Privacy Policy

At OrangeMorange Bloom, we take the protection of your personal data very seriously. This Privacy Policy outlines how OrangeMorange Bloom GmbH ("we", "our", "us") collects, processes, and protects your personal data when you visit our website orangemorangebloom.pro (the "Website") or use our contact form, in compliance with the General Data Protection Regulation (GDPR) and the Austrian Data Protection Act (Datenschutzgesetz - DSG).

1. Controller and Contact Information

The controller responsible for processing your personal data under European and Austrian data protection law is:

2. Data We Collect and Purpose of Processing

We only process personal data that is necessary to provide our services and operate our Website.

• Contact Form Inquiries: When you submit an inquiry via our contact form, we collect your Name, Email Address, and any voluntary Message text. We process this data solely to respond to your inquiry and handle follow-up questions. The legal basis for this processing is our legitimate interest in providing customer service (Art. 6(1)(f) GDPR) or, where applicable, the performance of pre-contractual measures (Art. 6(1)(b) GDPR).
• Server Log Files: To ensure the security and stability of our Website, our server automatically collects technical connection data (including your IP address, browser type, operating system, referrer URL, and time of access). This data is processed for security purposes and is deleted automatically after a short period. The legal basis is our legitimate interest in secure website operations (Art. 6(1)(f) GDPR).

3. Data Retention and Storage

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory retention obligations (such as Austrian tax and commercial retention requirements of up to 7 years, if contract-related).

Inquiries submitted via our contact form that do not lead to a business transaction are deleted once the matter has been fully resolved, unless statutory retention periods apply.

4. Data Sharing and Transfer

We do not sell, rent, or lease your personal data to third parties. We only share your data with trusted service providers (processors) who assist us in operating our Website (such as web hosting providers), strictly in accordance with written Data Processing Agreements (Art. 28 GDPR).

All personal data is processed within the European Economic Area (EEA) and is not transferred to third countries without adequate protection levels.

5. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You have the right to obtain confirmation as to whether we process your personal data and to receive a copy of it.
• Right to Rectification (Art. 16 GDPR): You have the right to request the correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data under certain conditions ("right to be forgotten").
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to restrict processing under certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object to processing based on legitimate interests.
• Right to Withdraw Consent (Art. 7(3) GDPR): If processing is based on your consent, you can withdraw it at any time with future effect.

To exercise any of these rights, please contact us at kontakt@orangemorangebloom.pro.

If you believe that the processing of your personal data violates data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Austria, this is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde):

Österreichische Datenschutzbehörde
Barichgasse 40-42, 1030 Wien, Austria
Email: dsb@dsb.gv.at

6. Security Measures

We implement state-of-the-art technical and organizational security measures, including SSL/TLS encryption, to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorized disclosure.