Privacy Policy

1. Introduction

ORIGENCE™ SAS ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website origence.tech.

This privacy policy complies with the European Union's General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

3. Information We Collect

3.1 Information You Provide

Contact Information:

When you contact us via email (contact@origence.tech), we collect:

• Email address
• Name (if provided)
• Message content
• Any other information you choose to provide

Purpose: To respond to your inquiries and provide customer support.

Legal Basis: Legitimate interest in responding to communications and providing support.

3.2 Information Automatically Collected

Website Access Data:

• IP address (anonymized)
• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• Date and time of access

Purpose: Website functionality, security, and performance optimization.

Legal Basis: Legitimate interest in maintaining website security and improving user experience.

Note: This data is collected by our hosting provider (GoDaddy) as part of standard web server logs.

3.3 Cookies and Similar Technologies

We use Google Analytics to understand how visitors interact with our website. Google Analytics uses cookies and similar technologies to collect information about your use of our website.

What We Collect:

• Pages you visit and time spent on each page
• How you arrived at our website (referring website, search engine, etc.)
• Your device type, browser, and screen resolution
• Your approximate geographic location (country/city level)
• Your IP address (anonymized by Google)

Purpose: To analyze website traffic, understand user behavior, and improve our website's content and user experience.

Legal Basis: Legitimate interest in understanding how our website is used and improving our services.

Your Control: You can opt-out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser's cookie settings.

Session Storage (Local Storage):

We use browser local storage for:

• Authentication session management (if password protection is enabled)
• No personal data is stored, only session tokens

Purpose: Maintain login sessions and improve user experience.

Legal Basis: Legitimate interest in providing secure access to the website.

Your Control: You can clear local storage at any time through your browser settings.

4. Third-Party Services

4.1 Google Fonts

We use Google Fonts to display custom fonts on our website. When you visit our site, Google may collect:

• Your IP address
• User agent string
• Font requests

Privacy Policy: https://policies.google.com/privacy

Purpose: Display custom typography for better user experience.

Data Transfer: Data may be transferred to the United States.

Legal Basis: Legitimate interest in providing an attractive and readable website.

4.2 Tailwind CSS CDN

We use Tailwind CSS via a Content Delivery Network (CDN). The CDN provider may collect:

• Your IP address
• Request timestamps
• Browser information

Purpose: Deliver CSS framework efficiently.

Legal Basis: Legitimate interest in website performance.

4.3 GoDaddy (Hosting Provider)

Our website is hosted by GoDaddy LLC, a company based in the United States. Our servers are located in Europe (European Union). GoDaddy may collect:

• Server logs (IP addresses, access times, pages viewed)
• Technical information for hosting operations

Privacy Policy: https://www.godaddy.com/legal/privacy

Purpose: Website hosting and availability.

Legal Basis: Necessary for contract fulfillment (hosting agreement).

Data Location: Data is stored on European servers. Any potential data transfers to GoDaddy's US operations are governed by Standard Contractual Clauses (SCCs) in compliance with GDPR Article 46.

4.4 Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC (United States), to analyze website usage and visitor behavior.

What Google Analytics Collects:

• Pages visited and time spent on pages
• Traffic sources (how you found our website)
• Device and browser information
• Approximate geographic location (country/city level)
• IP address (automatically anonymized by Google)

Privacy Policy: https://policies.google.com/privacy

Purpose: To understand how visitors use our website and improve our content and user experience.

Legal Basis: Legitimate interest in website analytics and improvement.

Data Transfer: Data collected by Google Analytics is transferred to and stored on Google's servers in the United States. Google is certified under the EU-U.S. Data Privacy Framework and relies on Standard Contractual Clauses (SCCs) for data transfers, ensuring compliance with GDPR Article 46.

Data Retention: Google Analytics data is retained for 26 months by default. You can request deletion of your data at any time.

