ORENTYS

Legal

Privacy Policy

Last updated: 14 September 2026

At ORENTYS we take the protection of your personal data seriously. This policy explains what data we process when you visit this website or contact us, for what purpose and under what safeguards, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

ORENTYS is a brand jointly operated by two companies. For the purposes of the GDPR and the LOPDGDD, both are controllers in relation to the personal data collected through this website (orentys.com):

  • SPAIN C&T, S.L. — Tax ID (NIF) B84086883. Registered with the Commercial Registry of Madrid, Volume 20,435, Book 0, Page 44, Section 8, Sheet M-361438, Entry 1. Contact: info@openmags.com. The registered office address is pending confirmation and will be added to this notice once available.
  • Código Media Comunicación, S.L. — Tax ID (NIF) B87510939. Registered office at C/ Escorial 7 (Local), 28004 Madrid, Spain. Registered with the Commercial Registry of Madrid, Volume 34,631, Book 0, Page 86, Section 8, Sheet M-623035. General contact: info@codigomedia.es. Data-protection contact: dataprotection@codigomedia.es.

The precise allocation of responsibilities between the two entities under Article 26 GDPR (joint controllers) is being formalised internally. Until that process is complete, you may contact either of the two addresses above to exercise your rights or raise any question about this policy; your request will be handled as normal.

2. Scope of this policy

This policy applies to the ORENTYS corporate website (orentys.com) and to the personal data collected through it, in particular via the contact form. It does not govern any processing of data that ORENTYS customers may enter into the ORENTYS platform or application once it becomes available: that processing, when it exists, will be governed by its own terms and, where applicable, a data processing agreement (DPA), made available to customers at the point of contracting.

In that scenario, ORENTYS may act as a processor in relation to data its customers process through the platform, rather than as the sole controller of that data. This distinction will be formalised contractually before that functionality becomes available.

3. What personal data we process

  • Identification and contact data you provide voluntarily: your name, company (optional), email address, and the content of any message you send us.
  • Technical browsing data: the website language you select, stored via a technical cookie, and your cookie choice, stored in your browser.
  • We do not knowingly request or process special categories of data (Article 9 GDPR) through this website. Please do not include this type of information in the contact form.

This website's hosting provider may technically log the IP address and other metadata inherent to any request made to a web server, as part of its standard operation. ORENTYS does not access those logs for individual-identification purposes unless strictly necessary to safeguard the security of the service.

4. How we obtain your data

  • Directly from you, when you complete the contact form.
  • Automatically, on a strictly technical basis, through the necessary cookies described in our Cookie Policy.

5. Purposes of processing and legal basis

PurposeLegal basis
Managing and responding to the enquiries you send us through the contact form.Performance of pre-contractual steps taken at your request, and our legitimate interest in handling business enquiries (Article 6(1)(b) and 6(1)(f) GDPR).
Remembering the browsing language you selected.Legitimate interest in the correct technical operation of the website (Article 6(1)(f) GDPR); this is a necessary technical cookie.
Remembering the choice you make about cookies.Legal obligation to be able to demonstrate your consent where applicable (Article 7(1) GDPR), and technical necessity for the preference panel itself to function.

6. Data retention

We retain the data you provide through the contact form for as long as necessary to respond to your enquiry and, should a business relationship follow, for as long as it continues; afterwards, it will be kept blocked for the legally applicable limitation periods before being deleted.

The cookie that remembers your browsing language lasts one year from installation. Your cookie choice is kept in your browser until you change or delete it, or until we substantially update this policy, which may require you to state your choice again.

7. Recipients and processors

We do not share the data collected through the contact form with third parties, except where legally required. The website may be hosted on the technical infrastructure of a hosting/CDN provider, which would act, where applicable, as a processor in relation to the technical browsing data described in section 3. The identity of that provider and the terms of that arrangement are being confirmed and will be added to this policy once available.

8. International data transfers

We are not aware of any international transfer of personal data outside the European Economic Area (EEA) in relation to the contact-form data. To the extent the website's hosting provider may involve processing technical data outside the EEA, that point is pending confirmation; should that be the case, we will ensure the transfer is subject to an appropriate safeguard under Chapter V GDPR (such as standard contractual clauses) and will update this policy accordingly.

9. Automated decision-making and profiling

ORENTYS does not currently carry out automated decision-making or profiling with legal or similarly significant effects on visitors to this website, based on the data described in this policy.

10. Your rights

In relation to the personal data we process, you have the right to:

  • Access: find out whether we are processing your personal data and access it.
  • Rectification: request correction of inaccurate or incomplete data.
  • Erasure: request deletion of your data once it is no longer necessary for the purpose it was collected for, or in other cases provided for by law.
  • Restriction of processing: request that we temporarily suspend processing of your data in certain cases.
  • Objection: object to the processing of your data on grounds relating to your particular situation.
  • Objection to automated decisions: object to being subject to decisions based solely on automated processing, including profiling.
  • Portability: receive the data you have provided to us in a structured, commonly used and machine-readable format.
  • Withdrawal of consent: withdraw your consent for a specific purpose at any time, without affecting the lawfulness of processing carried out before you did so.

11. How to exercise your rights

You can exercise any of these rights by contacting either of the addresses below, stating the right you wish to exercise and providing the documentation needed to verify your identity:

  • By email to info@openmags.com (SPAIN C&T, S.L.).
  • By email to dataprotection@codigomedia.es (Código Media Comunicación, S.L.), with the subject line: Data Protection.

We will inform you of the action taken on your request within one month at most, which may be extended by a further two months for particularly complex requests; in that case, we will notify you of the extension within the first month.

12. Right to lodge a complaint with the supervisory authority

If you believe that the processing of your personal data does not comply with applicable law, you have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) through its electronic office (www.aepd.es); you are not required to contact us first.

13. Security of information

We apply reasonable technical and organisational measures, appropriate to the risk of the processing, to protect your personal data against unauthorised access, loss or alteration. No security measure is infallible; if you have any concerns about the security of your data, you can contact us through the channels listed in this policy.

14. Minors

This website is aimed at a professional and business audience and is not intended for minors. We do not knowingly request or collect personal data from minors through the contact form.

15. Third-party links and services

This website does not currently embed any third-party widgets, scripts or content (such as maps, videos or chat tools). Should this change, we will update this policy to reflect it. Any link to a third-party website that may be added in the future is governed by that site's own privacy policy, which we recommend you review.

16. Changes to this policy

We may amend this policy to reflect legislative or case-law developments, or changes to our practices. We will publish any change on this same page, showing the date of the last update. If the change is material, we will notify you with reasonable advance notice through a visible notice on the website.

17. Contact

For any question relating to this privacy policy, you can write to us at info@openmags.com or dataprotection@codigomedia.es.

We use cookies to run this site and, with your permission, to understand how it's used. You can change your choice at any time. Cookie Policy