Privacy Policy

1. Data Controller

Ora Computing FlexCo ("Ora", "we", "us", or "our") is the controller of the personal data collected through this website and our services. You can reach us at:

2. Data We Collect

We collect personal data in the following ways:

• Contact forms: When you submit an enquiry we collect your name, company name, work email address, and the content of your message.
• Account registration: If you access our platform, we collect your name, email address, company, and account credentials.
• Usage data: We collect technical data about how you interact with our website and services, including IP address, browser type, pages visited, and referring URLs.
• Communications: If you correspond with us by email, we retain records of those communications.

We do not knowingly collect personal data from individuals under the age of 16.

3. Legal Basis for Processing

We process your personal data on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract performance (Art. 6(1)(b) GDPR): Processing necessary to fulfil a contract with you or to take steps at your request before entering into a contract.
• Legitimate interests (Art. 6(1)(f) GDPR): Processing for our legitimate interests in operating and improving our services, preventing fraud, and communicating with prospective customers, where these interests are not overridden by your rights.
• Legal obligation (Art. 6(1)(c) GDPR): Processing necessary to comply with applicable laws and regulations.
• Consent (Art. 6(1)(a) GDPR): Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. How We Use Your Data

• To respond to your enquiries and provide the services you requested.
• To manage your account and deliver our compression platform.
• To send transactional communications related to your use of our services.
• To send marketing communications about our products (where you have opted in or we have a legitimate interest and you have not opted out).
• To analyse usage patterns and improve our website and services.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with legal obligations.

5. Data Sharing

We do not sell your personal data. We may share your data with:

• Service providers: Trusted third parties who assist us in operating our website, infrastructure, and services (e.g. cloud hosting, analytics, CRM), bound by appropriate data processing agreements.
• Legal authorities: Where required by law, court order, or to protect the rights and safety of Ora and others.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you via email and/or prominent notice on our website.

6. International Data Transfers

Our primary operations are based in Austria (EU). Where we transfer personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as the European Commission's Standard Contractual Clauses (SCCs) or equivalent mechanisms, in compliance with Chapter V of the GDPR.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Contact enquiries are retained for up to 3 years. Account data is retained for the duration of your account and for 2 years thereafter unless you request earlier deletion. Usage logs are retained for up to 12 months.

8. Cookies

Our website uses cookies and similar tracking technologies to enable core functionality, analyse traffic, and improve your experience. We use:

• Strictly necessary cookies: Required for the website to function. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with the site (e.g. Google Analytics). These are only set with your consent.

You can control cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

9. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data where we no longer have a lawful basis to retain it.
• Restriction: Request that we restrict processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format and transmit it to another controller.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, contact us at info@oracomputing.com. We will respond within 30 days. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde) at dsb.gv.at.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. For more details, please see our Security Policy.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the revised policy on this page with an updated effective date. For significant changes, we will notify you by email or through a notice on our website.

12. Contact

For any privacy-related questions or to exercise your rights, contact us at info@oracomputing.com.