Legal
Privacy Policy
How we collect, use and protect your personal data, and the rights you have under the EU General Data Protection Regulation (GDPR).
Last updated: 6 November 2026
1. Data controller
The controller responsible for your personal data is ORA Capital. For any privacy matter you can contact:
- Ori Efratie
- Email: o.efratie@oracapital.it
2. Personal data we collect
Data you give us
When you contact us through the contact form or by email, we collect the data you provide: your name, email address, subject and the content of your message, together with any further information you choose to include.
Data collected automatically
When you visit the site, our hosting provider automatically processes certain technical data for security and to deliver the site, including your IP address, browser and device type, referring page, and the date and time of your request (server logs).
Cookies & local storage
We use strictly necessary browser storage and, only with your consent, additional cookies. See our Cookie Policy and section 9 below.
3. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Respond to your enquiry and any follow-up | Name, email, message | Your consent and/or steps taken at your request prior to entering a contract — Art. 6(1)(a)/(b) |
| Operate, secure and maintain the website | Server logs, IP, technical data | Our legitimate interest in a secure, functioning site — Art. 6(1)(f) |
| Remember your cookie & accessibility choices | Local storage preferences | Our legitimate interest / necessary for a service you requested — Art. 6(1)(f) |
| Measure site usage (analytics), if enabled | Usage data | Your consent — Art. 6(1)(a). Not active unless you opt in. |
| Comply with legal obligations | As required | Legal obligation — Art. 6(1)(c) |
Providing your data on the contact form is voluntary, but without the name, email and message we cannot respond to your enquiry.
4. How long we keep your data
- Contact enquiries: kept only for as long as necessary to handle your request and for a reasonable period afterwards, unless a longer period is required by law.
- Server logs: retained by our hosting provider for a limited period for security and diagnostics.
- Consent records: your cookie choice is stored in your browser for about 6 months, after which we ask again.
5. Who we share your data with
We do not sell your personal data. We share it only with service providers acting as our data processors, and only as necessary:
- Netlify — website hosting and form handling (see international transfers below).
- Microsoft 365 — email services used to receive and reply to your messages.
We may also disclose data where required by law or to protect our legal rights.
6. International data transfers
Some of our providers (such as Netlify) may process data outside the European Economic Area, including in the United States. Where this happens, transfers are protected by appropriate safeguards under the GDPR, such as the European Commission's Standard Contractual Clauses and/or the provider's certification under the EU–US Data Privacy Framework. You can request more information using the contact details below.
7. Your rights
Under the GDPR you have the right to:
- access your personal data (Art. 15);
- have inaccurate data corrected (Art. 16);
- have your data erased (Art. 17);
- restrict processing (Art. 18);
- data portability (Art. 20);
- object to processing based on legitimate interest (Art. 21);
- withdraw consent at any time, without affecting prior processing (Art. 7(3)).
To exercise any of these rights, email o.efratie@oracapital.it. We will respond within one month.
8. Security
The site is served over encrypted HTTPS connections, and we apply appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access.
9. Cookies
We use only strictly necessary browser storage by default. Any analytics or marketing cookies are used solely with your prior consent, which you can give, refuse or withdraw at any time via the cookie widget on the site. Full details are in our Cookie Policy.
10. Children
This website is intended for a professional audience and is not directed at children. We do not knowingly collect data relating to minors.
11. Changes to this policy
We may update this policy from time to time. The current version is always available on this page, with the date of the latest revision shown above.
12. Contact and complaints
For any question about this policy or your data, contact us at o.efratie@oracapital.it.
You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the data protection authority in your country of residence.