OXI WAVE FOUNDATION INC.​

Privacy Policy​

Last updated: June 20, 2025 ​

Welcome to Oxi Wave Foundation!

​

This Privacy Policy (hereinafter “Privacy Policy”) constitutes an agreement between Oxi Wave Foundation Inc., a Not For Profit Corporation, duly incorporated under the laws of Florida, USA, document number N25000005438, whose registered address is 2212 NW 91ST STREET #1153, MIAMI, FL 33147 (hereinafter - Oxi Wave Foundation”, “We”, “Our”, “Us”) and a capable natural person (hereinafter “User”, “You”, “Your”), who uses Our Website and purchases the Products according to the Terms of Use, in regard to Your Personal Data Processing.

 

You agree that by accessing the Website, using Services and purchasing the Products, You have read, understood, and agreed to be bound by this Privacy Policy. If You do not agree with this Privacy Policy, You are expressly PROHIBITED from accessing the Website, using Services and/or the Products.

​

Supplemental Terms of Use or documents that may be posted on the Website are hereby expressly incorporated by reference.

​

1. DEFINITIONS

1.1. Consent. Any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes, signifies agreement to the Processing of Personal Data relating to the Data Subject.

1.2. Cookies. Small text files that websites store on Your device (computer, phone, or tablet) during Your visit. They help remember Your preferences, settings, and enhance website functionality by providing a more personalized experience. Some Cookies are essential for the Website to operate, while others are used for analytics, advertising, and improving Your interactions.

1.3. Controller. Oxi Wave Foundation is a company which determines the purposes and means of Processing Your Personal Data.

1.4. Co-Controller. The natural or legal person (and others) who determines the purposes and means of Processing with another controller.

1.5. Data Subject. The natural person whose Personal Data is processed. In the context of this Privacy Policy, this refers to You, the User of Oxi Wave Foundation’s Services and/or Products.

1.6. Legal Ground for Processing. One of the legally defined grounds for which the Processing of Personal Data is permitted. There are the following grounds:

1.6.1. Consent;

1.6.2. Legitimate interest (e.g., for analytics and improvement of the Website);

1.6.3. Obligation (e.g., compliance with tax laws).

1.7. Personal Data. Any information relating to an identified or identifiable Data Subject.

1.8. Personal Data Breach. A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored, or otherwise processed.

1.9. Processing. Any action or set of actions with Personal Data.

1.10. Processor. The natural or legal person, who processes Personal Data on behalf of the Controller.

1.11. Profiling. Any form of automated Processing of Personal Data consisting of the use of Personal Data to evaluate certain personal aspects relating to a Data Subject to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.

1.12. Third Party. Any person or entity, except the subject of Personal Data, the Controller or Processor and the Data Protection Authority, to whom the Controller or Processor transfers Personal Data.

1.13. Any other terminology used in this Privacy Policy but not defined herein has the meaning provided for in the Terms of Use.

​​

2. DATA SUBJECT’S RIGHTS

2.1. You have the following rights regarding the Personal Data:

2.2. Right to Access Personal Data. You can receive information regarding specific Personal Data Oxi Wave Foundation has collected about You, as follows:

2.2.1. Purpose of the Processing;

2.2.2. Categories of Personal Data concerned;

2.2.3. Recipients of categories of recipients to whom the Personal Data has been, or will be, disclosed;

2.2.4. The envisaged period for which the Personal Data will be stored, or the criteria used to determine that period;

2.2.5. The existence of the right to rectification, erasure, or restriction of Processing Personal Data concerning You or to object to such Processing;

2.2.6. The right to lodge a complaint with a DPA;

2.2.7. Where Personal Data is not collected from You, any available information as to the source;

2.2.8. The existence of any automated decision-making, including profiling, as well as the significance and envisaged consequences of such Processing for You;

2.2.9. We comply with the Florida Information Protection Act (FIPA) and other U.S. federal privacy laws. If your data is transferred outside the U.S., we ensure protections consistent with applicable U.S. laws.

2.3. Right to Rectification of Personal Data. You can request that We correct Your Personal Data if it has been changed or incorrectly collected.

2.4. Right to Erasure (Deletion) of Personal Data. You can request that We delete Personal Data, such as when it is no longer needed for the purposes for which it was collected and there is no other legal ground for the Processing.

2.5. Right to Restrict Processing of Your Personal Data. You can request a restriction on Processing Your Personal Data under certain conditions, such as when the accuracy of the data is contested, or the Processing is unlawful.

