Privacy Policy | orlaviax

This Privacy Policy explains how Orlaviax, operated by TARINCI UG (haftungsbeschränkt) ("we," "us," "our"), collects, uses, and protects your personal data when you visit our website or place an order, in accordance with the EU General Data Protection Regulation (GDPR) and applicable German data protection law (BDSG).

1. DATA CONTROLLER

TARINCI UG (haftungsbeschränkt)
Schubertstraße 12, 66333 Völklingen, Germany
Email: info@orlaviax.com

2. WHAT DATA WE COLLECT

Depending on how you interact with our website, we may collect:

Account & Order Data: name, email address, billing and shipping address, phone number, order history, payment details (processed by our payment providers)
Technical Data: IP address, browser type, device information, cookies and similar technologies
Communication Data: messages you send us via contact forms or email
Marketing Data: email address and preferences if you subscribe to our newsletter (only with your consent)

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

We process your data for the following purposes and legal bases under Art. 6 GDPR:

Contract fulfilment (Art. 6(1)(b) GDPR): to process and deliver your orders, handle payments, returns, and customer service requests
Legal obligation (Art. 6(1)(c) GDPR): to comply with tax, accounting, and commercial record-keeping requirements
Legitimate interest (Art. 6(1)(f) GDPR): to maintain website security, prevent fraud, and improve our services
Consent (Art. 6(1)(a) GDPR): for newsletter marketing and non-essential cookies, which you may withdraw at any time

4. COOKIES

Our website uses cookies necessary for its operation, as well as optional analytics and marketing cookies where you have given consent via our cookie banner. You can manage or withdraw cookie consent at any time through your browser settings or our cookie preference tool.

5. SHARING OF DATA

We share personal data only where necessary with:

Payment service providers, to process transactions
Shipping and logistics partners, to deliver your order
IT and hosting providers, acting as processors under Art. 28 GDPR
Authorities, where required by law

We do not sell your personal data to third parties.

6. INTERNATIONAL DATA TRANSFERS

Where data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place, such as the EU Standard Contractual Clauses, in accordance with Art. 44 et seq. GDPR.

7. DATA RETENTION

We retain personal data only as long as necessary for the purposes described above, or as required by statutory retention obligations (e.g. German commercial and tax law generally requires retention of invoices for up to 10 years).

8. YOUR RIGHTS

Under the GDPR, you have the right to:

Access the personal data we hold about you (Art. 15)
Request correction of inaccurate data (Art. 16)
Request deletion of your data (Art. 17)
Request restriction of processing (Art. 18)
Data portability (Art. 20)
Object to processing based on legitimate interest or direct marketing (Art. 21)
Withdraw consent at any time, without affecting prior processing (Art. 7(3))
Lodge a complaint with a supervisory authority — in Germany, the relevant data protection authority for the Saarland, or your own local authority

To exercise any of these rights, contact us at info@orlaviax.com.

9. DATA SECURITY

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse.

10. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "last updated" date.