Privacy policy
1. Who we are
Orbius (“Orbius”, “we”, “us”), a company registered in Serbia, is the controller of the personal data described in this policy under the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR). Company details are on the contact page. Contact for privacy matters: office@orbius.one, subject “Privacy”.
2. What this policy covers
This policy describes the personal data we process when you visit this website, contact us, request a demo or a quote, order licenses, projects or support, or receive support. We do not host customer platforms and do not process the video, viewer or subscriber data that runs through the software we license. If a project ever requires us to process personal data on a customer’s behalf, that is done under a separate data processing agreement.
3. Data we collect and why
3.1 Visiting the website
This website sets no cookies, uses no analytics and loads no third-party resources. Our web server keeps a standard access log (IP address, time, requested page, browser identification) for 14 days, for security and to keep the site running. Legal basis: our legitimate interest in operating a secure website.
3.2 Contacting us
When you email us or use a form on this site (which opens an email in your own mail client), we receive what you send: typically name, company, email address, country and the content of the message. We use it to answer you and, for demo and quote requests, to prepare and follow up on the proposal. Legal basis: steps prior to entering into a contract at your request, and our legitimate interest in responding to enquiries.
3.3 Customers and orders
To sell licenses and deliver projects and support we process the details of the customer organisation and of the people we deal with there: names, business email addresses and phone numbers, job roles, order, delivery and invoice details, VAT identification, and the identifiers of licenses registered to the customer. Some of this data is passed to the software vendor to register the license to your organisation. Legal basis: performance of the contract and legal obligations such as accounting, tax and export control.
3.4 Support
When you ask for support you may send us logs, configuration files and screenshots. These can contain IP addresses, host names and user names of your systems and, occasionally, names or email addresses. We use them only to resolve the case, pass them to the vendor only when the case is escalated, and delete them when the case is closed unless you ask us to keep them. Legal basis: performance of the contract.
3.5 Renewal and product notices
We send customers notices about license expiry, security fixes and new versions of software they license. We send other news only with your consent, which you can withdraw at any time. Legal basis: contract for the former, consent for the latter.
4. What we do not do
- We do not sell personal data or share it for anyone else’s marketing.
- We do not profile visitors or customers or make automated decisions with legal effect.
- We do not track you across other websites.
5. Who we share data with
Software vendors, to register licenses and to escalate support cases. Service providers who process data on our instructions: email and document hosting, accounting and invoicing, payment processing, and a ticket system. Each provider is bound by a contract covering data protection. We disclose data to authorities only when the law requires it. A current list of providers is available on request.
6. International transfers
Vendors and providers may be located outside Serbia and the European Economic Area. Transfers are made to countries with an adequate level of protection as recognised by Serbian law or the European Commission, or under standard contractual clauses approved for that purpose.
7. How long we keep data
| Web server logs | 14 days |
|---|---|
| Enquiries without a contract | 12 months after the last message |
| Customer, order and license records | Duration of the relationship, then as long as accounting and tax law requires (10 years under Serbian law) |
| Support material | Until the case is closed, then deleted within 30 days |
| Consent to news | Until withdrawn |
8. Security
Data is stored on systems with access limited to the people who need it, protected by individual accounts with multi-factor authentication and encryption in transit. Support material is kept separately from customer records and deleted on schedule. Access is reviewed regularly.
9. Your rights
You have the right to access the personal data we hold about you, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on it. Write to office@orbius.one with “Privacy” in the subject; we confirm receipt within 3 business days and answer within 30 days. You may also complain to the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia or, if you are in the EU, to your local supervisory authority.
10. Children
Our website and services are for businesses. We do not knowingly collect data from anyone under 16.
11. Changes
We will post any change to this policy here with a new effective date and notify customers of material changes by email.