Cookie Settings
Please allow us to collect data about how you use our website. We will use it to improve our website, make your browsing experience and our business decisions better. Learn more
At Orbit Crestville ("we," "us," or "our"), we are committed to protecting your privacy and safeguarding your personal and financial data. This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our website, mobile applications, and digital banking services (collectively, the "Services").
By accessing or using our Services, you agree to the collection and use of information in accordance with this policy.
For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, the data controller is:
Orbit Crestville
DC Tower 1, Donau-City-Straße 7
1220 Vienna, Austria
Email: privacy@orbitcrestville.com
To provide you with secure, efficient, and regulatory-compliant digital banking services, we collect several types of information:
Identity Data: Full name, date of birth, gender, and nationality.
Contact Data: Email address, phone number, and physical billing/residential address.
Verification Data: Government-issued identification (passport, national ID, driver's license), tax identification numbers, and selfie photos or videos for identity verification (KYC).
Financial Data: Bank account details, payment card numbers, and source of funds.
Technical Data: IP address, device type, operating system, browser type, and unique device identifiers.
Transaction Data: Details about payments to and from your account, including amounts, timestamps, merchant details, and recipient information.
Usage Data: Information about how you interact with our website, app, and services.
Location Data: Real-time geographic location coordinates (with your explicit permission) to prevent fraudulent transactions.
We process your personal data under the following legal bases:
To Perform Our Contract With You: To open and manage your account, process transactions, and provide customer support.
To Comply With Legal Obligations: To meet regulatory requirements including Anti-Money Laundering (AML), Counter-Terrorist Financing (CTF), and Know-Your-Customer (KYC) regulations.
Based on Our Legitimate Interests: To detect and prevent fraud, secure our systems, and improve our services.
With Your Consent: To send you marketing communications or use your precise location data (which you can withdraw at any time).
We do not sell your personal data. We only share your information with trusted third parties under strict confidentiality agreements:
Identity Verification Partners: To verify your identity during registration and prevent fraud.
Payment Networks & Banking Partners: To process your transfers, card transactions, and banking operations.
Service Providers: Cloud hosting services, customer support software providers, and analytics platforms.
Regulatory and Legal Authorities: When required by law to comply with judicial proceedings, court orders, or tax regulations.
Since Orbit Crestville operates from Austria, your data is primarily stored and processed within the European Economic Area (EEA). If we transfer your data to service providers outside the EEA, we ensure that appropriate safeguards are in place (such as Standard Contractual Clauses approved by the European Commission) to maintain a high level of security.
We implement robust technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed, or altered in an unauthorized way. This includes:
Bank-grade data encryption (both in transit and at rest).
Multi-factor authentication and secure biometric verification.
Continuous system monitoring and regular external security audits.
Under the GDPR, you have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct inaccurate or incomplete data.
Right to Erasure ("Right to Be Forgotten"): You can request that we delete your data (subject to legal obligations that require us to retain records for a set period).
Right to Restrict Processing: You can ask us to temporarily suspend processing your data.
Right to Data Portability: You can request a transfer of your data to another service provider.
Right to Object: You can object to the processing of your data for marketing purposes.
To exercise any of these rights, please contact us at privacy@orbitcrestville.com.
We retain your personal and financial data only as long as necessary to fulfill the purposes we collected it for, including any legal, accounting, or regulatory reporting requirements. Under European anti-money laundering regulations, we are required to retain identity and transaction records for up to 7 years after your relationship with us ends.
We may update our Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. If the changes are significant, we will notify you via email or through our app.
If you have any questions about this Privacy Policy or our data protection practices, or if you wish to file a complaint, please contact us:
Email: privacy@orbitcrestville.com
Mailing Address:
Orbit Crestville
Data Protection Officer
DC Tower 1, Donau-City-Straße 7
1220 Vienna, Austria