PRIVACY POLICY

We care about your privacy.

We are ORAIN TECHNOLOGIES S.L., a platform that enables friendly, dynamic, and intuitive interaction between people and machines.

We protect your personal information using industry standard techniques, and we will always keep you informed when significant changes are made to this Privacy Policy.

Your trust is our primary concern, and therefore we protect your personal information and will only provide it to third parties: (1) with your consent; (2) when necessary to process your instructions; (3) when required by law, a subpoena, or other legal process.

This Privacy Policy applies to https://www.orain.io, the ORAIN mobile application, and all other ORAIN websites, applications, developer platforms and other products and services (hereafter and collectively referred to as the "Platform"). We may modify this Privacy Policy from time to time, and if we make significant changes, we will notify you so that you can review the changes before continuing to use our services. Your continued use of our Services after we post or communicate any modifications to this Privacy Policy will be considered as your acceptance of those changes. If you do not agree with any of the changes, you may close your account, if you have created one, by sending a written request to [email protected]

1. Right of information

ORAIN TECHNOLOGIES, S.L., with its registered office at Carretera de Molins 79A, Nave 3, Postal Code 08191 - Rubí (Barcelona) and CIF: B-66.611.773 (hereinafter referred to as "ORAIN"), guarantees Internet users who access the website https://www.orain.io (hereinafter, the "Users" or, in singular, the "User") that the data they provide through this website will be processed in strict compliance with the Organic Law 15/1999, of December 13, on Protection of Personal Data; the Royal Decree 1720/2007, of December 21, approving the Regulation of development of the aforementioned Organic Law; the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC and the implementing regulations and other correlative regulations applicable and in force at any given time.

To this end, ORAIN informs Users about the procedure followed by ORAIN to collect their personal data and the purposes for which it will be used.

2. Information we collect

ORAIN obtains Users' personal data through the following means:

  • Requesting information or contact through the Contact Form or chat at https://www.orain.io/.
  • Searching through the Platform https://www.orain.io/, for the use of the services offered through the Platform;
  • Account registration via the registration form through the Platform and/or the app for the use of the services offered through the Platform;
  • Cookies only for https://www.orain.io/.

3. User's Personal Data Utilization

ORAIN informs the Users to whom it applies, that the personal data they provide to us will be treated under the responsibility of Orain, and will be used for the following purposes:

  • To carry out the registration on the Platform and the provision of our services, in accordance with the General Conditions that are established between ORAIN and each of the Users;
  • To allow access to the options that require registration (e.g. User Profile), in which case the User must comply with the particular conditions established in each case;
  • To respond to inquiries or requests for information that may be made by Users;
  • In the event that the User has checked the corresponding box for this purpose, keep you informed by sending notifications through email and/or other electronic means, the content of which will mainly deal with our services, activities, projects, updates and new features of the Platform, problem solving, inactivity or low use, error detection and prevention, or in general to comply with the General Conditions of the Platform.
  • Likewise, we inform you that, if you activate the geolocation system of your terminal, ORAIN will process the data obtained through the same to inform the User of the vending machines and Companies that are nearby.
  • Send Push notifications from both ORAIN and the companies that own the self-service machines about promotions, exclusively through the Platform environment.
  • To allow access to the environment enabled for testing our platform, through the registration form to access the demo and according to the conditions specified therein.

The User guarantees the authenticity, truthfulness and accuracy of all data provided through the Platform, keeping updated the information provided to ORAIN, so that it always reflects their real situation. The User is solely responsible for any false or inaccurate statements made. Therefore, we request that you immediately inform us at [email protected] of any modification of your data so that the information contained in our files is always up to date and free of errors. If in the future ORAIN wishes to use your data for purposes other than those mentioned above, we will inform you of these new purposes and request your consent.

Certain services provided on the Platform may contain particular conditions of use with provisions on personal data protection, which prevail over this Privacy Policy. In this regard, it is important for the User to bear in mind the following warnings.

ORAIN uses cookies on its website. For more information on this matter, please consult our Cookies Policy.

4. Sharing information with third parties

We will not share personal information of the User and/or posted by them when creating an account, if applicable, unless we have their express consent and we consider in good faith that it is permitted by law or that it is reasonably necessary to disclose it in order to comply with a judicial proceeding, including, among others, subpoenas for a civil or criminal trial, court orders or other mandatory disclosures.

