Privacy Policy

01Who we are

The controller of your personal data is OXYHELP INDUSTRY SRL, a company registered in Romania with the Trade Register under no. J40/23073/1994, fiscal code RO6598397, with its registered office at Sos. Panduri no. 15, Bl. P18, Sc. 1, Et. 2, Ap. 7, Sector 5, 050652 Bucharest, Romania ("OxyHelp", "we", "us").

For any question about your data or to exercise your rights, write to office@oxyhelp.com or to the address above. You can also call us on +40 722 152 153.

02What we collect and when

We collect only what you send us through a form, plus a small amount of technical data that any website needs to work and stay secure.

Contact form and distributor application

Your name, email address, phone number, country and your message. If you tick the box, we also record that you agreed to receive other communications from us.

Brochure and other downloads

Your name, email address, country and what you are interested in (for example home use, a clinic or a gym), plus which material you downloaded and when. If you tick the box, we also record that you agreed to receive other communications from us.

After you fill in the form once, your browser remembers these details until you close the tab, so you do not have to type them again for the next download. Each download in that tab is recorded with the same details.

Service request

Your full name, email address, phone number and country, whether your chamber is under warranty, its serial number, the subject and description of the problem, the dates and times when you are available, and the photos or videos you choose to upload (up to 8 files). If you tick the box, we also record that you agreed to receive other communications from us.

Photos taken with a phone can contain the place and time where they were taken. If you prefer not to share that, turn off location for your camera or remove it from the file before you upload it.

Newsletter

Your email address and, if you choose to give them, your first name, last name and phone number, together with your agreement to receive news from us.

Your story (testimonials)

How you want to be credited (anonymously or by name), your name, role, company, city and country, your email address, your chamber model and since when you have used it, your story, any link and photos or videos you send, and your choices about publication and follow-up.

If you choose to stay anonymous, we publish only your country and your chamber model. Your other details stay with our team.

Data collected automatically

• Your IP address. We use it to protect the forms from abuse (we limit how many forms one address can send in a short time) and, through Cloudflare Turnstile, to check that a form is sent by a person and not by an automated program. We also use the country it points to, without storing it, to pre-select the dialling code in the phone field. When a form is passed to our customer management system (see below), the IP address is sent with it.
• The page you send a form from, its title and its address. If you reached the website through a link from one of our campaigns, that address can contain campaign tags (such as utm_source, utm_campaign, gclid or fbclid), which tell us which campaign brought you. If you accepted marketing cookies, your browser also keeps these tags until you close the tab, so they can be added to a form you send later in the same visit.
• Cookies and similar technologies, as described in our Cookie Policy.

Health information

Please do not include health information, such as diagnoses, conditions or treatments, in your messages, service requests or stories. We do not need it to answer you, we do not use it, and we may delete it.

03Why we use your data and on what legal basis

• To answer your message, prepare an offer, assess a distributor application and send you the material you asked for. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries and following up on them (Art. 6(1)(f) GDPR).
• To handle a service request for your chamber. The legal basis is the performance of the contract and of the warranty (Art. 6(1)(b) GDPR) or, outside warranty, our legitimate interest in supporting our customers (Art. 6(1)(f) GDPR).
• To send you news and other communications about our products, if you agreed to it. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• To publish your testimonial in the way you chose and to contact you about it. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• To keep the website and the forms secure and to prevent spam and abuse. The legal basis is our legitimate interest in protecting the website and our visitors (Art. 6(1)(f) GDPR).
• To understand which campaigns bring us requests. The legal basis is our legitimate interest in measuring our marketing (Art. 6(1)(f) GDPR). Analytics and advertising cookies are used only with your consent, as explained in the Cookie Policy.
• To meet our legal obligations and to establish, exercise or defend legal claims (Art. 6(1)(c) and 6(1)(f) GDPR).

We do not sell your personal data, and we do not make decisions about you based solely on automated processing.

