1. Who is responsible for processing
OtseRich is an information guide and affiliate catalogue of gifts and useful products. The controller’s contact details are shown above. If appointing an EU representative becomes mandatory, their details will also be published here before the European launch.
2. Data, purposes and legal bases
- Technical logs may include an IP address, request date and time, requested URL, browser type and error information. They are used to deliver pages, maintain stability, diagnose faults and prevent abuse. The legal basis is our legitimate interest in operating a secure and reliable service (Article 6(1)(f) GDPR).
- Enquiries submitted through the form or by email include the topic, message, related page, optional reply email and other information you provide. They are used to review and answer the request. The legal basis is taking steps at your request before a possible contract (Article 6(1)(b) GDPR) or our legitimate interest in communication and service improvement (Article 6(1)(f) GDPR), depending on the enquiry.
- Theme preferences and saved products remain in your browser and are not sent to OtseRich. We do not carry out profiling or automated decision-making that produces legal or similarly significant effects.
- To measure the website, we count page views, aggregated navigation paths and affiliate-link clicks. A record may contain the date, route, language, country, referral source, device class and product. We do not retain IP addresses, full user-agent strings or persistent visitor identifiers. Data is added directly to daily totals and is not used to build individual profiles. The legal basis is our legitimate interest in improving the catalogue (Article 6(1)(f) GDPR).
3. Cookies and local storage
OtseRich's own aggregate analytics does not use cookies or local identifiers for tracking and does not recognise a visitor between sessions. The browser stores technical analytics preferences, the theme and saved products in a cookie or localStorage. Strictly necessary cookies are used in the restricted administration area for sign-in and session security.
Meta Pixel loads only after you consent. It may send Meta Platforms Ireland Limited information about viewed pages and products, searches, affiliate-link clicks, the IP address, browser and device, and may set advertising cookies. Its purposes are advertising measurement, attribution and audience creation; the legal basis is your consent (Article 6(1)(a) GDPR). You can change your choice at any time through “Cookie settings” in the footer.
4. Providers, affiliate links and international transfers
Infrastructure providers may be used for hosting, page delivery, database services and security. They process data only as needed and under contractual arrangements. Depending on provider configuration, data may be processed outside the EEA; where this occurs, safeguards required by the GDPR are used, such as an adequacy decision or standard contractual clauses.
When you choose an affiliate link, your browser opens the seller’s website, such as AliExpress. That seller independently governs checkout, payment, delivery and its data processing. OtseRich may receive a commission without increasing your price. Visitor data is not sent to OpenAI; it is used only inside the restricted editorial admin area to prepare product copy.
5. Retention
Local preferences remain on your device until you remove them. Aggregated hourly analytics are retained for no more than 31 days and daily analytics for no more than 400 days. Correspondence is kept only as long as needed to answer, resolve related matters and meet legal obligations. Technical logs are then deleted or anonymised.
6. Your rights
Where the law provides, you may request access, rectification, erasure, restriction or portability and object to processing based on legitimate interests. You may complain to a competent data protection authority, including in the country of your residence, workplace or the alleged infringement.
7. Security and changes
We use appropriate organisational and technical safeguards, although no internet transmission method is completely secure. If the service or processing changes, we will update this page and its revision date.
8. Data requests
To exercise a right or ask about privacy, email the address below. Describe the request and provide the email used in earlier correspondence; we may request only the information needed to verify identity securely.