Privacy policy

Controller

The controller for the processing of personal data in connection with this website is Luca Diaz Hilterscheid, sole trader, Märkische Heide 5, 14532 Kleinmachnow, Germany, who runs this service under the name Orlyn Legal.

For questions about data protection and to exercise your rights, you can reach us at luca@orlyn.ai.

Visiting this website

This website is hosted and delivered by Cloudflare, Inc., 101 Townsend St., San Francisco, California 94107, USA.

When you open a page, Cloudflare processes the data technically required for this, in particular your IP address, the date and time of the request, the requested address and the information your browser transmits. The request is handled in the Cloudflare data centre nearest to your location.

The purpose is to deliver the website and to operate it securely and without disruption. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in providing the website reliably and securely.

We do not keep a log of page requests.

This website sets no cookies, stores no information in your browser’s local storage and uses no analytics or tracking services. No third-party content or scripts are embedded, and the fonts are also served by this website itself.

Enquiries by form or email

When you submit the contact form, we process your name, your firm, your email address, your message and, if given, the practice area, together with the language version of the page from which you send the form. We use these details to answer your enquiry.

The details are processed on Cloudflare’s servers and delivered by Cloudflare’s email service to our mailbox luca@orlyn.ai. The mailbox is provided by Google Workspace.

To prevent misuse, we limit the number of enquiries per IP address within ten minutes. For this purpose your IP address is held in working memory only and is not stored permanently.

The legal basis is Art. 6(1)(b) GDPR where your enquiry is aimed at entering into a contract, and otherwise Art. 6(1)(f) GDPR. Our legitimate interest lies in answering enquiries and protecting the form against misuse.

Providing these details is voluntary and is not required by law or by contract. Without your name, firm, email address and message we cannot receive or answer an enquiry through the form.

You can also write to us by email at luca@orlyn.ai instead. We then process your email address, your message and the details you share with us for the same purposes and on the same legal bases.

Case files that law firms send us by email after instructing us are processed on behalf of the law firm under a data processing agreement pursuant to Art. 28 GDPR. The law firm is the controller for this data, and its own privacy information applies.

Recipients

We use the following service providers, who process personal data on our behalf and on our instructions (Art. 28 GDPR).

Cloudflare, Inc., 101 Townsend St., San Francisco, California 94107, USA, for hosting and delivering the website, processing the contact form and sending the emails from the form.

Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland, for our email mailbox (Google Workspace).

Transfers outside the EU

Cloudflare processes data across its global network, including in the USA and in other countries outside the European Union. Google may process data in any country where Google or its subprocessors maintain facilities.

Cloudflare, Inc. and Google LLC are certified under the EU-US Data Privacy Framework. Transfers to these companies rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework (Art. 45 GDPR).

Beyond that, the contracts with Cloudflare and Google provide for the European Commission’s standard contractual clauses (Art. 46(2)(c) GDPR). You can obtain a copy on request at luca@orlyn.ai.

How long we keep data

Data that arises technically when the website is opened is processed by Cloudflare only for as long as necessary to deliver the website and protect the website.

The IP address used to limit form enquiries is held in working memory only and is not stored permanently.

We keep enquiries and email correspondence for as long as necessary to handle your enquiry and any engagement that results from it. We then delete them unless statutory retention obligations apply.

Your rights

Under Art. 15 to 21 GDPR you have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing. To exercise these rights, contact luca@orlyn.ai.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the data protection supervisory authority of the State of Brandenburg (‘Die Landesbeauftragte für den Datenschutz und für das Recht auf Akteneinsicht Brandenburg’), https://www.lda.brandenburg.de.

Right to object

Where we process data on the basis of Art. 6(1)(f) GDPR, you have the right to object at any time on grounds relating to your particular situation (Art. 21 GDPR).

No automated decision-making

We do not use automated decision-making, including profiling, within the meaning of Art. 22 GDPR.

Changes to this policy

We update this policy when the website or the processing described here changes.