Privacy Policy

1. Data Controller

The entity responsible for processing your personal data on this website is:

Fluid Software Labs UG, Lohengrinstrasse 20, 81925 München, Germany. Managing Directors: Furkan Imamoglu, Georgii Bochorishvili.

You can reach us about any privacy matter by email at info@withorin.com or by post at the address above.

Given the small scale of our processing, we are not required to appoint a Data Protection Officer, and we have not appointed one. You can direct all privacy requests to the contact details above.

2. Scope

This policy applies to the Orin website at https://withorin.com. It does not cover any third-party websites that we may link to. Those sites have their own privacy practices, and we are not responsible for them.

3. What Data We Collect

We only collect the limited data described below. We do not operate accounts, payments, or file uploads, so we do not collect data related to any of those.

• Booking and contact details: when you book a call or email us, we receive the information you choose to provide, typically your name, your email address, and the content of your message.
• Server log files: our hosting provider automatically records standard technical data when you visit, such as your IP address, browser type, referring page, and the date and time of the request.
• Basic analytics data: we may collect simple, aggregated information about how the site is used, for example which pages are viewed, to understand and improve the site.

4. How We Use Your Data

We use the data above only for the following purposes:

• To respond to your message and to arrange and hold a call you have requested.
• To keep the website secure, stable, and working correctly.
• To understand basic usage and improve the website.
• To meet legal obligations where the law requires us to keep or disclose certain information.

5. Legal Bases for Processing

We process personal data under the General Data Protection Regulation (GDPR) on the following legal bases:

• Responding to your enquiry and arranging a call: Article 6(1)(b) GDPR where this is part of taking steps at your request before any agreement, and otherwise our legitimate interest in answering enquiries under Article 6(1)(f) GDPR.
• Server logs and site security: our legitimate interest in operating a secure and reliable website under Article 6(1)(f) GDPR.
• Analytics: our legitimate interest in understanding how the site is used under Article 6(1)(f) GDPR. We use a privacy-friendly, cookieless analytics tool, so no consent or cookie banner is required.

6. Cookies and Analytics

We keep cookies to a minimum and use only the essential cookies needed to operate the site. We do not use advertising or cross-site tracking cookies, so we do not show a cookie consent banner.

For analytics we use Plausible Analytics, a privacy-friendly tool that does not use cookies and does not collect personal data. It only gives us aggregated, anonymous figures such as page views. You can control cookies through your browser settings at any time.

7. Recipients and Processors

We do not sell your personal data, and we do not share it for unrelated purposes. We do rely on a small number of service providers who process data on our behalf and only on our instructions, under data processing agreements as required by Article 28 GDPR. These include:

• Vercel, our website hosting provider, which serves the site and generates server log files.
• Cal.com, our scheduling tool, which handles the details you submit when you book a call with us.
• Plausible Analytics, our cookieless analytics provider, which gives us aggregated, anonymous usage figures.

8. International Transfers

Some of our providers are based in the United States, in particular our hosting provider Vercel and our scheduling tool Cal.com. Our analytics provider Plausible is based in the European Union. Where data is processed outside the European Economic Area, we rely on appropriate safeguards under Articles 44 to 49 GDPR, such as the EU Standard Contractual Clauses and the EU-US Data Privacy Framework where a provider is certified. If you would like more detail on the safeguards in place, contact us at info@withorin.com.

9. How Long We Keep Data

We keep personal data only for as long as needed for the purpose it was collected, unless the law requires us to keep it longer.

• Booking and contact messages: kept for up to 12 months after our last contact with you, then deleted, unless a longer statutory retention period applies.
• Server log files: kept for up to 14 days, then deleted or anonymised.
• Analytics data: stored only as aggregated, anonymous statistics that are not linked to you as an individual.

10. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. No method of transmission or storage is completely secure, but we take reasonable steps to keep your data safe.

11. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: the right to know whether we process your data and to receive a copy of it (Article 15).
• Rectification: the right to have inaccurate data corrected (Article 16).
• Erasure: the right to have your data deleted in certain circumstances (Article 17).
• Restriction: the right to limit how we process your data (Article 18).
• Portability: the right to receive your data in a portable format (Article 20).
• Objection: the right to object to processing based on our legitimate interests (Article 21).
• Withdrawal of consent: where processing is based on consent, the right to withdraw it at any time, without affecting processing already carried out (Article 7(3)).

12. Right to Complain

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or where the issue arose.

As we are based in Bavaria, the competent authority for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA) in Ansbach. You may also contact your local authority.

13. Children's Privacy

This website is intended for businesses and professionals and is not directed at children. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy to reflect legal or operational changes. The current version published on this page applies, and the date at the top shows when it was last updated.

15. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, contact us at:

Fluid Software Labs UG, Lohengrinstrasse 20, 81925 München, Germany. Email: info@withorin.com.

We will respond within the statutory time frame, normally within one month.