OLIDIA Global Website Privacy Policy
PRP Science Co., Ltd. ("PRP Science", "Olidia", "we", "our", or "us") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the EU Medical Device Regulation (EU) 2017/745 ("MDR"), applicable ePrivacy laws, and other relevant data protection legislation. This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you:
a) visit the Olidia global website,b) verify product authenticity,
c) contact us,
d) access professional or educational materials,
e) communicate with healthcare professionals affiliated with Olidia,
f) request information about our products or treatments,
g) or otherwise interact with our website and services.
The "Olidia®" website is a global platform intended for users worldwide, including healthcare professionals, distributors, clinics, and adult consumers seeking general educational information regarding aesthetic procedures involving CE-marked medical devices. 2. Data Controller
1) name,
2) email address,
3) telephone number,
4) country of residence,
5) clinic, distributor, or professional affiliation.
B. Professional Information
Where applicable:
1) medical specialization,
2) professional license information,
3) healthcare professional status verification,
4) participation in professional programs or trainings.
C. Product Verification and Traceability Information
When using the product verification system:
1) product serial numbers,
2) batch or lot numbers,
3) purchase or distribution-related information,
4) clinic or distributor identification.
D. Website Usage Data
Automatically collected technical information may include:
1) IP address,
2) browser type,
3) operating system,
4) referring URLs,
5) device identifiers,
6) website interaction data,
7) cookie identifiers,
8) analytics data.
E. Inquiry and Communication Data
Information voluntarily submitted through contact forms, support requests, or email communications.
F. Special Categories of Data
We do not intentionally collect health-related or sensitive personal data unless voluntarily provided and strictly necessary for regulatory, vigilance, safety, or customer support purposes. Where special category data is processed, we rely on explicit consent and/or applicable legal obligations under GDPR and MDR requirements. 4. Purposes of Processing We process personal data for the following purposes: 1) responding to inquiries and customer requests,
2) verifying authenticity and traceability of Olidia products,
3) providing educational, scientific, or technical information,
4) managing relationships with distributors, clinics, and healthcare professionals,
5) maintaining website security and integrity,
6) improving website functionality and user experience,
7) complying with medical device vigilance, post-market surveillance, and regulatory obligations,
8) detecting unauthorized distribution or counterfeit products,
9) complying with legal obligations under MDR and applicable laws,
10) managing marketing communications where legally permitted,
11) maintaining records related to safety and quality assurance. 5. Legal Basis for Processing We process personal data pursuant to Article 6 GDPR on the following legal grounds: 1) consent (Article 6(1)(a)),
2) performance of a contract or pre-contractual measures (Article 6(1)(b)),
3) compliance with legal obligations, including medical device safety and traceability obligations (Article 6(1)(c)),
4) legitimate interests pursued by PRP Science, including website security, anti-counterfeit protection, improvement of services, and professional communications (Article 6(1)(f)).
Where special category data is processed, processing is based on:
1) explicit consent under Article 9(2)(a), and/or
2) reasons of public interest in the area of public health and medical device safety under Article 9(2)(i) GDPR. 6. Healthcare Professional and Consumer Areas Certain parts of this website may be intended exclusively for healthcare professionals. Users may be required to confirm: 1) their professional status,
2) country of residence,
3) and/or age eligibility before accessing restricted content.
Content available within the "Professional Zone" is intended solely for qualified healthcare professionals in jurisdictions where such access is legally permitted. 7. Artificial Intelligence (AI) Generated Content and Illustrations Certain images, illustrations, visual simulations, or demonstration materials presented on this website may include AI-generated or digitally enhanced content created for illustrative, educational, or visualization purposes only. Such content:
a) does not represent actual patients unless expressly stated,
b) should not be interpreted as guaranteed treatment outcomes,
c) and is not intended to replace professional medical consultation.
