Privacy Policy
This Privacy Policy describes how Orvenzia (“we”, “us”, “our”) collects, uses and protects personal data in accordance with the EU General Data Protection Regulation (GDPR).
1. Data Controller
Company: Orvenzia
Address: 9900 Frederikshavn, Denmark
Email: support@orvenzia.com
CVR/VAT: 45828697
Orvenzia is the data controller for the processing described in this Privacy Policy.
2. Personal Data We Collect
We collect only personal data necessary for professional communication, lead handling, service delivery and compliance purposes. This may include:
-
Name, job title and company name
-
Business email address and phone number
-
Information submitted via forms, questionnaires or email
-
Communication content (emails, call notes, meeting summaries)
-
Technical data such as IP address, device/browser type and standard server logs
We do not intentionally collect sensitive personal data.
3. How We Use Personal Data
We process personal data for the following purposes:
-
To respond to enquiries and requests
-
To assess service relevance, scope and feasibility
-
To deliver agreed services and communicate with client stakeholders
-
To manage contracts, invoicing and payments
-
To maintain records and comply with legal obligations
4. Legal Basis for Processing
We process personal data based on one or more of the following legal bases:
-
Legitimate interests (GDPR Art. 6(1)(f)) – e.g., business communication, relationship management and service improvement
-
Performance of a contract (GDPR Art. 6(1)(b)) – e.g., delivering agreed services
-
Legal obligation (GDPR Art. 6(1)(c)) – e.g., accounting and compliance requirements
-
Consent (GDPR Art. 6(1)(a)) – where explicitly provided (e.g., certain marketing preferences)
5. Sharing of Personal Data
We do not sell or trade personal data.
We may share personal data with professional service providers strictly as necessary to operate our business and deliver services, such as:
-
Hosting and IT providers
-
E-signature and document workflow providers
-
Accounting/invoicing providers
-
Other subcontractors used for delivery support (where applicable)
All providers are required to process personal data securely and in compliance with GDPR.
We may disclose personal data to authorities where required by law.
6. Data Storage and Retention
We store personal data securely and retain it only for as long as necessary for the purpose for which it was collected, or to comply with legal obligations.
Typical retention periods:
-
Enquiry and prospect data: up to 24 months
-
Client project data and contractual records: retained as required for delivery and applicable accounting/legal requirements
Data is deleted or anonymised when no longer required.
7. Data Processing and Transfers within the EU
Personal data is processed and stored within the European Union or in countries deemed to provide an adequate level of data protection by the European Commission.
Where third-party service providers are used, Orvenzia ensures that appropriate contractual safeguards are in place to protect personal data in accordance with GDPR.
8. Data Security
We apply appropriate technical and organisational measures to protect personal data, including access controls, secure systems and confidentiality procedures.
9. Your Rights
Under GDPR, you have the right to:
-
Access your personal data
-
Request correction of inaccurate data
-
Request deletion of data (where applicable)
-
Object to or restrict processing (where applicable)
-
Request data portability (where applicable)
To exercise your rights, contact: support@orvenzia.com.
10. Cookies and Analytics
Our website may use essential cookies and basic analytics to ensure functionality and improve user experience. Details are provided in our Cookie Policy (where applicable).
11. Changes to This Policy
We may update this Privacy Policy to reflect operational or legal changes. The latest version will always be available on our website.
12. Contact
For questions regarding this Privacy Policy or our data processing practices, contact:
support@orvenzia.com