Privacy

Controller and scope

ORLOZ TECHNOLOGIES SOCIEDAD LIMITADA, a Spanish single-member limited company, NIF B05663885, Avenida Alcalde José María Blanc, 80, 02008 Albacete, Spain. Contact and privacy rights: contacto@orloz.es.

This policy covers the corporate website and enquiries you send us. There are no user accounts or proprietary forms. Clicking the email link opens your email application; we receive message data when you send it. General enquiries do not require identity documents, private inventories, bank information or sensitive information.

Data, purposes and legal bases

We process your email address, your name if provided, your enquiry and any professional or technical details you include. We answer corporate enquiries on the basis of our legitimate interest in responding to communications addressed to the company (GDPR Article 6(1)(f)), limited to that purpose and subject to your right to object. Article 6(1)(b) applies when you request steps before a contract to which you would be a party or contractual support. Article 6(1)(c) applies to privacy rights and legal duties. A reply address and information needed to handle your enquiry are necessary; without them we may be unable to respond or resolve the matter.

We do not use these enquiries for unsolicited advertising, profiling or automated decisions producing legal or similarly significant effects. We do not sell your data.

Services and recipients

We use Google Workspace for corporate email and Google Sites to host this website. ORLOZ is the controller for enquiries it receives. Google acts as processor for customer personal data processed on our behalf under the Workspace data processing agreement.

Google distinguishes that data from service data it collects or generates to operate, maintain and protect its services, such as IP addresses, identifiers and operational information. Its Google Cloud Privacy Notice identifies Google Cloud EMEA Ltd as controller of service data subject to EU GDPR, with the qualifications stated there. The notice explains purposes, legal grounds and retention by data type; there is no single retention period for all service data. We do not automatically classify all technical data as processing on ORLOZ’s behalf.

The site uses Google presentation resources, including externally hosted fonts.  Google Analytics was disabled according to the configuration evidenced in the previous dossier; ORLOZ does not receive its audience reports.   The check reported by the owner on 26 October 2026 detected NID before clicking “Got it” in a new Chrome incognito window; no Local Storage or Session Storage entries were observed in an earlier test. The owner reported 35 requests and no matches when filtering Set-Cookie, which does not guarantee the absence of cookies. NID’s actual purpose remains undetermined; neither its exemption nor valid consent through that notice is claimed. See the Cookies page.  For Google’s other independent processing, see also its Privacy Policy.

We disclose data to professional advisers or authorities only where necessary and supported by a legal basis. Visiting or buying on Etsy also involves Etsy’s Privacy Policy and the ORLOZDigital policy published in our shop. Etsy acts as an independent controller for its own processing.

Retention and international transfers

We retain enquiries while handling them and as needed for follow-up or liabilities. We review the need to retain support information twelve months after case closure; this does not mean retaining every attachment or automatic deletion. Business correspondence and records covered by commercial retention duties are generally kept for six years from the last entry; tax duties, limitation periods and interruptions also apply. Where required, data is restricted for liabilities and subsequently deleted.

Google and its subprocessors may process data outside the European Economic Area; we do not promise exclusive European storage. Google’s Data Processing Addendum provides transfer safeguards, including standard contractual clauses where applicable. You may request information on relevant safeguards and a copy, subject to lawful redactions.

Your rights

You may request access, rectification, erasure, restriction, portability where applicable and object to processing based on legitimate interests by emailing contacto@orloz.es. We request further identification only where there is reasonable doubt. We respond without undue delay and normally within one month; if an extension of up to two further months is permitted because of complexity or number of requests, we explain it within the first month. You may complain to the Spanish Data Protection Agency (AEPD) or another competent supervisory authority. Rights are subject to their legal conditions and exceptions.

Updated: 26 October 2026 · V5.1-C2.