Privacy Policy

What information is included in this document?
This privacy policy contains all information about the protection of your personal data, including your rights and the purposes for which we process your data.

The policy consists of four parts: 

  1. in Part 1, we explain the terms used in the Policy and provide information about our contact details and your rights;
  2. part 2 contains detailed information about the processing of your personal data. We have provided this information separately for each processing;
  3. in Part 3 you will find information about the processing of your data on our Social Media profile,
  4. part 4 is information about cookies.

You will reach each part and each piece of information by clicking on the links in the table of contents below.

Part 1. General provisions

 

§ 1. Data Controller

1. The controller of your personal data is Oponeo.co.uk Ltd. with its registered office at No:1, 28-29 The Broadway, London, England, W5 2NP. In the following part of this Privacy Policy we write about ourselves in the first person  or we refer to ourselves as a "Contoller" or "We".

2. We are registered in Companies House under the number 08160779. Our VAT number is GB155808002.

Our registration files contain the most important information about us, such as financial statements or our company`s  articles of association.

  1. You can contact us:
    1. by post: No:1 28-29 The Broadway, London, United Kingdom, W5 2NP
    2. by e-mail: gdpr@oponeo.co.uk,
    3. via the contact form on our website: https://www.oponeo.co.uk/help-center#contact
    4. by telephone on 0800 066 3422 (free of charge) or 02030110070.
 

§ 2. Terms used in the Privacy Policy

If you notice one of the following capitalised terms in this Privacy Policy, it has the following meaning:

  1. „Service” - an online shop, the main page of which can be found at https://www.oponeo.co.uk/;
  2. „Policy” – means this document, i.e. the Privacy Policy that you read;
  3. „UK GDPR” – UK General Data Protection Regulation. The UK GDPR text can be found  here;
  4. "Social media” – social networking sites such as Facebook, YouTube and other social networking sites where we have our profiles. “Site” means https://www.oponeo.co.uk/



 

§ 3. Security of personal data

  1. All personal information that you provide to the Service or that we collect about you when you use the Service will be processed by us as the Controller in accordance with UK GDPR.
  2.  We take the technical measures required by current data protection legislation to prevent unauthorised persons from collecting and modifying personal data transmitted electronically, i.e. within the framework of our Service.
  3. We have appropriate security measures to prevent personal data from being lost accidentally, or used or accessed unlawfully. We limit access to your personal data to those who have a genuine business need to access it. Those processing your personal data will do so only in an authorised manner and are subject to a duty of confidentiality.
  4. We also have procedures to deal with any suspected data security breach. We will notify you and any applicable regulator of a suspected data security breach where we are legally required to do so.
 

§ 4. Your rights regarding personal data

  1. We process your personal data, therefore:
    1. You have the right to access your personal data and be provided with a copy of your personal data,
    2. You have the right to require us to rectify your personal data,
    3. You may request the deletion of your personal data where UK GDPR so permits.
    4. You have the right to limit the processing, to the extent specified in UK GDPR.
    5. If you have provided us with a consent to use your personal data you have a right to withdraw that consent at any time in accordance with UK GDPR.
  2. In Parts 2-4 of this Policy, you will find information about additional rights. In some situations, you will have further possibilities.
  3. Would you like to exercise your rights or learn more about them? Do not hesitate to contact us. You can find our contact details in § 1 section 3 of this Policy.
 

§ 5. Right to object

  1. If you provide us with your personal data or if we collect it ourselves, you may exercise your right to object. You have the right to object in two situations - when we process your personal data:
    1. for the purposes of direct marketing; you do not need to justify such an objection and you can object at any time;
    2. in certain other situations to our continued processing of your personal data, e.g. processing carried out for the purpose of our legitimate interests unless there are compelling legitimate grounds for the processing to continue or the processing is required for the establishment, exercise or defence of legal claims. Tell us why we should not process your data.
  2. Would you like to exercise your right of objection? Do not hesitate to contact us. You will find our contact details in § 1 section 3 of this Policy.
 

§ 6. Complaints, including to the Supervisory Authority

Please contact us if you have any queries or concerns about our use of your personal data (see our contact details above). We hope we will be able to resolve any issues you may have.

You may also have the right to lodge a complaint (including if you believe that we are processing your personal data unlawfully), with the supervisory authority. In the UK, this is the Information Commissioner (the UK data protection regulator) and its website is available at this address: https://ico.org.uk/.

