ORYS Group attaches the greatest importance to protecting the personal data of the people who use its website and contact its teams. This policy explains, in clear terms, what data we process, why, on what legal basis, for how long, and what rights you have. It applies to the website accessible at https://orysgroup.com.
Data controller
The data controller for the processing described here is ORYS Group, registered under trade register (RCCM) no. TG-LFW-01-2021-B12-01406 and tax identification number (NIF) 1001767215, whose registered office is at [Address]. For any question relating to your personal data, you can contact us at contact@orysgroup.com.
What data we collect
We only collect the data you provide to us or that is strictly necessary for the website to work. Depending on your interactions, this may include:
- Contact form data: first name, last name, email address, telephone number, company name and the content of your message.
- Careers / application data: the information contained in your application, including your CV and any documents you choose to attach.
- Technical data: connection logs and, subject to your consent, anonymous audience-measurement data.
We never ask for sensitive data, and we invite you not to include any in your messages.
Purposes and legal bases
Each processing activity has a defined purpose and a legal basis under the GDPR:
- Responding to your requests and managing our business relationship — legal basis: our legitimate interest in replying to you, or the pre-contractual steps taken at your request.
- Processing job applications — legal basis: the steps taken at your request prior to a possible employment relationship.
- Measuring website audience — legal basis: your consent, which you can withdraw at any time.
- Ensuring the security and proper functioning of the website — legal basis: our legitimate interest.
How long we keep your data
We keep your data only for as long as necessary for the purposes above:
- Contact requests: [e.g. 3 years] from our last contact.
- Applications: [e.g. 2 years] after the last exchange, unless you ask us to delete them sooner.
- Audience-measurement data: for the period allowed by the applicable regulation.
Who has access to your data
Your data is intended solely for the authorised staff of ORYS Group in charge of handling your request. It may be shared with our technical service providers (hosting, tools) acting as processors under contract and on our instructions. We do not sell your data and do not share it with third parties for their own marketing purposes. Where any transfer outside the European Economic Area is necessary, we ensure appropriate safeguards are in place.
Your rights
In accordance with the GDPR, you have the following rights over your personal data:
- the right of access to your data;
- the right to rectification of inaccurate or incomplete data;
- the right to erasure ("right to be forgotten");
- the right to restriction of processing;
- the right to object to processing based on legitimate interest;
- the right to data portability;
- the right to withdraw your consent at any time, where processing is based on consent;
- the right to define guidance on the fate of your data after your death.
You may exercise these rights by writing to contact@orysgroup.com. If, after contacting us, you consider that your rights have not been respected, you may lodge a complaint with the Instance de protection des données à caractère personnel (IPDCP), the Togolese supervisory authority. If you are resident in the European Union and the GDPR applies to the processing concerned, you may also lodge a complaint with the supervisory authority of your country of residence.
Data protection officer
For any question relating to the protection of your data, you can contact our data protection officer at [DPO contact].
Cookies
The website uses cookies that are strictly necessary for it to function, which do not require your consent. Subject to your prior consent, we may also use anonymous audience-measurement cookies to improve our content. You can accept or decline these cookies at any time through the banner displayed on your first visit, and change your choice thereafter. Declining non-essential cookies does not affect your ability to browse the website.
Security
We implement appropriate technical and organisational measures to protect your data against loss, unauthorised access, disclosure or alteration. As a company whose expertise includes cybersecurity, we hold ourselves to the same standards we recommend to our clients.
Changes to this policy
We may update this policy to reflect legal or operational changes. The current version is always the one published on this page.
Last updated: [date].