Privacy Policy – GDPR & CCPA

Last updated: January 21, 2026

This Privacy Policy describes how Orion Studio ('Orion', 'we', 'our') collects, uses, retains, and protects personal data of users who visit or interact with orionstudio.app (the 'Site').

Orion Studio operates in compliance with:

• GDPR (Regolamento UE 2016/679)
• CCPA / CPRA (California Consumer Privacy Act)

1. Data Controller

Orion Studio

Email: [email protected]

For CCPA purposes, Orion Studio acts as a Business.

2. Data Collection

Navigation Data (automatic)

Collected automatically during site visits:

• IP address
• Browser and device type
• Operating system
• Pages visited
• Date and time of access
• Referrer URL

This data is not used to directly identify users.

Voluntarily Provided Data

Collected via contact forms, demo requests, business partner forms, or direct communications:

• Name and surname
• Email address
• Company and role
• Phone number (if provided)
• Message content
• Voluntarily shared professional information

Technical Data and Cookies

• Essential technical cookies
• Anonymized analytics cookies (if active)
• No profiling cookies without explicit consent

3. Purpose of Processing

4. Legal Basis (GDPR)

• User consent (Art. 6.1.a GDPR)
• Execution of pre-contractual or contractual measures (Art. 6.1.b)
• Legitimate interest (Art. 6.1.f), for security and service improvement
• Legal obligations (Art. 6.1.c)

5. Data Retention

• For the time necessary for stated purposes
• Until consent is withdrawn
• According to applicable legal obligations

Data no longer necessary is deleted or anonymized.

6. Data Sharing

Personal data may be shared exclusively with:

• Technology providers and cloud providers
• Hosting and IT infrastructure services
• Legal or tax consultants (if necessary)
• Competent authorities, if required by law

Data is not sold or transferred to third parties for commercial purposes.

7. International Data Transfer

If data is transferred outside the European Economic Area:

• Only to countries with adequate safeguards
• Or via Standard Contractual Clauses (SCC) approved by the European Commission

8. Data Security

We adopt adequate technical and organizational measures, including:

• Data encryption
• Limited and controlled access
• Monitoring and protection systems

All models, files, and data uploaded by users remain the exclusive property of the user or client company.

🔐 USER RIGHTS – GDPR

EU users have the right to:

• Access to data
• Rectification
• Erasure ('right to be forgotten')
• Restriction of processing
• Data portability
• Opposition to processing
• Withdrawal of consent at any time

📧 To exercise rights: [email protected]

🇺🇸 CONSUMER RIGHTS – CCPA / CPRA

California residents have the right to:

• Know what personal data is collected
• Know if data is shared or sold (Orion does not sell data)
• Request deletion of data
• Oppose data sharing
• Not be discriminated against for exercising their rights

Data Categories (CCPA)

• Identifiers (email, name)
• Professional information
• Internet/network activity

9. Cookie Policy (summary)

• Technical cookies: always active
• Analytics cookies: optional
• Profiling cookies: not used without consent

A dedicated Cookie Policy may be made available separately.

10. Changes to Privacy Policy

We reserve the right to update this Privacy Policy. Changes will be published on this page with an updated date.

11. Contact

For any privacy-related inquiries:

📧 [email protected]