 

§ 7. Questions to the Policy and the place of its publication

  1. If you have any questions about our Policy, do not hesitate to contact us. You will find our contact details in § 1 section 3 of this Policy.
  2. The Policy can be found at https://www.oponeo.co.uk/privacy-policy.


 

§ 8. Changes to this privacy policy

The privacy notice was last updated on 18 November 2024.

We may change this privacy notice from time to time—when we do we will inform you via e-mail, if you have an account with us.

 

§ 9. Updating your personal data

We take reasonable steps to ensure your personal data remains accurate and up to date. To help us with this, please let us know if any of the personal data you have provided to us has changed, e.g., your surname or address—please see above contact details.

Part 2. Information related to the processing of your personal data in individual processing operations

 

§ 10. Contact us via contact form, e-mail or telephone number

If you are using this opportunity to contact us, please note the following:

  1. Why do we need your data, or why do we process it?

    To respond to your message and solve your case.

  2. What are your rights?

    We have described them in § 4 and § 5 of the Policy.

  3. Do you have to give us your detail?

    This is voluntary, but without providing your contact details we may not be able to deal with your enquiry.

  4. On what legal basis do we process your data?

    5. There may be various grounds including, for our legitimate interests, to comply with our legal and regulatory obligations and to take steps at your request before entering into a contract.

  5. What is our legitimate interest?

    6. A legitimate interest is when we have a business or commercial reason to use your personal data, so long as this is not overridden by your own rights and interests. We will carry out an assessment when relying on legitimate interests, to balance our interests against your own. In this case it is dealing with your enquiry and responding to your message.

  6. Who will we transfer on your data to?
  7. entities hosting (storing) the Service or personal data for us;
  8. entities providing tools to operate particular communication channels.
  9. How long will we process your data?

    10. The time taken to deal with your enquiry. Depending on the type of enquiry, we will also process your data for the time necessary to prove that we have dealt with your enquiry. We will not keep your personal data for longer than we need it for the purpose for which it is used. If you no longer have an account with us or we are no longer providing goods or services to you, we will usually delete or anonymise your account data after seven years.

  10. Will we transfer your personal data outside the United Kingdom or the European Economic Area?

    11. Not under normal course of business. If there is a dispute on PayPal, some data may be transferred to PayPal that may store or process them in the United States of America, maintaining security standards under the UK Extension to the EU-US Data Privacy Framework.

 

§ 11. Execution of the order

If you use these options on our Site, please note the following:

  1. Why do we need your data, or why do we process it?
    1. To perform services which we provide for you under the terms of the Regulations of the Service.
    2. For marketing consisting of:
      • sending you newsletters and other marketing information by e-mail, analysing what content you are interested in, what you like to read, and we can also tailor our communication to your interests;
      • adjusting the Service, its content, products, services, functionality and communication with you to your interests, which we determine based what you conduct on the Service, interaction with e-mails or notifications sent to you, in applications, in social media, as well as e.g. based on your location, login information, device you use;
      • posting advertisements addressed to you on social networking sites and other websites. These advertisements may be based on your activities in the Service.
  2. What are your rights?                    

    We have described them in § 4 and § 5 of the Policy. You also have the right to transfer your personal data under the conditions set out in UK GDPR.

  3. Do you have to give us your details?

    This is voluntary. Without this information you cannot complete your order through the Service and, as a result, we will not be able to provide the services to you. You will also not be able to subscribe to our newsletter or receive commercial information from us.

  4. On what legal basis do we process your data?
    1. Article 6(1)(b) of GDPR, that is to say, performance of the contract we enter into with you and our legitimate interests.
    2. If you consent to receive marketing communications to your e-mail address, please note that you may revoke your consent at any time. If you wish to do so, please contact us.
  5. What is our legitimate interest?

    Our legitimate interest is to conduct marketing within the scope described under a.2) above.

    In addition, if you subscribe to our e-mail communication (e.g. newsletter), our legitimate interest is to improve our communication by analysing whether you are familiar with the content and news you are most interested in, and to tailor the content to your interests.

