Last updated: 2026-10-08
Draft — legal review pending
Privacy policy
This privacy policy explains how Orvium Development & Solutions ("Orvium", "we") handles personal data when you visit https://www.orvium.eu, contact us, book a call or apply to join our talent pool.
Who we are
Orvium Development & Solutions LLC, registered under number [registration], with its headquarters at Marasi Drive, Business Bay, Ubora Tower, Dubai, United Arab Emirates. Our engineering and delivery teams are based in Morocco, and we work for clients in Europe, the GCC and the United States. You can reach us about privacy at contact@orvium.eu.
What we process and why
Visiting the website
- Technical data (IP address, browser, pages requested) in server logs, to run and secure the site. Basis: legitimate interest.
- Analytics with Google Analytics 4, only if you accept analytics cookies. IP addresses are anonymised. Basis: consent.
- Company recognition with Leadsy, only if you accept marketing cookies, to see which companies visit us and follow up relevantly. Basis: consent.
Booking a call and the model finder
When you book a call, Cal.com processes your name, email address and any notes. If you used the model finder, your answers are added to the booking notes so we can prepare. Basis: steps at your request before a possible agreement.
Contact and clients
Name, company, contact details and correspondence, to answer questions, make proposals and deliver our services. Basis: (pre-)contractual necessity and legitimate interest.
Applying to our talent pool
When you apply via the website we process the details you enter (name, contact details, role, experience, skills, languages, availability, preferences, language levels and, if you add one, your photo) and your CV. Your CV is processed automatically, including by an AI model of an external AI service provider, to extract skills and experience and add them to your profile. We use your profile to match you with projects and may share a profile with a client when there is a match. Basis: your consent, which you can withdraw at any time. If you send us your CV in another way, for example by email or through a job platform such as Indeed or LinkedIn, we add it to the talent pool in the same way, based on our legitimate interest in matching candidates who contacted us with suitable projects; you can object at any time.
Who receives data
We use the following service providers, who process data on our behalf:
| Provider | Purpose | Location |
|---|---|---|
| DigitalOcean, LLC (data centre in New York, United States) | Hosting of the website and our talent database (Baserow, self-hosted) | United States |
| Google (Google Analytics) | Website statistics, with consent | EU / United States |
| Leadsy | Company recognition, with consent | — |
| Cal.com | Scheduling calls | EU (cal.eu) |
| AI service provider | Automatic CV extraction | Outside the EEA |
Some providers are located outside the European Economic Area and Morocco. Where required, we rely on appropriate safeguards such as standard contractual clauses, and we only share what is needed for the purpose. We do not sell personal data.
When we propose a candidate to a client, we share the profile needed for that proposal.
How long we keep data
- Server logs: up to 90 days.
- Analytics data: according to the retention set in Google Analytics (maximum 14 months).
- Client and prospect data: as long as needed for the relationship and legal obligations (e.g. tax records).
- Talent pool profiles and CVs: up to 2 years after your last contact with us, unless you ask us to delete them earlier.
Your rights
You can ask for access to, correction or deletion of your data, ask us to restrict or stop processing, request a copy of your data (portability) and withdraw consent at any time. Email contact@orvium.eu. You also have the right to file a complaint with a data protection authority, such as the UAE Data Office, the CNDP in Morocco or the authority in the EU country where you live (in the Netherlands: the Autoriteit Persoonsgegevens).
Security
We protect data with access controls, encrypted connections (HTTPS) and by limiting access to the people who need it.
Changes
We may update this policy. The date at the top shows the latest version.