LEGAL · UPD. 2026-05-18

Privacy Policy

GDPR (EU 2016/679) and LOPDGDD (Spanish OL 3/2018) compliant. Version 4.2 · Effective date: 18 May 2026.

§ 1

Data controller

Orquiva Software S.L., tax ID B-12345678, registered office at Calle Pintor Maldonado 7, 18004 Granada, Spain. Listed in the Granada Commercial Registry. Designated DPO: [email protected].

§ 2

Personal data we collect

In your admin account: name, email, company, team size, hashed password (Argon2id). In the employees you upload: identification, tax, banking, contract and professional data under GDPR art. 6.

§ 3

Purpose of processing

Delivery of the HRIS service contracted by your organisation. We do not train AI models on your data. We do not sell it. We do not use it for purposes other than the service.

§ 4

Legal basis

Performance of the contract (GDPR art. 6.1.b) between your organisation and Orquiva. Your employees entrust us with their data via your platform, and that processing is done on your behalf (GDPR art. 28).

§ 5

Processors (sub-processors)

AWS Frankfurt (hosting), Stripe (payments), SendGrid (email), Cloudflare (CDN/WAF). Public list at orquiva.com/subprocessors. We notify any additions 30 days in advance.

§ 6

International transfers

Your data is stored in AWS Frankfurt (eu-central-1). No transfers outside the European Economic Area take place.

§ 7

Retention

We keep your data while your subscription is active. On termination, we return or destroy data within 30 days (90 days in backups).

§ 8

Your rights

Access, rectification, erasure (right to be forgotten), objection, restriction, portability and not to be subject to automated decisions. Exercise them at [email protected] with a copy of your ID. Complaint to AEPD: aepd.es

§ 9

Cookies

We use essential cookies (session, CSRF, locale) and optional ones (analytics). See our Cookie Policy for details.

§ 10

Policy changes

If we change this policy, we will notify you by email 30 days in advance. The current version is always published at this URL.

§ 11

DPO contact

For any question about how we process your data, write to [email protected].