  6. Who will we transfer on your data to?
    1. workshops and car dealerships to which we deliver the products you have ordered,
    2. tyre manufacturers,
    3. tyre wholesalers and tyre dealers,
    4. courier and forwarding companies,
    5. Oponeo.pl S.A. with its registered office in Bydgoszcz, Poland,
    6. external stakeholders supporting the selection of appropriate tyres,
    7. accounting and bookkeeping offices supporting the process of sale and settlement,
    8. electronic payment operators,
    9. entities involved in hosting (storing) the Service or personal data for us;
    10. entities providing the tools used to operate the Service,
    11. law firms and debt collection companies.
  7. How long will we process your data?

    for a period of time:

    1. of our marketing activities or
    2. until you object to the further processing of your data for marketing purposes or
    3. until revocation of the consent to send messages to your e-mail address. Your withdrawal of consent shall not affect the lawfulness of the processing prior to your withdrawal of consent.
  8. Will we transfer your personal data outside the United Kingdom or the European Economic Area?                    

    Not under normal course of business, except when there are payments via PayPal or disputes on PayPal, which may include transfer and storage or processing of those data by PayPal in the United States of America, maintaining security standards under the UK Extension to the EU-US Data Privacy Framework.

 

§ 12. Issuing opinions concerning the Service in TrustPilot portal or opinions concerning products purchased through the Service

If you are using this opportunity to contact us, please note the following:

  1. Why do we need your data, or why do we process it?

    To survey customer satisfaction and to ensure the highest level of customer service. To achieve this, we need your feedback on the quality of our services. In order to achieve this goal, we send you e-mails referring to the appropriate forms.

  2. What are your rights?

    We have described them in § 4 and § 5 of the Policy.

  3. Do you have to give us your details?

    This is voluntary, but without it we will not know what we can improve.

  4. On what legal basis do we process your data?

    Our legitimate interests.

  5. What is our legitimate interest?

    Evaluating customer satisfaction and thereby improving the quality of our services and providing goods of the highest quality.

  6. Who will we pass on your data to?
    1. entities hosting (storing) the Service or personal data for us;
    2. entities dealing with administrative service of the Service;
    3. entities collecting and publishing opinions concerning online shops or products.
  7. How long will we process your data?

    For a period of time:

    1. until you object to the further processing of your data for marketing purposes.
    2. We will not keep your personal data for longer than we need it for the purpose for which it is used.
  8. Will your personal data be transferred outside the European Economic Area?

    No.

 

§ 13. Newsletter

If you use this option in our Service, please note the following:

  1. Why do we need your data, i.e. for what purpose do we process it?

    For marketing purposes, consisting of sending you newsletters and other marketing information by e-mail, as well as analysing what content you are interested in and what you read the most willingly. On this basis, we can also adjust our communication to your interests.

  2. What are your rights?

    We have described them in § 4 and § 5 of the Policy. You also have the right to transfer your personal data under the conditions set out in UK GDPR.

  3. Do you have to give us your details?

    This is voluntary, but without this information you cannot receive the newsletter and commercial information from us.

  4. On what legal basis do we process your data?
    1. Our legitimate interests.
    2. If you consent to receive marketing communications to your e-mail address, please note that you may revoke your consent at any time. If you wish to do so, please contact us.
  5. What are our legitimate interests?                    

    Our legitimate interests are to improve our communications by analysing whether you are familiar with the content and which news you are most interested in and adapting it to your interests.

  6. Who will we transfer on your data to?
    1. suppliers of tools for sending newsletters;
    2. entities involved in hosting (storing) the Service or personal data for us;
    3. entities dealing with administrative service of the Service.
  7. How long will we process your data?

    For a period of time:

    1. of our marketing activities or
    2. until you object to the further processing of your data for marketing purposes or
    3. until you revoke the consent to send messages to your e-mail address. Your withdrawal of consent shall not affect the lawfulness of the processing prior to your withdrawal of consent
  8. Will we transfer your personal data outside the European Economic Area?

    No.

Part 3. Our profile in social media

 

§ 14. Using our profiles in social media

  1. Why do we need your data, or why do we process it?
    1. to respond to private messages you send us;
    2. to discuss with you the comments under the individual posts;
    3. to share our posts with you as a person watching our profile;
    4. for marketing consisting in informing about our services and ourselves by means of posts that we place on our profile, including sponsored posts that are displayed to a wider audience of Social Media users;
    5. for statistical purpose consisting in the presentation to us by entities running Social media, such as Facebook Ireland Ltd. of data on the display of our posts, their ranges, number of interactions, demographic data of our observers; data presented to us by entities running Social media are statistical data, but are created on the basis of observation by this company of your behaviour on our profile.
  2. What are your rights?

    We have described them in § 4 and § 5 of the Policy.

  3. Do you have to give us your details?

    This is voluntary. However, due to Social media rules, we will see your name (or nickname) and picture if you write to us or comment on our post.

