Privacy Policy

1. Data Controller

The data controller responsible for the processing of your personal data is:

We are the controller for all personal data collected through the UroPrime website https://uroprime.life/ and its country-specific versions (Italy, Germany, Austria, Slovakia, Czech Republic).

2. What Personal Data We Collect

We collect the following categories of personal data:

Category	Data Collected	Purpose
Identity Data	First name, last name	Order processing, delivery
Contact Data	Phone number, email address	Order confirmation, customer service
Delivery Data	Shipping address	Product delivery
Transaction Data	Order details, payment method (cash on delivery)	Order fulfillment
Technical Data	IP address, browser type, device information	Website security, analytics
Usage Data	Pages visited, time on site, click behavior	Website improvement (with consent)

We collect only data that is necessary for the purposes described above, in accordance with the GDPR data minimisation principle.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR): Processing your name, phone number, and delivery address is necessary to fulfill your order and deliver the product.
• Legal obligation (Art. 6(1)(c) GDPR): We may process data to comply with tax, accounting, and consumer protection laws.
• Consent (Art. 6(1)(a) GDPR): For non-essential cookies, marketing communications, and analytics, we obtain your explicit consent. You may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f) GDPR): For website security, fraud prevention, and basic analytics that do not require consent.

4. How We Use Your Data

Your personal data is used for the following purposes:

• Processing and fulfilling your orders, including delivery and payment collection
• Communicating with you regarding your order (confirmation calls, delivery updates)
• Providing customer support and responding to inquiries
• Complying with legal and regulatory obligations
• Improving our website and services (based on aggregated, anonymized data)
• Sending marketing communications (only with your explicit consent)

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Order and transaction data: Retained for the duration of the contractual relationship and for the applicable statutory warranty period (typically 2 years under EU consumer protection law).
• Marketing consent: Retained until you withdraw your consent, plus a maximum of 24 months for record-keeping purposes.
• Analytics data: Retained in anonymized form for up to 24 months.
• Technical logs: Retained for up to 12 months for security purposes.

6. Data Sharing

We do not sell your personal data. We may share your data with the following categories of recipients:

• Delivery partners: To deliver your order to your specified address.
• Payment processors: For cash-on-delivery processing and fraud prevention.
• IT and hosting providers: Who support the operation of our website and are bound by Data Processing Agreements.
• Analytics providers: Only when you have given explicit consent.
• Legal authorities: When required by law.

All third-party processors are contractually obligated to protect your data and process it only in accordance with our instructions and GDPR requirements.

7. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If any data transfer outside the EEA is necessary, we ensure adequate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access (Art. 15 GDPR): You can request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You can request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17 GDPR): You can request deletion of your personal data, subject to legal retention obligations.
• Right to restrict processing (Art. 18 GDPR): You can request limitation of how we use your data.
• Right to data portability (Art. 20 GDPR): You can request your data in a structured, machine-readable format.
• Right to object (Art. 21 GDPR): You can object to processing based on legitimate interest or for direct marketing purposes.
• Right to withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at info@rsa-group.eu. We will respond within 30 days as required by GDPR.

9. Right to Lodge a Complaint

If you believe that our processing of your personal data violates GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact the data protection authority in your country of residence:

• Italy: Garante per la protezione dei dati personali – www.garanteprivacy.it
• Germany: Die Bundesbeauftragte für den Datenschutz und die Informationsfreiheit – www.bfdi.bund.de
• Austria: Datenschutzbehörde – www.dsb.gv.at
• Slovakia: Úrad na ochranu osobných údajov – www.dataprotection.gov.sk
• Czech Republic: Úřad pro ochranu osobních údajů – www.uoou.cz

10. Cookies and Tracking Technologies

Our website uses cookies and similar technologies. Strictly necessary cookies are essential for the website to function and do not require consent. All other cookies (analytics, marketing) require your explicit consent, which you can provide or refuse via our cookie banner. For detailed information, please see our Cookie Policy.

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted transmission (SSL/TLS), access controls, and regular security reviews. In the event of a data breach affecting your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements or our practices. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this page periodically.

13. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us: