top of page

PRIVACY POLICY

Last updated: October 2026

At OROONU, attention also shapes the way we handle personal data.
We believe privacy is a right, not a luxury.

​

1. Who is responsible for your data?

The data controller responsible for this website is:

Andrea Villanis / OROONU
Biesentaler Straße, 13359 Berlin, Germany

Email: info@oroonu.com

OROONU is currently operated by Andrea Villanis as a freelance professional based in Germany.

2. What personal data do we collect?

Depending on how you use the website and our services, we may process:

  • your name and email address when you contact us, subscribe to communications, register for a pilot or purchase a digital product;

  • information required to process purchases and provide digital products;

  • technical and usage data such as IP address, browser/device information, pages visited and cookie information;

  • information that you voluntarily provide when communicating with us or participating in OROONU activities.

Payment information is processed by the relevant payment provider and is not stored directly by OROONU.

​

3. Why do we process your data?

We process personal data in order to:

  • provide digital products and services you request;

  • process purchases and payments;

  • respond to enquiries;

  • organise pilot experiences and collaborations;

  • send newsletters or other communications where you have consented to receive them;

  • operate, secure and improve the website;

  • understand how the website is used, where you have consented to analytics technologies.

  • ​

4. Legal basis

Depending on the processing activity, personal data may be processed on the basis of:

  • your consent — Art. 6(1)(a) GDPR;

  • performance of a contract or steps taken before entering into a contract — Art. 6(1)(b) GDPR;

  • compliance with legal obligations, including tax and accounting requirements — Art. 6(1)(c) GDPR;

  • our legitimate interests in securely operating and administering OROONU and responding to enquiries — Art. 6(1)(f) GDPR.

Where processing is based on consent, you may withdraw your consent at any time for the future.

Il punto qui è importante: un acquisto, per esempio, non viene elaborato perché il cliente “consente”, ma perché dobbiamo eseguire il contratto. Il GDPR prevede espressamente basi giuridiche differenti. EUR-Lex

​

5. Cookies and analytics

This website may use cookies and similar technologies required for its technical operation.

Optional analytics or marketing technologies are used only where legally required consent has been obtained through the website's cookie settings.

You can change or withdraw your cookie choices through the cookie settings available on the website.

​

6. Service providers

To operate the website and provide our services, we may use external service providers.

These may include, depending on the services currently activated:

  • Wix — website hosting and e-commerce infrastructure;

  • Stripe or other payment providers — payment processing;

  • MailerLite — email communications and newsletters;

  • Google Analytics — website analytics, where enabled and consented to.

These providers process personal data only to the extent required for their respective services and under their own applicable data-protection terms.

Qui dobbiamo fare un controllo dopo, perché questa lista deve corrispondere esattamente a ciò che hai realmente attivo su Wix. Se non usi più MailerLite o Google Analytics, li togliamo. Se Wix Payments/PayPal ecc. sono attivi, vanno aggiunti.

​

7. International data transfers

Some service providers may process data outside the European Economic Area.

Where required, international transfers are subject to safeguards recognised under the GDPR, such as an adequacy decision or appropriate contractual safeguards.

​

8. How long do we keep your data?

Personal data is retained only for as long as necessary for the purpose for which it was collected.

In particular:

  • enquiry and communication data is retained only for as long as reasonably necessary to respond and manage the relationship;

  • newsletter data is retained until you unsubscribe or withdraw your consent;

  • transaction and accounting information may be retained for the periods required by German tax and commercial law.

Data that is no longer required is deleted or anonymised, unless a legal retention obligation applies.

Questo è meglio del vecchio “finché l'utente mostra interesse”, perché il GDPR richiede di comunicare il periodo di conservazione oppure i criteri con cui viene determinato. EUR-Lex

​

9. Your rights

Under the GDPR, you may have the right to:

  • request access to your personal data;

  • request correction of inaccurate data;

  • request deletion of your data;

  • request restriction of processing;

  • receive certain data in a portable format;

  • object to certain processing;

  • withdraw consent at any time where processing is based on consent.

To exercise these rights, contact:

info@oroonu.com

You also have the right to lodge a complaint with a competent data protection supervisory authority. For a controller based in Berlin, the relevant authority is the Berlin Commissioner for Data Protection and Freedom of Information. Berliner Datenschutzbeauftragte

​

10. Data security

We use appropriate technical and organisational measures intended to protect personal data against unauthorised access, loss, alteration or disclosure.

The website uses encrypted HTTPS/TLS connections for data transmission.

​

11. Changes to this Privacy Policy

We may update this Privacy Policy when our services, technologies or legal requirements change.

The current version will always be published on this website together with its latest update date.

 

12. Contact

For questions about privacy or the processing of your personal data:

Andrea Villanis / OROONU
Email: info@oroonu.com

bottom of page