  4. On what legal basis do we process your data?

    Our legitimate interests.

  5. What are our legitimate interests?                    

    Responding to your messages and comments, providing you with posts, informing you about our services and about ourselves through them, analysing statistical data related to our profile.

  6. Who will we give your data to?
    • Social media providers, such as Facebook Ireland Ltd.
  7. How long will we process your data?

    For the period of time:

    1. needed to solve your case. Depending on its type, also for the time needed to prove that we have solved it, i.e. for the statute of limitations for claims;
    2. the time you have observed our profile. Please note that you can always delete your comments under our posts, stop following us or cancel your Social media account.

Part 4. Information on cookies

 

§ 15. What are cookies and why do we use them

  1. In the Service we use cookies ("cookies"), which are small text information stored on your terminal device (e.g. computer, tablet, smartphone). Cookies can be read by the Website and serve primarily to optimize the use of websites and to collect statistical data.
  2. We store cookies on your computer, phone or tablet and then access the information contained in them for the following purposes:
    1. configuration of the Service and ensuring its full functionality, through:
      • adjusting the content of the Service’s websites to your preferences and optimising the use of the Service’s websites. In particular, these files allow us to recognize the basic parameters of your device and to properly display the website, adjusted to your individual needs;
      • remembering the settings you have chosen and personalising the interface, e.g. the language or region you come from, font size, website design, etc.;
      • remembering the history of pages you have visited on the Service to recommend content;
    2. marketing, which consists of gathering information about what you have done on the Service; in doing so, we tailor our content to your interests and needs, for example, we generate personalized content for you; we also tailor the advertisements displayed to you on other services to what you have seen on our Service and to your interests, for example, we may display an advertisement on an information service that promotes the service you have seen on our Service;
    3. authentication of your person in the service by ensuring the correct configuration of selected functions of the service, allowing in particular the verification of the authenticity of the browser session;
    4. optimisation and increase of the efficiency of services provided by us within the Service;
    5. analysis and research through the creation of anonymous statistics that help us understand how you use the Service’s websites, enabling us to improve their structure and content;
    6. ensuring the safety and reliability of the Service.
 

§ 16. Types of cookies

There are several types of cookies on the Service:

  1. session cookies, which remain in the memory of your Internet browser until you turn it off,
  2. constantly stored in the memory of your web browser until you delete them,
  3. external, from suppliers of analytical tools in our Service. You can read more about external cookies in § 17.
 

§ 17. How to delete cookies

  1. You can configure your web browser to prevent cookies from being stored on your computer, phone or tablet.
  2. You can delete your cookies after we have saved them. You can use them for this purpose: The appropriate functions of your browser, programs for this purpose or the appropriate tools available on your operating system.
  3. Each of the most popular web browsers in the "support and help" section provides information on how to delete cookies.
 

§ 18. Influence of changing browser settings on the use of the Service

Changing the configuration of your web browser to one that prevents or limits the storage of cookies may result in restrictions on the functionality of the Service. The deletion of cookies during the provision of the service may lead to similar effects. This means that some of our services will not be available without cookies.

 

§ 19. External cookies

  1. The cookies placed on your computer, phone or tablet may come from other service providers.
  2. We use the service:
    1. Google Analytics, provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA); to analyse traffic on the Site. We obtain statistics from it, telling us how you and other users use the Service.
    2. Google Ads, provided by Google Ireland Ltd. | Gordon House, Barrow Street, Dublin 4, Ireland; in order to optimise the display of advertisements, remarketing and popularisation of the Service.
    3. Emarsys eMarketing Systems AG - Märzstraße 1, A-1150 Vienna, Austria; for the purpose of sending e-mails and analysing their use by you and other recipients.
    4. Facebook.com [cookie administrator: Facebook Inc with the registered office in USA or Facebook Ireland with the registered office in Ireland];
    5. Bing.com [cookie administrator: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521]; in order to optimise the display of advertisements, remarketing and popularisation of the Service.
  3. The operation of Google Analytics, as mentioned in paragraph 2(a) above, you can block it. To do so, install this browser add-on provided by Google Inc. available here:  https://tools.google.com/dlpage/gaoptout?hl=en-GB.
  4. In connection with the use of tools provided by entities established in the United States, your data goes to the United States on the basis of UK Extension to the EU-US Data Privacy Framework. 



 

§ 20. Consent to use cookies 

We will ask for your consent to place cookies or other similar technologies on your device, except where they are essential for us to provide you with a service that you have requested.

Cookie settings