinggroup@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. How long we keep your data

We retain your email address until you unsubscribe or request deletion. If ONNYA does not launch within 24 months of your sign-up, we will delete your data or ask for renewed consent.

5. Third parties and data processors

Your data is stored and processed by the following sub-processors:

• Netlify, Inc. (San Francisco, USA) — our hosting and form collection provider. Netlify processes data under Standard Contractual Clauses ensuring adequate protection for transfers outside the EU/EEA. Netlify Privacy Policy

We do not sell, rent, or share your personal data with any other third parties for their own marketing purposes.

6. Your rights under GDPR

As a data subject, you have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restriction — ask us to limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting past processing

To exercise any of these rights, email us at dpmarketinggroup@gmail.com. We will respond within 30 days.

7. Supervisory authority

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Slovak data protection authority:

Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava
dataprotection.gov.sk

8. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with a revised date. We encourage you to review it periodically.