ORAIN will not provide Users' data to third parties, except those that the Users themselves make available to other Users of the Platform.

In this sense, if you expressly authorize it, by ticking the corresponding not pre- marked box enabled for this purpose, your personal data may be communicated to the companies that own the self-service machines (users acting as Companies on the Platform) in order that they can carry out the communication to the User of the loyalty discounts that the Company wishes to offer to recurring segments of consumers.

We may also disclose your personal information to a third party as part of the sale of ORAIN’s assets, a subsidiary or division, or following a change of control of the company or one of its subsidiaries, or in preparation for any of these events. Any third party to whom we transfer or sell our assets will have the right to continue using the personal information and other data provided by the User as stipulated in this Privacy Policy.

Whenever we use the assistance of business partners to collect and/or process Users' personal data, this will be done within the framework of a data processing agreement, which contains the obligation to respect privacy. From the data protection legal perspective, ORAIN will be instituted as the controller (with authority over the processor) and the business partner as the processor.

In this sense, we may hire third-party companies and individuals to provide our services (such as maintenance, analysis, auditing, marketing, and development tasks). Such third parties will have limited access to the User's information only to perform these tasks on our behalf and are obligated to ORAIN not to disclose it or use it for other purposes.

5. Social Media

We have integrated the plugins of the social networks facebook.com (hereinafter referred to as "Facebook"), Instagram.com (hereinafter referred to as "Instagram"), Twitter.com (hereinafter referred to as "Twitter") and Linkedin.com (hereinafter referred to as "Linkedin") into our Internet presence. Facebook and Instagram are companies of Meta Platforms, Inc., 1 Hacker Way Menlo Park, CA 94025 United States. Twitter is a company of Twitter International Company, an Irish company with registered office at One Cumberland Place, Fenian Street Dublin 2, D02 AX07, Ireland. Linkedin is a company of Linkedin Ireland Unlimited Company with registered office at 77 Sir John Rogerson's Quay, Dublin, 2, Ireland.

Each time a query is made to one of the web pages that forms part of our Internet presence and that has one of these plugins, the plugin requests your web browser to load and display the plugin’s image from the Facebook, Instagram and Twitter server. At that point, it communicates to such servers which page of our Internet presence you are visiting. If you are a member of such social networks and are logged in while visiting one of our pages, the social networks recognize the information sent by the plugin about the specific page you are visiting and assign it to your personal social network account. If you activate one of the plugins, for example by clicking on a "Like" button or posting a comment, this information is sent to your personal Facebook user account and stored there. In addition, the information that you have visited one of our pages is sent to Facebook regardless of whether you activate one of the plugins or not.

To prevent your data and your behaviour from being transmitted to social networks and stored by these companies, you must log out before visiting one of our pages. The privacy statements of Facebook, Instagram and Twitter provide you with more detailed information on the collection and use of your data by Facebook, Instagram and Twitter, the rights you have over your data and the setting options for protecting your privacy.

6. Legal basis for data collection and User consent

We process your personal data based on your express consent granted through our Platform. In any case, where the processing of your personal data is based on your consent, you have the right to revoke such consent at any time, without affecting the lawfulness of this processing prior to the withdrawal of consent.

The submission of personal data or other information, using electronic forms enabled by ORAIN on the Platform or email messages or content provided by the User through the Platform, implies the express consent of the sender to the processing of the data included in the indicated means of communication. The User's acceptance for his or her data to be processed for the purposes referred to in the "User's Personal Data Utilization" section of this Privacy Policy is always revocable, without retroactive effects, in accordance with current legislation.

In any case, based on legitimate interest and in order to provide a better service, we may transfer your personal data (avatar and public profile features on the Platform and those authorized by the User) so that they can interact with Users for the management of issues and User support.

The User guarantees that the personal data provided to ORAIN are truthful and is responsible for informing ORAIN of any changes to it.

7. Rights of access, rectification, cancellation, and opposition

The User may exercise his or her rights of access, rectification, cancellation and opposition, as well as limitation of processing, data portability and the right not to be subject to automated decisions, under the terms and conditions provided in the applicable regulations. The User may exercise these rights by proving his/her identity and contacting ORAIN TECHNOLOGIES, S.L., with address at Carretera de Molins 79A, Nave 3, Postal Code 08191 - Rubí (Barcelona) or at the following e-mail address: [email protected].

