Privacy Policy
LAST UPDATED: September 28, 2026
This Privacy Policy is issued by Oraigo S.r.l. (“Oraigo”, “we”, “us”, or “Data Controller”), with registered office at Viale dell’Industria 23, Scala A, 35129 Padua (PD), Italy, VAT No.: IT05190700285, acting as Data Controller pursuant to Articles 13 and 14 of EU Regulation 2016/679 (“GDPR”).
This document explains how we collect, process, retain, and safeguard personal data collected when you navigate https://oraigo.com or submit requests through our contact and demo booking forms.
1. Data Controller and Contact Information
The Data Controller responsible for your personal data is:
- Company Name: Oraigo S.r.l.
- Registered Office: Viale dell’Industria 23, Scala A, 35129 Padua (PD), Italy
- VAT / Tax Code: IT05190700285
- Privacy Inquiries: privacy@oraigo.com
- General Email: info@oraigo.com
- Phone: +39 049 6882080
2. Categories of Personal Data Collected
Oraigo processes the following data categories:
- Information provided directly through contact or demo forms:
- First and Last Name;
- Business or personal email address;
- Phone number (if provided);
- Company or organization name;
- Job title, business role, or area of interest;
- Messages and free-text notes included in form submissions.
- Browsing and technical device data:
- IP addresses, browser type, device hardware, operating system;
- Access timestamps, visited pages, session lengths, and aggregated performance data collected via cookies or web trackers (e.g., Google Analytics).
3. Purposes and Legal Bases for Processing
| Processing Purpose | Legal Basis (GDPR) | Requirement to Provide Data |
|---|---|---|
| Managing contact requests & demo bookings: Answering inquiries and setting up demonstrations. | Art. 6(1)(b) GDPR: Performance of pre-contractual measures requested by the individual. | Required to receive an answer or schedule a demo. |
| Lead and sales relationship management (CRM): Organizing, tracking, and following up on commercial opportunities. | Art. 6(1)(b) & (f) GDPR: Pre-contractual steps and our legitimate interest in organized B2B sales management. | Required for lead processing. |
| Marketing communications & newsletters: Sending technology updates, product announcements, and company news. | Art. 6(1)(a) GDPR: Freely given, explicit, and revocable consent. | Optional. Unsubscribing does not affect inquiries. |
| Website analytics and optimization: Tracking website metrics, traffic volume, and technical performance. | Art. 6(1)(f) GDPR (legitimate interest) / Art. 6(1)(a) GDPR (consent for non-essential cookies). | Optional for consent-based analytics cookies. |
| Statutory compliance & legal defense: Meeting tax and accounting laws or defending legal claims. | Art. 6(1)(c) & (f) GDPR: Legal obligation and legitimate interest in litigation defense. | Mandatory by law. |
4. Third-Party Services and CRM Integrations
To streamline lead management and ensure site performance, Oraigo utilizes enterprise cloud platforms:
- HubSpot CRM (HubSpot, Inc.): We rely on HubSpot to centralize contact records, record demo submissions, and—where explicit opt-in consent is provided—distribute newsletters. Data submitted via web forms is routed and hosted through HubSpot systems under formal data processing terms. See HubSpot’s Privacy Policy.
- Google Analytics (Google LLC / Google Ireland Ltd): Used to measure aggregated website traffic and navigation patterns. Cookies for analytics are deployed subject to user consent via our cookie banner. See Google’s Privacy Policy.
5. Data Recipients
Oraigo does not sell, rent, or trade personal data to third parties for their own marketing purposes. Data is only accessible to:
- Authorized Oraigo personnel operating under confidentiality agreements and strict operational instructions (Art. 29 GDPR);
- Authorized third-party Data Processors (Art. 28 GDPR), including our CRM provider (HubSpot, Inc.), hosting providers, web developers, and professional accounting/legal advisors;
- Public or judicial authorities when required by applicable law.
6. International Data Transfers (Outside the EEA)
Select service providers (notably HubSpot, Inc. and Google LLC) maintain servers and corporate offices in the United States. Any data transfer outside the European Economic Area (EEA) complies with Chapter V of the GDPR under:
- The European Commission adequacy determination for the EU-U.S. Data Privacy Framework (DPF), under which both HubSpot and Google are certified;
- Standard Contractual Clauses (SCCs) issued by the European Commission, supported by technical safeguard measures (end-to-end and at-rest encryption).
7. Data Retention Periods
- Inquiry and Demo Leads: Retained for a maximum of 24 months from the date of last contact or until pre-contractual discussions conclude (retained 10 years if a formal commercial contract ensues).
- Direct Marketing & Newsletters: Retained until consent is revoked (unsubscribed) or for a maximum of 24 months from the last active interaction.
- Analytics & Cookie Data: Kept according to the periods specified in our Cookie Policy (typically 2 to 14 months).
8. Your Rights as a Data Subject
Under Articles 15 to 22 of the GDPR, you have the right to request access, rectification, erasure (“right to be forgotten”), restriction, data portability, and objection to the processing of your personal data, as well as the right to withdraw your consent at any time.
To exercise your rights, please contact us at:
- Email: privacy@oraigo.com
- Mail: Oraigo S.r.l., Viale dell’Industria 23, Scala A, 35129 Padua (PD), Italy
Right to lodge a complaint: You have the legal right to submit a complaint to the relevant supervisory authority (Art. 77 GDPR). In Italy, the authority is the
Garante per la Protezione dei Dati Personali – Piazza Venezia 11, 00187 Rome (www.garanteprivacy.it).
9. Cookie Policy & Updates
For more details on how cookies are managed, please visit our dedicated Cookie Policy. Oraigo reserves the right to amend this Privacy Policy to reflect evolving regulatory or technical requirements. Updates take effect upon posting to this page.