Privacy Policy

We take the protection of your personal data seriously. Oraya Ventures LLC is based in the United States. Where we process personal data of users located in the European Union, we do so in accordance with the General Data Protection Regulation (GDPR).

1. Controller

The controller responsible for data processing on this website is:

Oraya Ventures LLC
2232 Dell Range Blvd.
Suite 245 - 3737
Cheyenne, WY 82009
United States

Email: contact@orayaventures.com
Represented by: Johannes Jäger

2. Hosting and server log files

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When you access the website, the host automatically collects and stores information in server log files that your browser transmits. This typically includes your IP address, the date and time of the request, the file accessed, the referrer URL and information about your browser and operating system. This data is processed to ensure the technically error-free presentation, security and stability of the website. The legal basis is Art. 6(1)(f) GDPR (legitimate interest). Processing may take place on servers in the USA; such transfers are based on appropriate safeguards, in particular the EU Standard Contractual Clauses.

3. SSL/TLS encryption

For security reasons, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.

4. Contact by email

If you contact us by email, we process the data you provide (in particular your email address, name and the content of your message) to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries). We delete this data once it is no longer required.

5. Appointment booking via Calendly

To schedule calls we use Calendly, provided by Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. When you click "Book a free call" you are redirected to a Calendly page; the data you enter there (e.g. name, email address, chosen time) is processed by Calendly. The legal basis is Art. 6(1)(b) or 6(1)(f) GDPR. A transfer to the USA may take place. For details see Calendly's privacy policy at calendly.com/privacy.

6. Fonts

This website serves its fonts locally from our own server. No connection is made to third-party servers (such as Google Fonts).

7. Cookies, consent and analytics

On your first visit we ask for your consent via a cookie banner. Cookies and services that require consent are only set or loaded after you agree (legal basis Art. 6(1)(a) GDPR). We store your choice locally in your browser. You can change or withdraw your consent at any time, with effect for the future, via the "Cookie settings" link in the footer.

Reach measurement (Vercel Analytics)

For anonymous reach measurement we use Vercel Web Analytics (Vercel Inc., USA). This service is cookieless, stores nothing on your device and builds no cross-site profiles; only aggregated, anonymous usage statistics are collected. Legal basis: Art. 6(1)(f) GDPR.

Analytics (consent only)

If you consent to the "Analytics" category, we use Google Analytics 4 (Google Ireland Ltd.) to evaluate how our website is used. This sets cookies and may transfer data, including to the USA.

Marketing (consent only)

If you consent to the "Marketing" category, we use the Meta Pixel (Meta Platforms Ireland Ltd.) to measure the performance of our ads on Facebook and Instagram and to build audiences. This sets cookies and transfers data to Meta, including to the USA.

8. External links

Our website contains links to external sites (for example LinkedIn). We have no influence over how those providers process data; their own privacy policies apply.

9. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection (Art. 21) and to withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise your rights, an informal message to contact@orayaventures.com is sufficient.

10. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement.

11. Retention

Unless a more specific retention period is stated above, your personal data remains with us until the purpose of processing no longer applies. If you make a valid request for erasure or withdraw consent, your data will be deleted unless there are legally permissible grounds for retaining it.