Privacy Policy

Last Updated: February 11, 2026

We, Offizieller Distributor von ORising in Deutschland EnGes Group | Olha Vdovychenko, take the protection of your privacy very seriously. This Privacy Policy explains how we collect, use, disclose, and protect your personal information on the website www.orisingofficial.de (“Site”) in accordance with the General Data Protection Regulation (GDPR) of the European Union and other applicable laws.

Since the Site targets users in Europe (in particular Germany), we comply with the GDPR as a data controller.

Who We Are

We are Offizieller Distributor von ORising in Deutschland EnGes Group | Olha Vdovychenko, registered at:
Zettachring 4, 70567 Stuttgart, Deutschland.

The hosting and servers of the Site are located in Germany (within the European Economic Area – EEA).

Contact Information:
Email: info@orisingofficial.de
Mailing Address: Zettachring 4, 70567 Stuttgart, Deutschland
Tel: +49 174 4363584

What Data We Collect

We collect and process only the following categories of personal data:

• Identification Data: username, email address, password (stored in hashed form).
• Order & Contract Data: name, delivery address, billing address, phone number (if provided), order details (processed via Stripe).
• Technical Data: browser type, device information, IP address, cookies, and data collected via analytics tools (e.g., Google Analytics).
• Usage Data: information about your interactions with the Site (pages viewed, clicks, etc.).
• Data Provided by You: information submitted through contact/support forms.
• Marketing Data: your preferences for receiving marketing communications (only with your consent).

We do not collect special categories of personal data (Art. 9 GDPR), such as health data or religious beliefs.

Payment and subscription processing is handled exclusively by Stripe (as processor). We transmit only the data necessary for the transaction (name, address, email, order amount, payment method details handled by Stripe).

How We Collect Data

• Directly from you: during registration, checkout, or form submissions.
• Automatically: via cookies, server logs, and analytics tools (e.g., Google Analytics).
• From third parties: limited data from social networks (if you interact with us there).

How We Use Your Data – Legal Bases & Purposes

We process your data on the following legal bases (Art. 6 GDPR):

• Performance of a contract (Art. 6(1)(b)): registration, order processing, subscription delivery, customer support.
• Legitimate interests (Art. 6(1)(f)): site improvement, fraud prevention, security, basic analytics (we have conducted a balancing test).
• Consent (Art. 6(1)(a)): marketing emails/newsletters, non-essential cookies.
• Legal obligations (Art. 6(1)(c)): tax, commercial, and consumer law compliance (e.g., retention of order data).

Purposes include:

• Providing and personalizing Site services.
• Processing purchases, subscriptions, and deliveries.
• Customer support and handling requests.
• Sending marketing communications (only with consent).
• Analyzing and improving the Site.
• Ensuring security and preventing fraud.

Disclosure of Your Data

We share data only with:

• Processors: hosting provider (Germany), analytics (Google Analytics), email service (e.g., Mailchimp), payment processor (Stripe) — all bound by Data Processing Agreements (DPA).
• Legal authorities: if required by law or to protect our rights.
• Other parties: only with your explicit consent (e.g., joint promotions).

We do not sell your personal data to third parties.

International Data Transfers

Primary storage and most processing occur within the EEA (Germany). However, some processors may involve transfers outside the EEA:

• Stripe (based in USA/EU) – covered by EU-US Data Privacy Framework and/or Standard Contractual Clauses (SCCs, 2021 version).
• Google (USA) – covered by SCCs and supplementary measures; we have conducted a Transfer Impact Assessment (TIA).

We ensure an adequate level of protection through appropriate safeguards (Art. 46 GDPR) and regular reviews.

Data Storage Periods

We retain data only as long as necessary:

• Registration & account data: until deletion or up to 5 years after last activity (statute of limitations).
• Order & tax-relevant data: up to 10 years (German commercial/tax law requirements – HGB/AO).
• Marketing data: until withdrawal of consent.
• Technical logs: up to 12 months.

After expiry, data is deleted or irreversibly anonymized.

Your Rights (GDPR)

You have the right to:

• Access, rectification, erasure (“right to be forgotten”), restriction of processing.
• Data portability.
• Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent at any time (without affecting prior lawfulness).

To exercise rights, email: info@orisingofficial.de. We respond within one month (free of charge, unless requests are excessive). We may request identity verification.

Cookies

We use cookies for functionality, analytics, and personalization. You manage preferences via the cookie banner on our Site. Non-essential cookies require your consent. See our separate Cookie Policy for details.

Data Security

We use technical and organizational measures (encryption, hashing, access controls, regular audits) to protect your data. However, internet transmission cannot be 100% secure.

Links to Third-Party Sites

The Site may link to third-party services (e.g., Stripe). We are not responsible for their privacy practices — please review their policies.

Complaints

If unsatisfied, contact us first at info@orisingofficial.de. You may also lodge a complaint with the supervisory authority: Landesbeauftragter für den Datenschutz und die Informationsfreiheit Baden-Württemberg (or your local authority).

Changes to This Privacy Policy

We may update this Policy due to legal or operational changes. The new version will be posted here with an updated date. Significant changes will be notified by email.