Legal
Privacy Policy
How personal data is handled when you visit Orelva Labs.
Last updated
Required details are still to be published here. Provider and data-protection information on this page is incomplete while those values are unset, and the site should not be treated as published until they are.
Scope of this policy
This policy describes how personal data is handled when you visit the Orelva Labs website at this domain. It covers this website only.
Orelva Labs products have their own processing environments. Where a product such as Chat to PDF handles data of its own, that product provides its own privacy information, and this policy does not describe it.
Controller
The controller responsible for processing on this website is:
- Legal name
- Not yet published
- Address
-
Not yet published
Not yet published - Not yet published
Full provider details are listed in the Impressum.
Visiting this website
This is a static website. When you open a page, your browser requests the page and its files (stylesheet, script and font files) from the server hosting this site. As with any web server, the hosting provider processes technical data in server logs in order to deliver the site and keep it operating securely. That data typically includes:
- your IP address
- the date and time of the request
- the page or file requested
- browser and operating-system information sent by your browser (user agent)
- the referring page, where your browser sends one
- technical status and security information about the request
Legal basis: Art. 6(1)(f) GDPR. The legitimate interest is delivering the website reliably and protecting it against misuse.
This website is hosted by Not yet published, Not yet published. In connection with providing, securing and operating the website, the hosting provider may process technical connection and server-log information.
Log data is retained for Not yet published.
A data processing agreement under Art. 28 GDPR is in place with the hosting provider.
Still to be completed: the data processing agreement under Art. 28 GDPR with the hosting provider, and the log retention period that the provider actually applies, still need to be confirmed and stated here. No retention period is given above because none has been confirmed.
Still to be completed: the production hosting provider for this site has not yet been selected. Once it has, this section will name the provider, state whether a data processing agreement under Art. 28 GDPR is in place, describe any transfer outside the EU/EEA, and give the log retention period that the provider actually applies. No retention period is stated here because none has been confirmed.
Fonts
The two typefaces used on this site, Instrument Sans and JetBrains Mono, are served from this website's own server. Your browser does not contact Google Fonts or any other font service, and no font provider receives your IP address.
Cookies and browser storage
This website sets no cookies. It does not use local storage, session storage, IndexedDB or comparable techniques to store information on your device or read information from it. Because nothing is stored or read, no consent banner is shown.
Analytics and tracking
This website uses no analytics, no tracking pixels, no tag manager and no profiling. Your visit is not measured by any analytics provider.
Third-party content
No third-party content is embedded on this site. There are no external scripts, no embedded videos, no maps, no social media widgets and no content delivery network. Every file the page loads comes from this site's own server.
Contacting us by email
This website has no contact form. The contact page offers email links, which open your own email program. Simply opening the contact page sends nothing to us.
If you choose to send an email, we receive the content of your message together with whatever details you include, such as your name and email address. We use that information only to handle and reply to your enquiry.
Legal basis: Art. 6(1)(b) GDPR where your enquiry relates to a contract or steps taken before entering into one, otherwise Art. 6(1)(f) GDPR, the legitimate interest being to respond to enquiries addressed to us.
Retention: we keep enquiry correspondence for as long as needed to deal with your enquiry and any follow-up arising from it. Where statutory retention periods apply to particular correspondence, it is retained for those periods and then deleted.
Recipients
Personal data is not sold and not passed on for advertising. Apart from the hosting provider, which processes server log data on our behalf in order to serve the site, and the email provider involved in delivering any message you send us, no recipients receive personal data from this website.
Transfers outside the EU/EEA
This website itself initiates no transfer of personal data to a third country. No content on the page is loaded from anywhere else, so your visit causes no request to a third-party service.
Our hosting provider, Not yet published, is established in the country where it operates. Processing of server-log information in connection with hosting may therefore involve a transfer to a third country.
Where personal data is transferred to the country where it operates, transfers may rely on the EU-U.S. Data Privacy Framework where applicable. The hosting provider also provides contractual safeguards, including the European Commission's Standard Contractual Clauses where applicable.
Still to be completed: the safeguard relied on for that transfer, such as an adequacy decision or standard contractual clauses, has not yet been confirmed against the provider's current terms and is therefore not stated here.
Consent
No processing on this website currently relies on your consent, so there is no consent for you to withdraw. If that changes, this policy will be updated and consent will be obtained before the processing begins.
Automated decision-making
No automated decision-making and no profiling within the meaning of Art. 22 GDPR takes place on this website.
Your rights
Under the GDPR you have the right to:
- ask whether we process personal data about you and request a copy (Art. 15)
- have inaccurate data corrected (Art. 16)
- have data erased (Art. 17)
- have processing restricted (Art. 18)
- receive data you provided in a portable format, where applicable (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- lodge a complaint with a data protection supervisory authority (Art. 77)
To exercise any of these, contact us using the details above. Making a request costs nothing and you do not need to give a reason for an objection under Art. 21(2).
Supervisory authority
- Competent authority
- Not yet published
Still to be completed: the competent supervisory authority follows from the operator's place of establishment, which is not yet confirmed, so no authority is named here.
You may in any case lodge a complaint with the supervisory authority of your habitual residence or place of work, whichever you prefer.
Changes to this policy
This policy will be updated when the website changes in a way that affects it, for example when a hosting provider is confirmed or a new function is added. The date at the top of this page shows when it was last revised.