When the User exercises his/her cancellation rights, all personal data linked to his/her account, as well as the information and contents included in his/her profile will be cancelled. Likewise, if the User exercises the right to cancel the data necessary for ORAIN to provide the services of the Platform, ORAIN will be obliged to terminate its relationship with the User, proceeding to unregister the User, with no right for the User to make any claim.

8. Security

ORAIN maintains the security levels of data protection required by Royal Decree 1720/2007, of December 21, which approves the Regulation of development of the LOPD and other correlative regulations applicable and in force at any given time. It has established all the technical means at its disposal to prevent loss, misuse, alteration, unauthorized access and theft of the data provided by the User through the Platform.

In any case, ORAIN will take appropriate technical and organizational measures, both when designing the data processing system and at the time of the processing itself, to preserve security and prevent unauthorized processing. However, despite the diligent implementation of such measures, the User should be aware that Internet security measures are not impregnable.

9. Special category of personal data

We will not collect or process any especially sensitive personal data or data included in the special category of personal data from Users unless they have explicitly provided it to us. Special categories of personal data refer to information relating to race or ethnic origin, political opinions, religious or philosophical beliefs or other beliefs of a similar nature, trade union membership, genetic data, biometric data for the exclusive purposes of identifying an individual, health data, sex life or sexual orientation.

10. Marketing directo

We will not use Users' personal data for direct marketing purposes without their express prior consent.

If at any time you decide to stop receiving commercial or promotional information from ORAIN, you may, free of charge and without having to provide a justification, unsubscribe from direct marketing campaigns and object to the future processing of your personal data for such purposes by sending us an email to [email protected] or by clicking on the "opt-out" in the subject line of the email. You may also use the unsubscribe procedure provided in any promotional message you receive from ORAIN.

Please note that unsubscribing from receiving promotional messages will not exclude you from receiving information related to any Contract you may have made with Us.

11. Automated Decision Making

We will not use automated decision-making processes, including profiling, unless you have explicitly authorized us to do so. In that case, we'll provide details on the logic behind the decision, and the meaning and intended impact of such processing for you.

12. Duration of data storage.

The deletion of Users' personal data occurs when such data is no longer necessary for the fulfilment of the purpose for which the storage was intended, or when such storage is prohibited by current provisions. In this regard, we will retain your personal data only as long as necessary for the purposes described above or as required by applicable laws.

In any case, the deletion of Users' personal data takes place if there is no opposing legal obligation to retain it and if the User requests it. The User has the possibility to delete his/her account or unsubscribe from the newsletter.

13. Minors on the Website

This website is not designed for or directed at children under the age of sixteen (16), without parental or legal representative’s consent. In this regard, we do not knowingly collect information from such individuals. In any case, if parents or legal representatives believe that their children have submitted personal information to us without their consent, please contact us at [email protected].

14. How can you file a complaint with the Spanish Data Protection Agency?

You can file a complaint with the Spanish Data Protection Agency through the following link

15. How can you contact the FDJ Data Protection Officer?

If you wish to contact our Amgen Data Protection Officer (DPO), you may do so through the email address [email protected] or at Carretera de Molins 79A, Nave 3, Postal Code 08191 - Rubí (Barcelona).

16. Modification and completeness of this Privacy Policy.

ORAIN reserves the right to modify the present policy to adapt it to future legislative or jurisprudential developments, as well as to future uses that it plans to make of the personal data of the Users of the Platform. In any case, it will previously inform Users of changes that occur in this policy. Therefore, it is recommended that the Users proceed to read the Privacy Policy of the Platform each time they access it.

In case that any clause of this Privacy Policy is annulled or deemed null, the rest of the conditions will not be affected, retaining their full validity and effectiveness, in accordance with the current regulations in force at any given time.

If you wish to make any suggestion or comment in relation to our Personal Data Protection Policy, you may contact ORAIN, at Carretera de Molins 79A, Nave 3, Postal Code 08191 - Rubí (Barcelona) or at the following e-mail address: [email protected]

Text updated in July 2023.