Privacy Policy
Last updated: 13 September 2026
Who is responsible for your data?
VIDURTA, a French SAS registered under SIREN 902 141 399, with its registered office at 59 rue Charlot, 75003 Paris, France, is the controller for personal data collected through Orneli.com.
For privacy questions, to exercise your rights or to withdraw a subscription, email orneli@vidurta.com, use the contact form, or write to VIDURTA — Orneli at the address above.
Contact enquiries
When you send a message, we collect your name, email address and message, together with the form language, the suggested or selected Amazon marketplace where available, the privacy-policy version and submission time. Name, email and message are required for the form to be processed. Please do not include payment-card details, identity documents or other sensitive information.
We use this information to understand and answer your enquiry and keep the necessary correspondence. Our legal basis is our legitimate interest in responding to people who contact Orneli (Article 6(1)(f) GDPR). If your enquiry concerns an existing purchase or a step you request before a purchase, the relevant processing may instead be necessary for that contract or request (Article 6(1)(b)). Sending a message does not subscribe you to marketing.
Collection news and private offers
When you subscribe, we collect your email address, the form language, the suggested or selected Amazon marketplace where available, submission time, the privacy-policy version, and the wording and record of your consent. Your email and a separate, unchecked consent box are required to subscribe; subscribing is optional and is not required to browse or contact us.
Your consent (Article 6(1)(a) GDPR) allows VIDURTA to keep you informed about Orneli collections, previews and occasional private offers. You can withdraw it at any time using the unsubscribe option in any marketing email, the contact form or the email address above. Withdrawal does not affect processing that was lawful before it. We do not currently promise a regular newsletter or send an automated welcome email from this website.
Hosting, form delivery and spam prevention
Netlify hosts the site and processes form submissions for us through Netlify Forms. It may process connection information such as your IP address, browser information, requested pages, request time and submission details to deliver the website and protect it from abuse. Forms include a hidden honeypot field. Netlify also uses Akismet for spam filtering; submission information may be assessed by that service.
This processing is based on our legitimate interest in operating a reliable and secure website and preventing unsolicited or fraudulent messages (Article 6(1)(f) GDPR). The forms do not include a CAPTCHA. Optional Google Analytics is separate from form processing and is described below. Anti-spam classification does not constitute a decision producing legal or similarly significant effects about you. We do not use this website for advertising profiling.
Who receives information, and where?
Access is limited to authorised VIDURTA personnel and service providers that need the data for hosting, form processing, spam prevention, email delivery or correspondence. These include Netlify, Inc. and the providers it uses for those services, including Akismet (Automattic). Form notifications and replies also pass through VIDURTA’s professional email service providers. We do not sell your personal information or provide your subscription to other brands for their marketing.
Netlify and its infrastructure or service providers may process data outside the European Economic Area, including in the United States. Its data-processing agreement is incorporated into its service terms. For covered US transfers it provides for the EU–US Data Privacy Framework, with the European Commission’s standard contractual clauses as the fallback where that framework does not apply. See Netlify’s Data Processing Agreement, Netlify’s public Data Privacy Framework record and its subprocessor list. You can ask VIDURTA for information or a copy of the safeguards relevant to your data.
If you allow analytics, Google processes usage data for VIDURTA under its data-processing terms. Google’s service providers and affiliates may process this data outside the European Economic Area, including in the United States. Google describes its applicable transfer mechanisms, including the EU–US Data Privacy Framework where applicable and standard contractual clauses, in its international-transfer information. You can ask VIDURTA about the safeguards relevant to your data. These analytics disclosures do not authorise Google advertising or the sharing of your form contents.
How long we keep information
Contact enquiries and related correspondence: for the time needed to handle the request, then no more than 24 months after the last exchange, unless specific information is required for a legal obligation or a dispute.
Subscriptions: until you withdraw, or for no more than three years after subscription or your last active contact with us, whichever comes first. Merely sending you an email does not restart this period. A limited record of consent or objection may be kept separately for three years after removal, solely to document compliance and avoid unwanted re-contact, not to continue marketing.
Legal or dispute records: only the information needed, with restricted access, for the applicable statutory retention or limitation period. Compliance records rely on the relevant legal obligation (Article 6(1)(c)) or our legitimate interest in establishing or defending legal claims (Article 6(1)(f)), as appropriate.
Browser preferences: 180 days, as explained below. Infrastructure logs: for the provider’s operational, incident-investigation and applicable legal retention periods. Netlify’s published data-processing agreement describes online security-log retention of 90 days and offline retention of one year; these are provider-managed logs, not an Orneli advertising history. These retention rules also apply to copies of forms that we keep in our correspondence or exports.
Analytics: our retention policy for user-level and event-level Analytics data is two months, without resetting that period for new activity. This setting does not automatically delete aggregated statistical reports. Analytics cookies are configured for a maximum of 180 days without renewal on every visit, and are removed from this site when you withdraw consent. A browser record of your analytics choice is kept for 180 days; refusal is remembered for the same period as acceptance.
Cookies, preferences and optional analytics
Local storage remembers the language and Amazon store you select, as well as your cookie choice. These entries expire after 180 days and expired entries are removed when the site next runs. Remembering a browser or cookie preference is not consent to email marketing.
Only after you allow analytics, VIDURTA uses Google Analytics 4 (measurement ID G-NDSG05WH12) to understand traffic sources, pages viewed, general device and browser information, approximate location, clicks to Amazon and successful form submissions. Analytics uses pseudonymous browser identifiers; it is not a promise of complete anonymity. Google receives technical connection information when its service loads. Our custom events contain only fixed labels such as website language, Amazon marketplace and the type of interaction—not names, email addresses, messages or other form contents. Analytics page URLs omit query strings and fragments; only restricted campaign labels are retained for attribution.
This optional processing relies on consent (Article 6(1)(a) GDPR). No Google Analytics script or measurement request is loaded by this site before acceptance or after refusal. Advertising storage, advertising user data, advertising personalisation and Google Signals are disabled in the website tag. Contact forms, subscriptions and Amazon links work without analytics.
Use “Cookie settings” in the footer to accept, refuse or withdraw consent at any time. Withdrawal stops further collection and removes this site’s Analytics cookies; the page may refresh to fully unload the tag. It does not automatically erase data already processed lawfully; contact us to exercise your rights. Earlier acknowledgement of our essentials-only cookie notice is not treated as analytics consent. See our Cookie Policy and Google’s partner-site information.
Your data-protection rights
Subject to the conditions in applicable law, you can request access to, correction or erasure of your data, restriction of processing and portability of data processed by automated means on the basis of consent or a contract. You may object to processing based on legitimate interests and object to direct marketing at any time. You may also give instructions concerning your data after your death under French law.
Contact VIDURTA using the details above. We may request proportionate information to verify your identity where necessary; please do not send identity documents unless requested. We normally respond within one month. Where the law permits an extension for a complex request, we will explain it within that first month. You may complain to the CNIL or another competent data-protection authority, without having to contact us first.
When you leave for Amazon
Amazon links open the selected marketplace. Amazon and the seller identified there provide the privacy information applicable to browsing and purchasing on that marketplace. Orneli.com does not collect your payment-card information or delivery address, and clicking a product link does not send your contact form or subscriber information to Amazon. This policy covers this website, not Amazon’s separate services.
Changes to this policy
We will update this policy when the website or its data use changes. Where a new use requires consent, it will not start without the required choice. The date at the top identifies the current version.