Privacy Notice
This notice explains, pursuant to Article 13 GDPR, how your personal data is processed when you complete and submit the membership inquiry form.
01Controller
The controller responsible for processing your personal data within the meaning of the GDPR is the natural person operating ORIÉZID:
Matondo Nyangi
talkto@oriezid.world
Jupiterstrasse 7, 3015 Bern, Switzerland
02Data Protection Officer
No data protection officer has been appointed, as there is no legal obligation to do so under Article 37 GDPR. For any data protection matters, please contact the controller named above directly.
03What data we process
When you submit the inquiry form, we process the data you enter:
- First and last name
- City and country
- Email address
- Phone / WhatsApp number (stored in international E.164 format)
- The name of the person who referred you (if provided)
- Anything you choose to tell us (free text, if provided)
- Your consent (confirmation of the consent checkbox)
To prevent spam and abuse, we additionally process automatically:
- Your browser identifier (User-Agent string)
- Your IP address only in hashed form (SHA-256); the un-hashed IP address is not stored.
04Purposes and legal bases
- Handling your inquiry and contacting you — on the basis of your consent, Article 6(1)(a) GDPR, given by ticking the consent checkbox.
- Spam and abuse prevention, security and operation of the form (browser identifier, hashed IP, rate-limiting) — on the basis of our legitimate interest, Article 6(1)(f) GDPR, in a functional inquiry channel protected against automated abuse.
05Recipients and processors
Your data is treated confidentially. It is disclosed only to the following service providers, engaged as processors under Article 28 GDPR and acting exclusively on our instructions:
- Supabase Inc. — database / hosting of the Postgres database. The project database is operated in the EU region (Frankfurt, Germany); the company is established in the USA.
- Vercel Inc. — web hosting and serverless functions used to serve and process the form. US company.
- Cloudflare, Inc. — bot and spam protection via Cloudflare Turnstile, where activated. US company.
No transfer to other third parties, and no sale of your data, takes place.
06Transfers to third countries
The providers above are US companies, so processing in or access from the USA cannot be ruled out. Appropriate safeguards under Chapter V GDPR are in place:
- Vercel, Inc. is certified under the EU–US Data Privacy Framework (DPF); the transfer relies on the European Commission’s adequacy decision (Article 45 GDPR).
- Cloudflare, Inc. is certified under the DPF; the transfer relies on the same adequacy decision (Article 45 GDPR).
- Supabase Inc. is, to our knowledge, not DPF-certified; the transfer relies on the Standard Contractual Clauses (Article 46(2)(c) GDPR). The database itself is additionally hosted in the EU (Frankfurt).
A copy of the respective safeguards can be requested from the controller.
07Retention period
We store your inquiry data for as long as necessary to handle your inquiry, plus a subsequent reasonable period for follow-up questions and contact. If your inquiry is rejected or you withdraw consent, your data is deleted or anonymised, unless statutory retention obligations require otherwise. The technical anti-spam data is stored only for the short period required for abuse prevention and deleted thereafter.
08Your rights
Under the GDPR you have the rights to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), objection to processing based on legitimate interest (Art. 21), and to withdraw consent at any time with effect for the future (Art. 7(3)) — the lawfulness of processing carried out before withdrawal remains unaffected. To exercise these rights, an informal message to the controller is sufficient.
09Complaint to a supervisory authority
Without prejudice to any other remedy, you have the right to lodge a complaint with a data protection supervisory authority. If your habitual residence is in the EU, you may contact the supervisory authority of your country of residence.
10Whether provision is required
Providing your data is neither legally nor contractually required, and you are under no obligation to complete the form. However, we need certain details — in particular your name and a means of contact — together with your consent in order to handle your inquiry. Without them we cannot process your inquiry; no further disadvantages arise for you.
11No automated decision-making
No decision based solely on automated processing, including profiling, within the meaning of Article 22 GDPR takes place. Your inquiry is handled by a human.
Last updated June 2026.
Legal Notice
Provider information pursuant to applicable EU e-commerce and media law.
01Provider
Matondo Nyangi
Jupiterstrasse 7
3015 Bern
Switzerland
02Contact
Email: talkto@oriezid.world
03Responsible for content
Matondo Nyangi, at the address stated above.
04VAT / register
Operated by a private individual — no VAT registration and no commercial-register entry.
05EU online dispute resolution
The European Commission provides a platform for online dispute resolution (ODR): ec.europa.eu/consumers/odr. We are neither obliged nor willing to participate in dispute-resolution proceedings before a consumer arbitration board.
06Liability for content and links
As a service provider we are responsible for our own content on these pages under general law. We are not obliged to monitor transmitted or stored third-party information. This site may contain links to external websites over whose content we have no influence; responsibility for that content lies with its respective provider. Unlawful content will be removed promptly once it becomes known to us.
07Copyright
The content and works on these pages are protected by copyright. Reproduction, adaptation, distribution or any form of exploitation beyond the limits of copyright require the prior written consent of the respective author.
Last updated June 2026.
ORIÉZID
Membership