2.6. Right to Personal Data Portability. You can receive Personal Data in a human and machine-readable format for transmission to another controller, where technically feasible.

2.7. Right to Object. You can object to Personal Data Processing, for example, if Personal Data is processed for marketing purposes, unless we need this Personal Data for Our legitimate interest.

2.8. Right to Reject Automated Individual Decision-Making (Profiling). You can have the right not to be subject to a decision based solely on automated Processing, including profiling, which produces legal effects.

2.9. Right to Withdraw Consent. You can withdraw Your Consent for Personal Data Processing if Oxi Wave Foundation uses Consent as the ground for Processing.

2.10. Right to Opt-Out from Marketing/Send Out. You can withdraw Your Consent on Personal Data Processing for marketing and send-out purposes.

2.11. Right to Ask a Question and/or Make a Claim on Data Processing. You are allowed to ask Oxi Wave Foundation any question regarding Personal Data Processing or privacy legislation.

2.12. Please bear in mind that if You exercise such rights this may affect Our ability to provide You with Website and to sell You the Products.

​

3. DATA SUBJECT’S RIGHTS ENFORCEMENT

3.1. You can enforce Your rights regarding Your Personal Data by submitting a request through the following Data Subject Request Form.

3.2. Types of Requests. Using the Data Subject Request Form, You can make requests related to any rights provided for in Sections II and III of this Privacy Policy.

3.3. Response Time. Upon receipt of Your request, We will acknowledge it and respond within 30 calendar days. In some cases, mainly if Your request is complex, We may extend this period by up to an additional 60 calendar days. If an extension is necessary, We will notify You of the reason and the expected timeframe within the first 30 calendar days.

3.4. Costs. You can exercise Your rights free of charge. However, if Your request is manifestly unfounded or excessive, mainly due to its repetitive nature, or requires the payment of any fee, We may charge a reasonable fee or refuse to act on the request.

3.5. Identity Verification. To protect Your Personal Data, We may ask for additional information to verify Your identity before processing Your request. This is to ensure that Your Personal Data is not disclosed to unauthorized parties.

 

4. CONSENT

4.1. Your Consent plays a key role in how We process Your Personal Data. By using Our Website and purchasing the Products or by explicitly agreeing to certain types of Personal Data Processing, You give Us permission to handle Your Personal Data under the following conditions stated herein.

4.2. Obtaining Consent. We will always seek Your explicit Consent when Processing Your Personal Data for purposes that are not based on other legal grounds, such as the fulfillment of a contract or a legitimate interest. For example, You will be asked to provide Consent for receiving marketing e-mails.

4.3. Right to Withdraw Consent. You have the right to withdraw Your Consent at any time. Once Consent is withdrawn, We will cease Processing Your Personal Data for the specific purpose to which Your Consent is applied. Withdrawal of Consent does not affect the lawfulness of Processing carried out before the withdrawal. You can withdraw Your Consent by:

4.3.1. Contacting Us directly through the methods listed in this Privacy Policy

4.3.2. Following the unsubscribe or opt-out instructions provided in Our communications (e.g., marketing e-mails).

4.4. Impact of Withdrawing Consent. Withdrawing Consent for certain types of Processing (such as marketing communications) will not affect Your ability to use the Website and purchase the Products. However, some features, such as personalized advertisements or special offers, may no longer be available if Consent is withdrawn.

​

5. PERSONAL DATA

5.1. Oxi Wave Foundation processes Your Personal Data when You interact with the Website. The following Section describes how and why We collect, use, and store Your Personal Data:

5.2. User’s Website Visit. When You visit the Website, You give Us the Personal Data under the following conditions:

5.2.1. Personal Data. When You visit the Website, We collect Your IP address and Cookies.

5.2.2. Purpose of Collection. To load the Website accurately and conduct analytics on how the Website is used.

5.2.3. Source of Collection. Collected automatically when You access Our Website.

5.2.4. Legal Ground. Legitimate interest and/or Consent.

5.2.5. Retention Period. We retain Personal Data collected during Your visit to Our Website for as long as necessary to fulfil the purpose of optimizing the Website's performance, ensuring security, and conducting analytics. Once these purposes are fulfilled, the Personal Data will be deleted unless it is required for statutory retention obligations or for evidence purposes during statutory limitation periods.

5.3. User’s Registration an Account. When the You create an Account on the Website, the You give Us the Personal Data under the following conditions:

5.3.1. Personal Data. When You create the Account on the Website, We collect Personal Data such as Your name, e-mail address, phone number, Account credentials (e.g., password), address, payment conditions, purchase history.

