1. Controller and request channel
Exercise your rights with MAGNANIMITAS, S.L., Spanish tax ID B88815683, by emailing legal@orvyon.io or writing to Calle Doctor Fleming, 44, 28036 Madrid (Madrid), Spain. You do not need to use the contact form or open an account.
2. Your rights
Access: learn whether we process your personal data and obtain the data and information required by law. Rectification: correct inaccurate data or complete incomplete data. Erasure: request deletion where an Article 17 GDPR ground applies, subject to exceptions and retention duties.
Restriction: limit processing in the circumstances of Article 18 GDPR. Objection: object on grounds relating to your particular situation to public-interest or legitimate-interest processing under Article 21 GDPR. Portability: receive data you provided and transmit it to another controller where automated processing relies on consent or contract and Article 20 GDPR requirements are met.
3. Withdrawing consent and automated decisions
Where processing relies on consent, you can withdraw it as easily as you gave it, without retrospective effect. This website does not make solely automated decisions producing legal or similarly significant effects. If introduced, information would explain rights to human intervention, express your view and contest a decision under applicable law.
4. What to include
Provide your name and a reply channel, the right you wish to exercise, a clear description and information that helps locate the processing, such as the email address you used or the approximate communication date. Attach relevant documents only where necessary.
Do not send a full identity-document copy by default. If reasonable doubts arise about identity, necessary and proportionate additional information will be requested under Article 12(6) GDPR. A representative must provide evidence of authority.
5. Time limits, cost and response
We will respond without undue delay and within one month of receipt. Where justified by complexity or the number of requests, this may be extended by two further months, with reasons and notice within the first month.
Exercising rights is free. Only in the circumstances of manifestly unfounded or excessive requests under Article 12(5) GDPR may a reasonable administrative-cost fee be charged or action refused, with the required justification. If a request cannot be granted, reasons and available complaint mechanisms will be explained.
6. Limits and third-party rights
Rights are not absolute. Their exercise must respect statutory retention duties and other people’s rights and freedoms. A response is limited to your data or data for which you establish lawful authority, with measures to prevent unauthorised access or disclosure.
7. Complaints to the supervisory authority
If you believe your rights have been infringed, you may complain to the Spanish Data Protection Agency through https://www.aepd.es. Its rights guidance is available at https://www.aepd.es/derechos-y-deberes/ejerce-tus-derechos. Contacting us first is not a requirement for approaching the supervisory authority.
8. Processing your request
Information provided is used to verify authority, handle and document the request, and meet data protection obligations under Article 6(1)(c) GDPR. It is retained during handling and for periods legally necessary to demonstrate compliance and address liabilities. The Privacy Policy provides further information about recipients, transfers and security.