Before-and-after illustrations are provided solely for general informational purposes and individual treatment outcomes may vary. 8. Product Information and Medical Disclaimer Information presented on this website:
a) does not constitute medical advice,
b) does not replace consultation with a licensed healthcare professional,
c) and shall not be interpreted as solicitation, promotion, or advertising prohibited under applicable medical device laws.
Any treatment decisions should be made exclusively in consultation with qualified medical or aesthetic practitioners. Availability, approvals, and regulatory status of Olidia products may differ between jurisdictions. 9. Sharing of Personal Data We may share personal data only where necessary with: a) affiliated companies,
b) authorized distributors,
c) clinics or healthcare professionals,
d) logistics and anti-counterfeit verification partners,
e) IT hosting providers,
f) analytics providers,
g) CRM and communication service providers,
h) legal, regulatory, or competent authorities,
i) notified bodies or regulatory consultants where required under MDR obligations.
All third-party service providers are contractually bound to implement appropriate confidentiality and data protection measures. We do not sell or rent personal data. 10. International Data Transfers As PRP Science Co., Ltd. operates from the Republic of Korea, personal data may be transferred outside the European Economic Area (EEA). The European Commission adopted an adequacy decision for the Republic of Korea on 17 September 2021, recognizing Korea as providing an adequate level of data protection under GDPR standards. Where necessary, additional safeguards may also be implemented. 11. Data Retention Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy and in accordance with applicable legal obligations. Retention periods may include: a) inquiry and communication records: up to 3 years after last interaction,
b) website analytics data: according to cookie retention settings,
c) professional account information: for the duration of the professional relationship,
d) medical device traceability and vigilance documentation:
- up to 10 years after the last device has been placed on the EU market,
- and up to 15 years for implantable devices pursuant to MDR obligations.
After expiration of retention periods, data is securely deleted, anonymized, or archived where legally required. 12. Cookies and Analytics This website uses cookies and similar technologies. Essential cookies are necessary for website operation. Non-essential cookies, including analytics and marketing cookies, are used only after obtaining your consent through the cookie banner or consent management platform. Users may modify or withdraw consent at any time through cookie settings. For more information, please refer to our Cookie Policy. 13. Your Rights Under GDPR Subject to applicable law, you may have the right to: a) access your personal data,
b) request rectification,
c) request erasure,
d) restrict processing,
e) object to processing,
f) data portability,
g) withdraw consent at any time,
h) lodge a complaint with a supervisory authority.
Requests may be submitted to: privacy@prpscience.co.kr 14. Security Measures PRP Science implements appropriate technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or misuse. Such measures may include: a) encrypted communications,
b) access controls,
c) authentication procedures,
d) logging and monitoring systems,
e) secure hosting infrastructure,
f) and restricted personnel access.
However, no internet-based system can be guaranteed to be completely secure. 15. Age Restrictions This website is intended exclusively for individuals aged 18 years or older. We do not knowingly collect personal data from individuals under 16 years of age. If we become aware that personal data from a minor has been submitted, such data will be deleted without undue delay. 16. External Links and Third-Party Platforms This website may contain links to third-party websites, social media platforms, distributors, clinics, or external educational materials. PRP Science is not responsible for the privacy practices or content of third-party websites. Users should review applicable third-party privacy policies independently. 17. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect: a) legal developments,
b) regulatory changes,
c) operational changes,
d) or updates to website functionality.
The updated version will be published on this website together with the revised effective date. 18. Contact Information For questions regarding this Privacy Policy or personal data processing, please contact:
PRP Science Co., Ltd.
B Dong, 81-54, Yuram-gil, Paltan-myeon, Manse-gu, Hwaseong-si, Gyeonggi-do, 18530, Republic of Korea
Email: privacy@prpscience.co.kr
EU Representative:
Meridius Medical Europe Ltd.
Unit 3D, North Point House, North Point Business Park, New Mallow Road, Cork, T23 AT2P, Ireland Effective Date: June 2026
Last Updated: June 2026