5.3.2. Purpose of Collection. To create and maintain Your Account, verify Your identity, and provide You access to ordering and purchasing the Products and marketing (sending updates, promotions, and offers).

5.3.3. Source of Collection. This Personal Data is collected directly from You when You create and use the Account on the Website.

5.3.4. Legal Ground. Consent and legitimate interest.

5.3.5. Retention Period. We store Your Personal Data for as long as necessary to maintain Your Account and fulfill Our contractual obligations, such as providing You access to Our Services and to the purchase of Products. After Your Account is closed, deleted or You no longer use the Services, We delete the Personal Data unless it is required to comply with statutory retention obligations (e.g., for tax or legal purposes) or for evidence purposes during statutory limitation periods.

5.4. User’s Purchase. When You purchase the Products, You give Us the Personal Data under the following conditions:

5.4.1. Personal Data. When You purchase the Products, We collect Personal Data such as Your name, e-mail address, phone number, address, payment conditions.

5.4.2. Purpose of Collection. To process Payments, deliver the purchased Products s, and maintain transaction records for tax purposes, as well as for marketing (sending updates, promotions, and offers).

5.4.3. Source of Collection. Collected automatically when You purchase the Products on the Website.

5.4.4. Legal Ground. Fulfilling a contract (for providing the purchased Products) and legitimate interest.

5.4.5. Retention Period. We retain Your Personal Data for as long as necessary to process Your purchase, fulfil contractual obligations and comply with legal obligations, such as tax and financial regulations. After these obligations are met, the data will be deleted unless it is needed for statutory limitation periods (e.g., for evidence purposes in case of claims).

5.5. User’s Contact the Support. When You contact Us, You give Us Your Personal Data under the following conditions:

5.5.1. Personal Data collected. It depends on a case-by-case basis but can include name, e-mail, Payment information (including credit and debit card numbers, e-mail address, phone number, etc.), photos and videos and any other Personal Data You provide in Your request.

5.5.2. Purpose of collection. To respond to Your inquiries, provide support, information and improve Our Services.

5.5.2. Source of collection. This Personal Data is collected directly from You when You reach out to customer support.

5.5.3. Legal ground. Consent.

5.5.4. Retention Period. We retain Your Personal Data for as long as necessary to address Your inquiries and provide support in accordance with Our contractual obligations. Once the inquiry is resolved and there is no further need for the Personal Data, We delete it unless We are required to retain it for legal purposes, such as statutory limitation periods or to comply with retention obligations related to consumer protection laws.

5.6. Other Processing Conditions. These are other conditions that apply to Your Personal Data Processing:

5.6.1. Data source. We process Personal Data that You provide to Us directly or that We collect automatically during Your use of Our Website. If We process Personal Data from Third Parties in the future, We will notify You accordingly.

 

6. PERSONAL DATA TRANSMISSION AND STORAGE

6.1. Transmission in General. We may transmit Your Personal Data to Processors, Co-Controllers, and Third Parties in accordance with this Privacy Policy and applicable data protection laws. These transmissions are conducted for the purposes of operating the Website, providing Services and organizing purchases of Products or if based on Our legitimate interest.

6.2. Transfers to third parties, including outside the U.S., are conducted under data protection safeguards in compliance with FIPA and other applicable regulations.

6.3. Transmission in Specific Situations. We may transfer Your Personal Data based on the following legal grounds:

6.3.1. Adequacy Decision: Transfers under the EU-US Data Privacy Framework, which is recognised by the European Commission as providing an adequate level of protection.

6.3.2. Standard Contractual Clauses: In cases where the EU-US Data Privacy Framework does not apply, We use EU-approved Standard Contractual Clauses to ensure that Your Personal Data is protected.

6.3.3. Contractual Necessity: When the transfer of Personal Data is necessary for the performance of an agreement between You and Oxi Wave Foundation, such as the Products purchase or delivery.

6.3.4. Legal Obligations: We may also share Your Personal Data with law enforcement agencies, courts, or other governmental authorities if We are legally required to do so. This includes cases where We believe it is necessary to comply with a legal obligation or to protect the rights, property, or safety of Oxi Wave Foundation, Our Users, or public order.

 

7. LIST OF PROCESSORS

7.1. We may share Your Personal Data with Third Parties (Processors) for the purposes of providing Services, Products to You.

7.2. Below is a list of the key Processors We work with: