Privacy Policy

Introduction

orixanova.top SARL ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website orixanova.top and use our services.

This policy applies to all users of our website and services. By accessing or using orixanova.top, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Data Controller Information

The data controller for your personal information is:

Data Collection

We collect various types of information in connection with the services we provide. The data we collect includes both personal information that you voluntarily provide to us and information that is automatically collected when you use our website.

Information You Provide

When you contact us or use our services, you may provide us with personal information including:

• Name and contact details (email address, phone number)
• Company information and professional details
• Communication preferences
• Information provided in enquiry forms or correspondence
• Business requirements and consultation details

Automatically Collected Information

When you visit orixanova.top, we automatically collect certain information about your device and usage:

• IP address and geographic location
• Browser type and version
• Device information and operating system
• Pages visited and time spent on our website
• Referral sources and website navigation patterns

How We Use Your Information

We process your personal data for various purposes based on different legal grounds. How we use your information depends on how you interact with our website and services.

Service Provision

We use of your data to provide our subscription revenue model consulting services, including responding to enquiries, delivering consultations, and maintaining business relationships.

Communication

We may contact you regarding our services, respond to your enquiries, and send important updates about our business relationship.

Website Improvement

We analyse website usage data to improve our services, enhance user experience, and optimise our website performance.

Legal Compliance

We may process your information to comply with legal obligations, resolve disputes, and enforce our agreements.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about our use of cookies, please refer to our Cookie Policy.

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: Where you have given clear consent for us to process your personal data for specific purposes
• Contract: Where processing is necessary for the performance of a contract with you
• Legal obligation: Where we need to comply with legal or regulatory requirements
• Legitimate interests: Where processing is necessary for our legitimate business interests, provided this does not override your rights

Data Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except in the following circumstances:

• Service providers who assist us in operating our website and conducting business
• Professional advisers including lawyers, accountants, and consultants
• Regulatory authorities when required by law
• In connection with a business transfer or acquisition

All third parties are required to maintain appropriate security measures and use your information only for specified purposes.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal, regulatory, and business requirements.

Specifically, we retain:

• Contact information and enquiry data for up to 3 years after last contact
• Business relationship data for the duration of our engagement plus 7 years for legal compliance
• Website analytics data for up to 26 months
• Marketing data until consent is withdrawn or the data becomes obsolete

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Right of access: Request copies of your personal data
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data in certain circumstances
• Right to restrict processing: Request limitation of how we use your data
• Right to data portability: Request transfer of your data in a structured format
• Right to object: Object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us at [email protected] or +352 23380092.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Staff training on data protection and security
• Secure backup and recovery procedures

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where such transfers occur, we ensure adequate protection through:

• European Commission adequacy decisions
• Standard contractual clauses approved by the European Commission
• Binding corporate rules or certification schemes
• Other appropriate safeguards as required by law

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal data, please contact us immediately.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on orixanova.top and updating the "Last updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Supervisory Authority

You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data violates applicable law. In Luxembourg, the supervisory authority is: