Privacy policy

This website sets no cookies, runs no analytics and loads nothing from third parties.

Last updated

1. Who is responsible for your data

The controller of personal data collected through this website is Orvanto Ltd, a private limited company registered in Cyprus (registration number: HE number to be added), with its registered office at Stasinou 53, 2nd floor, Office 21, 6023 Larnaca, Cyprus.

For any question about your data, email info@orvanto.biz.

2. What we collect, why, and on what legal basis

Enquiries you send us. When you email us, we receive your email address, your name if you give it, and whatever you write. We use this to reply to you and, if you ask, to prepare a proposal. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and, for general enquiries, our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR).

Technical data. When you visit the site, our hosting provider automatically processes your IP address, browser type, the pages you request and the time of the request. This is needed to deliver the pages and to protect the site against abuse and attacks. The legal basis is our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

What we do not collect. This website has no contact forms, user accounts, cookies, analytics or advertising trackers, and its fonts are served from our own domain.

3. Who receives your data

  • Our email provider, which stores and delivers the emails you send us, acting on our behalf.
  • Cloudflare, Inc., which hosts this website and processes technical data as our processor under Cloudflare’s Data Processing Addendum, part of its standard customer agreement.
  • Public authorities, only where the law requires us to disclose data.

We do not sell your data or share it with anyone for marketing.

4. Transfers outside the EU

Cloudflare, Inc. is based in the United States, so technical data may be processed outside the European Economic Area. These transfers are covered by the EU–US Data Privacy Framework, under which Cloudflare is certified, and by the European Commission’s Standard Contractual Clauses included in Cloudflare’s Data Processing Addendum. If our email provider processes data outside the EEA, the same kind of safeguards apply.

5. How long we keep your data

  • Enquiries: as long as needed to answer them, and for up to two years after our last contact. If an enquiry leads to a contract, we keep the related correspondence for as long as Cyprus law requires business records to be kept.
  • Technical data: kept by Cloudflare only for a short period, in line with its log retention policy.

6. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict how we use your data;
  • object to our use of your data where we rely on legitimate interest;
  • receive your data in a portable format.

To use any of these rights, email info@orvanto.biz. We reply within one month, free of charge.

7. Complaints

If you think we have not handled your data correctly, you can complain to the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy). We would appreciate the chance to resolve your concern first, so please contact us.

8. Changes to this policy

We may update this policy when our website or the law changes. The date at the top shows when it last changed.