The following provides information on the collection and processing of personal data when using the website https://orior.ch (hereinafter "website").

The website https://orior.ch is operated by us, ORIOR AG, Zollstrasse 62, 8005 Zurich, Switzerland (hereinafter "ORIOR" or "we").

When you contact ORIOR, whether by using this website or via email or telephone, personal data is usually collected. This includes information that you provide to us via the contact form, such as your name or email address. However, personal data also includes purely technical data, such as an IP address, which is automatically collected when you visit our website.

This Privacy Policy covers both our online and offline data collection activities, including personal data that we collect through our various channels such as websites, third-party social networks, and points of sale.

The Privacy Policy explains how we process personal data that we collect in the context of our relationship with you and how you can exercise your rights. We comply with the Swiss Federal Act on Data Protection (FADP) and other applicable data protection regulations.

Please note that this website is intended for adults only and not for children under 16 years of age. We do not knowingly collect personal data from individuals under 16 years of age through this website. However, ORIOR may collect personal data from children and young people under 16 years of age directly from the parent or legal guardian with their express consent.

If you do not provide us with the personal data necessary for contacting you or other desired interactions, we may not be able to process your request or provide you with certain functions of our website.

I. Collection and Purposes of Personal Data Processing

1. Visiting our Website

You can access our website without providing any personal information. When you visit our website, we only collect information that your browser automatically transmits to our server (so-called log files). These log files may contain information such as:

• IP address of your device
• Date and time of the request
• Time zone difference to Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request originates
• Browser
• Operating system and its interface
• Language and version of the browser software

This data is processed in our legitimate interest to enable the use of our website (establishing a connection), to continuously ensure system security and stability, to resolve technical problems, to ward off attacks on the infrastructure, to carry out analyses in the event of hacking attacks, and to generate visitor statistics. After your visit to our website, we store your log files for the aforementioned purposes for a maximum duration of 30 days.

2. Contact Form

You have the option to contact us via our website using the contact form or via email or telephone. In this case, the information you provide will be processed for correspondence with you and for the purpose of processing and handling your request. The legal basis for this is our legitimate interest in providing and using a modern information medium to best meet your inquiries.

If you contact us online via the contact form, you must provide your first and last name, your email address and telephone number, and describe your request; providing the name of the company you belong to is optional. If you write to us by email or call us by phone, we will process your email address and telephone number as well as other information you provide.

3. Technical Provision of the Website via Shopify

Our website is operated on the Shopify platform. In the context of the technical provision and operation of the website, personal data may be processed, in particular technical usage data such as IP address, device information, browser information, and usage and log data.

This processing serves the purpose of secure and stable provision of the website, technical administration, error analysis, and ensuring system security.

Insofar as Shopify processes personal data on our behalf, we have concluded appropriate contractual agreements with the provider.

4. Personal Data of Job Applicants

If you wish to apply online to ORIOR, you must first create a user account by entering your first and last name, email address, and place of residence. In connection with job applications, we may then process your resume, including application photo and cover letter, if you provide us with these documents, and manage your account. For the processing of your employment contract, we will request additional data, such as your AHV number and bank details.

We process this data with your consent and, if applicable, to take pre-contractual measures. For certain data processing, we require your express consent, for example, to obtain information from third parties or to keep your application documents in our talent pool. You can revoke your consent at any time.

In the event of a successful application, we store your personal data for as long as the employment relationship continues and beyond, if legally required (usually no longer than 10 years). If your application is not successful, we will delete your data within six months, unless a longer retention period has been agreed upon.

5. Marketing, Newsletter, Market Research

Upon your request, we can send you our newsletter via email through the mailXpert service in Switzerland to keep you informed about our products and current offers.

To subscribe, we require information such as your name, email address, and other voluntary information. We process this data based on your consent. You can revoke this at any time.

We may also use your contact details for marketing purposes, provided you have not objected to this. You can object to this at any time.

With your consent, we also use information about your usage behavior for market research and internal analyses. This data is pseudonymized and then anonymized.

II. Data Transfer and Transmission Abroad

We only pass on your data if this is necessary or if we are authorized to do so.

Recipients include, in particular:

• Service providers, especially IT service providers for hosting and operating our website via Shopify, for IT support, for implementing security measures, newsletter, and analytics services
• Authorities and consultants

Most recipients are located in Switzerland or the EU. When transferring data abroad, we ensure appropriate protective measures.

III. Use of Cookies, Analytics Tools, and External Services

Cookies

Our website uses cookies to make its use more user-friendly.

Technically necessary cookies are required for the operation of the website. We only set other cookies with your consent.

You can deactivate cookies at any time in your browser settings.

reCAPTCHA

To protect our website, we use Google reCAPTCHA (Google Ireland Ltd, Dublin).

Technical data such as IP address, browser, and usage data may be processed. This serves the security of our website.

Google Analytics and Google Tag Manager

We use Google Analytics to analyze website usage. Data on usage, interactions, and devices may be processed.

Google Tag Manager serves the technical administration of these tools.

Use only occurs with your consent. You can revoke this at any time.

Data may be transferred to the USA. Despite protective measures, an equivalent level of data protection cannot be guaranteed.

Google Maps

Our website uses Google Maps. Data such as IP address may be processed.

Social Networks

ORIOR is represented on LinkedIn. When used, the provider's data protection provisions apply.

External Links

We assume no responsibility for external websites.

IV. Data Security

We take appropriate technical and organisational measures to protect your data.

V. Retention Period

We store data only as long as necessary or legally required.

VI. Your Rights

You have the following rights, in particular:

• Access
• Rectification
• Erasure
• Restriction
• Withdrawal
• Data portability

You can also lodge a complaint with the data protection authority.

VII. Controller

ORIOR AG
Zollstrasse 62
8005 Zurich
datenschutz@orior.ch

VIII. Amendments

We may amend this Privacy Policy at any time.

Status: April 2026