04Who else receives your data

Your data is handled by the OxyHelp team members who need it for the purposes above. We also use service providers who process data on our behalf, under contracts that oblige them to protect it and to use it only on our instructions:

• Sanity (sanity.io), the content management system where the requests sent through the website are stored.
• HubSpot Ireland Limited, our customer management system. It receives the contact form, distributor applications, the first download request and service requests (as a contact and, for service, as a ticket that includes a private link to your photos and videos). The newsletter and testimonials are not sent to HubSpot.
• Cloudflare, Inc., which hosts the website, protects it (including Turnstile), stores the photos and videos you upload in a private storage space in the European Union, and sends the email notifications our team receives about new testimonials.
• Usercentrics A/S (Cookiebot), which records your cookie choices.
• The agency that builds and maintains this website for us, which can access the stored requests when it provides technical support.

If you accept analytics or marketing cookies, Google Ireland Limited, Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company and Cheq AI Technologies Ltd (ClickCease) also receive data through those cookies, as described in the Cookie Policy. Google and LinkedIn use some of this data for their own purposes as independent controllers, under their own privacy policies.

For the Meta Pixel, we and Meta Platforms Ireland Limited are joint controllers for collecting the data on our website and sending it to Meta. We are responsible for asking for your consent and for informing you; Meta is responsible for what it does with the data afterwards, as explained in Meta's Privacy Policy. You can exercise your rights with us or with Meta.

If you ask about a chamber in a country where we work through an authorised distributor, we may pass your request to that distributor so they can answer you.

We may also disclose data to public authorities or courts when the law requires it.

05Transfers outside the European Economic Area

Most of the data stays in the European Union. Sanity stores the requests in data centres in Belgium, HubSpot hosts our account in its EU data centre in Germany, Cloudflare keeps the files you upload in the EU and Cookiebot stores consent records in Ireland.

Some of our providers, or their own subcontractors, are based outside the European Economic Area, mainly in the United States, and can access or process data there, for example for support, security or the delivery of the website. When that happens, the transfer is covered by:

• the European Commission's adequacy decision for the EU-US Data Privacy Framework, for certified companies such as HubSpot, Cloudflare, Google, Meta and LinkedIn;
• the European Commission's adequacy decision for Israel, for CHEQ (ClickCease), which stores data of EU visitors in Ireland;
• the Standard Contractual Clauses approved by the European Commission, for the other transfers, including Sanity.

You can ask us for more information about these safeguards.

06How long we keep your data

• Messages, quote requests, distributor applications and download requests: up to 3 years after our last contact with you. If they lead to a contract, we keep what the law requires for that contract.
• Service requests: for as long as we support your chamber under warranty and up to 3 years after the request is closed. Photos and videos are deleted automatically within two days after the request is deleted from our systems.
• Newsletter: until you unsubscribe. We keep a record of your agreement and of your unsubscription for up to 3 years, as proof.
• Testimonials: a published testimonial stays online until you ask us to remove it. Stories we do not publish are deleted within 12 months.
• Records of your consent to other communications: for as long as we use it and up to 3 years after you withdraw it.
• Cookies: as set out in the Cookie Policy.

When a period ends, we delete the data or make it anonymous.

07How we protect your data

The website is served only over an encrypted connection (HTTPS). Requests are stored in systems that only authorised people can access, and the photos and videos you upload are kept in private storage in the European Union, reachable only through private links. Forms are checked automatically for abuse. No system is completely secure, but we review these measures and fix any problem we find.

08Your rights

Under the GDPR you have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data deleted, where the law allows it;
• restrict how we use your data in certain situations;
• object at any time to processing based on our legitimate interest, for reasons related to your situation, and to any use of your data for direct marketing;
• receive the data you gave us in a structured, commonly used format and have it sent to another company, where the law allows it;
• withdraw your consent at any time, without affecting what we did before you withdrew it.

To exercise these rights, write to office@oxyhelp.com. We answer within one month; for complex requests we can extend this by two more months, and we will tell you if we do. We may ask you to confirm your identity first.

You can also unsubscribe from our emails at any time by writing to us or, where available, through the unsubscribe link in each email.

If you think we have not handled your data correctly, you can complain to the Romanian data protection authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 Bucharest, Romania, anspdcp@dataprotection.ro, www.dataprotection.ro. You can also complain to the data protection authority of the EU country where you live or work.

09Children

The website is meant for adults and businesses. We do not knowingly collect data from people under 16. If you think a child has sent us personal data, please tell us and we will delete it.

10Changes to this policy

We update this policy when the website, our providers or the law change. The version published on this page, with its date, is the one that applies.