Your data, handled with care.

1. Who is responsible for your data

ORYNDEX is the data controller for this website (oryndex.com) under the EU General Data Protection Regulation (GDPR) and applicable national data-protection law. ORYNDEX is an independent digital studio.

For any question about this policy or your personal data, or to exercise any of the rights described below, write to studio@oryndex.com. The full registered legal details and, where required, a representative or data protection contact are listed in our Legal Notice.

2. The data we process

• Data you send usWhen you use the contact form or email us, we receive the name, email address, and message you provide, plus a reference number we generate for the inquiry. You choose what to include.
• Technical & log dataOur hosting and security infrastructure automatically records standard technical data — IP address, browser and device type, referring page, and pages requested — to serve the site, keep it secure, and diagnose faults.
• Analytics & advertising dataWhere you consent, measurement and advertising tools record how you interact with the site (pages viewed, approximate location, device and browser signals, and identifiers stored in cookies). These are described in detail in our Cookie Policy.

3. Why we process it, and our legal basis

We only process personal data where a legal basis under Article 6 GDPR applies:

• Consent — Art. 6(1)(a)Analytics, advertising, and any other non-essential cookies and tags are set only after you give consent through our cookie banner. You can withdraw consent at any time, and withdrawal is as easy as giving it.
• Legitimate interests — Art. 6(1)(f)Keeping the site available and secure, preventing abuse, and replying to inquiries you initiate. We balance these interests against your rights and freedoms.
• Steps prior to a contract — Art. 6(1)(b)Where your message concerns a possible engagement, we process it to respond and to take steps at your request before any agreement.
• Legal obligation — Art. 6(1)(c)Where we must retain certain records to comply with the law.

4. Cookies, analytics, and advertising

This site is prepared to use Google Tag Manager to load, subject to your consent, Google Analytics, Google Ads, and the Meta (Facebook) Pixel. These tools set cookies and collect usage and device data, and they may be used to measure traffic, understand how the site performs, and measure or support advertising campaigns.

None of these non-essential tools load, and none of their cookies are set, until you have given consent through the cookie banner. Until then, only strictly necessary technical processing takes place. The full list of tools, the cookies they set, and how to manage your choices is in the Cookie Policy.

5. Who receives your data

We do not sell or rent your personal data. We share it only with service providers who process it on our behalf under contract (processors), and only as needed to run the site and respond to you:

• HostingOur website host and content delivery network, which serve the site and keep security logs.
• EmailOur transactional email provider, which delivers the messages you send through the contact form.
• Inquiry storageOur database provider, where contact inquiries and their reference numbers are stored so we can respond and track them.
• Measurement & advertisingGoogle (Tag Manager, Analytics, Ads) and Meta (Pixel), where you have consented to analytics or advertising cookies.

6. International transfers

Some of these providers are based outside the European Economic Area, including in the United States. Where data is transferred outside the EEA, we rely on an appropriate safeguard under Chapter V GDPR — such as an EU adequacy decision or the European Commission's Standard Contractual Clauses — so that your data keeps an equivalent level of protection.

7. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for. Contact inquiries are kept for as long as needed to handle your request and for a reasonable period afterwards in case of follow-up, then deleted or anonymised. Security and server logs are kept for a short period. Analytics and advertising data are retained according to the settings and defaults of the respective tool, as described in the Cookie Policy.

8. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected, and incomplete data completed.
• Have your data erased where the law allows (the right to be forgotten).
• Restrict or object to our processing, including profiling for advertising.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.
• Lodge a complaint with your local data protection supervisory authority.

9. Managing your consent

You can change or withdraw your cookie consent at any time through the cookie settings on the site, or by clearing cookies in your browser. Withdrawing consent stops the relevant tools from loading on future visits.

10. Automated decisions and children

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects on you. This site is not directed at children, and we do not knowingly collect data from anyone under 16.

11. Changes to this policy

If this policy changes, the date below changes with it, and material changes will be made clear on this page before they take effect.

12. Contact

To exercise any right, or for any privacy question, write to studio@oryndex.com. We answer within the timeframes the GDPR requires.