Your Rights: You can opt-out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Adjusting your browser's cookie settings to block analytics cookies

5. How We Use Your Information

We use the information we collect for the following purposes:

1. Communication: To respond to your emails and inquiries
2. Security: To protect our website from fraud, abuse, and security threats
3. Performance: To monitor and improve website performance
4. Legal Compliance: To comply with legal obligations
5. Business Operations: To understand how visitors use our website

6. How We Share Your Information

We do NOT sell, rent, or trade your personal information to third parties.

We may share information in the following circumstances:

1. Service Providers: With trusted service providers who assist in operating our website (e.g., hosting provider)
2. Legal Requirements: When required by law or to protect our rights
3. Business Transfers: In connection with any merger, sale, or acquisition of our business
4. With Your Consent: When you explicitly agree to share information

7. Data Retention

• Email Communications: We retain email correspondence for as long as necessary to respond to your inquiry and for legitimate business purposes (typically 3 years).
• Server Logs: Automatically deleted after 90 days by our hosting provider.
• Authentication Sessions: Expire automatically after 24 hours (or 30 days with "Remember Me").

8. Your Rights (GDPR)

If you are located in the European Economic Area (EEA), you have the following rights:

1. Right to Access: Request a copy of the personal data we hold about you
2. Right to Rectification: Request correction of inaccurate personal data
3. Right to Erasure: Request deletion of your personal data
4. Right to Restrict Processing: Request limitation on how we use your data
5. Right to Data Portability: Receive your data in a structured, machine-readable format
6. Right to Object: Object to our processing of your personal data
7. Right to Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
8. Right to Lodge a Complaint: File a complaint with a supervisory authority

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• HTTPS Encryption: All data transmitted to/from our website is encrypted using SSL/TLS
• Secure Hosting: Our website is hosted on secure servers with firewalls and intrusion detection
• Access Controls: Limited access to personal data on a need-to-know basis
• Regular Updates: We keep our software and systems up to date
• Security Headers: We implement security headers to protect against common attacks

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

10. International Data Transfers

Data Storage Location: Our website is hosted on servers located in Europe (European Union). Your personal data is primarily stored and processed within the European Economic Area (EEA).

Hosting Provider: Our hosting services are provided by GoDaddy LLC, a company based in the United States. While our servers are located in Europe, GoDaddy may have access to technical data and server logs for operational purposes.

Safeguards for Data Transfers: To ensure compliance with GDPR Article 46, we have implemented appropriate safeguards for any potential data transfers outside the EEA:

• Standard Contractual Clauses (SCCs): We rely on the European Commission's Standard Contractual Clauses approved for data transfers to third countries, as incorporated in our hosting agreement with GoDaddy.
• Data Minimization: We minimize the amount of personal data that may be accessible to our hosting provider.
• Technical Safeguards: Data is encrypted in transit (HTTPS/TLS) and stored on European servers.

Your Rights: Despite these safeguards, if you are located in the EEA, you have the right to object to any transfer of your personal data outside the EEA. However, please note that this may affect your ability to use our website.

11. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will delete it immediately.

12. Links to Other Websites

Our website may contain links to third-party websites:

• LinkedIn: https://www.linkedin.com/company/origence
• Google Maps: For directions to our office

We are not responsible for the privacy practices of these third-party websites. Please review their privacy policies.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated "Last Updated" date.

Material Changes: We will notify you of any material changes by:

• Posting a notice on our website
• Sending an email (if we have your email address)

Your Continued Use: Continued use of our website after changes constitutes acceptance of the updated privacy policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:

Response Time: We will respond to your inquiry within 30 days.

15. Supervisory Authority

If you are located in the EEA and believe that we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection authority:

16. Consent

By using our website, you consent to:

• The collection and use of information as described in this privacy policy
• The transfer of data to third-party service providers (hosting, fonts, CDN)
• The storage of session information in your browser's local storage

You can withdraw your consent at any time by:

• Ceasing to use the website
• Clearing your browser's local storage
• Contacting us to delete your data