Privacy policy

Last updated: October 2026.

This is a translation of the original Spanish text. If the two versions differ, the Spanish version prevails.

This policy explains how Ole Optica processes the personal data collected through this website, www.ole-optica.com. Please read it before sending us your details. We may update it when something changes, so we recommend that you check it from time to time: the date at the top shows when it was last revised.

Data controller

• Controller: Ole Højer (Ole Optica).
• Tax identification number (NIF): X-26.22.915-H.
• Address: C/ Antonio Ferrándis 23, 29780 Nerja (Málaga), Spain.
• Email: info@ole-optica.com.
• Telephone: +34 952 528 395.

What data we collect

We only collect personal data through the appointment form. In it, you give us:

• your name;
• your phone or WhatsApp number;
• your email address, only if you wish to give it: it is optional;
• the reason for your appointment, chosen from a closed list: eye test, contact lenses, sunglasses or something else;
• the day you would prefer and the time of day, morning or afternoon;
• the language in which you would like us to assist you: English, Spanish, German or Danish.

We also record that you accepted this policy when you sent us your details. The form does not ask for any health data.

To give you an appointment, we need the reason, the day, the time of day, your name and your phone number, and your acceptance of this policy: without them, the form cannot be sent. Your email address is optional; if you do not give it, you will not receive the acknowledgement of receipt. The language comes already selected and you can change it.

When the form is sent, the server also stores a hash of the IP address it was sent from and, if you give your email address, a hash of that address. A hash is a code calculated from the address, not the address itself: this is pseudonymised data.

What we use it for

To manage your appointment: to call or write to you to confirm it, to assist you in your language and, if you give us your email address, to send you an acknowledgement of receipt. We do not use your data to send you advertising.

The IP and email hashes are used only to protect the form against automated submissions, spam and abuse: they limit the number of submissions that can come from the same connection in an hour and the number of acknowledgements that can be sent to the same address in a day.

We do not make automated decisions that significantly affect you, and we do not create profiles using your data.

Legal basis

For managing your appointment, your consent, which you give by ticking the privacy policy box before sending the form (Article 6(1)(a) of the General Data Protection Regulation). The box is unticked by default and, without it, the form cannot be sent. You can withdraw your consent at any time, without affecting anything we have done with it beforehand.

For the IP and email hashes, our legitimate interest in protecting the website and the form against abuse and spam (Article 6(1)(f) of the same Regulation). You can object to this processing by writing to us.

How long we keep it

Each appointment request is kept for 12 months, after which the website deletes it automatically. The request also reaches us by email, and we delete those emails within the same period. If you ask us to delete your data sooner, we will do so.

The IP hash is kept for no more than one hour from the first submission, and the email hash for 24 hours from the first acknowledgement. After that, they expire and the website deletes them automatically.

Who else sees your data

We do not pass your data on to anyone, unless the law requires us to. So that the website and email work, your data is processed on our behalf, as processors, by the company that hosts the website and by the email service. They may only use it to provide that service to us.

Google Analytics

We use Google Analytics 4 to find out how many people visit the website, which pages they read and whether they request an appointment, call us or open a frequently asked question, so that we can improve it. It is only activated if you accept analytics cookies in the cookie notice: until then, the website does not load anything from Google or store any analytics cookies.

Google Analytics processes data about your visit, such as the pages you view, your type of device and browser or your approximate location, linked to a random identifier. We do not give it your name, your phone number or your email address. Google Analytics keeps the data from your visit for 14 months. Google may process this data outside the European Union, in the United States, with the safeguards required by the General Data Protection Regulation.

You can withdraw your consent at any time with the ‘Cookie preferences’ button at the bottom of the page. All the details are in the cookie policy.

Your rights

At any time, you have the right to:

• access your data;
• have it rectified if it is incorrect;
• have it erased;
• have its processing restricted, or object to it;
• receive it in a format you can take elsewhere (data portability).

Write to us at info@ole-optica.com or to C/ Antonio Ferrándis 23, 29780 Nerja (Málaga), stating in the subject line which right you wish to exercise. We will reply within the period set by law, whether or not we hold any data about you, and if anything is missing from your request, we will ask you for it.

If you believe that we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) at www.aepd.es.

Security

The website uses an encrypted connection (HTTPS), appointment requests are seen only by Ole Optica and they are deleted automatically after 12 months. Even so, no transmission over the internet is completely secure.

Legislation

We process your data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation) and with Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights.