Privacy notice for this website
Applies to the website orliea.app only. The Orliea app has its own privacy policy.
1. Controller
Orliea UG (haftungsbeschränkt), Germany. Email: [email protected]. Further details in the legal notice.
2. Visiting the site
This site is served by Cloudflare Pages (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, with data centres in Europe). To deliver the page and protect it from abuse, Cloudflare processes technical connection data such as your IP address, the time of the request, the page requested and your browser type. Legal basis: Art. 6(1)(f) GDPR, our legitimate interest in running a secure website. Cloudflare acts as our processor; transfers to the USA rest on the EU standard contractual clauses and the EU-US Data Privacy Framework.
This site sets no cookies, uses no analytics or tracking services and carries no advertising. Fonts are loaded from Google Fonts (Google Ireland Limited), which receives your IP address when the font files are requested. Legal basis: Art. 6(1)(f) GDPR.
When you open the waitlist form, the site asks Cloudflare which country your connection comes from and uses the answer only to pre-fill the country box. You can change it. The guess is not stored and is not sent anywhere else. Legal basis: Art. 6(1)(f) GDPR.
3. Launch waitlist
If you join the waitlist, we store your first name, email address and country, whether that country is one Orliea is launching in, the time and wording of your consent, the page you signed up from and your browser string. You first receive a confirmation email; only clicking the link in it completes the sign-up (double opt-in), and we record the time of that confirmation as proof of consent.
Purpose: a single email when the Orliea app launches, or, if you asked us to add your country, a single email if that happens. Country requests also tell us where to expand next. Legal basis: your consent, Art. 6(1)(a) GDPR. You can withdraw it at any time via the unsubscribe link in every email or by writing to [email protected]; withdrawal applies from then on.
Storage: a database hosted by Supabase Pte. Ltd in Ireland (AWS eu-west-1). Emails are sent through Resend (Plus Five Five, Inc., a US company; the mail path we use runs through a data centre in Ireland, and the transfer is covered by the EU standard contractual clauses). Both act as our processors under contract.
Retention: until you withdraw, and at the latest 30 days after the launch email. Unconfirmed sign-ups are deleted after 60 days. If you signed up from the United States and have not confirmed after three days, we send one reminder.
4. Contacting us by email
If you write to [email protected], we process what you send us in order to answer you (Art. 6(1)(b) or (f) GDPR). Messages are held in a Google mailbox (Google Workspace, Google Cloud EMEA Limited).
5. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection (Art. 21). You may also complain to a data protection authority. The authority responsible for us is the Bavarian Data Protection Authority (Bayerisches Landesamt für Datenschutzaufsicht, BayLDA), Promenade 18, 91522 Ansbach, Germany.
Last updated 16 October 2026
Orliea UG (haftungsbeschränkt), Ammerlander Hauptstr. 5, 82541 Münsing, Germany