Privacy policy
Controller
AURUM GmbH, Marienstraße 2, 90402 Nürnberg, Germany. Phone: +49 911 2536 1972, email: info@aurum-consulting.de. Further details are in the legal notice.
Data protection officer: AURUM GmbH, Datenschutz, Marienstraße 2, 90402 Nürnberg, Germany, datenschutz@aurum-consulting.de.
Hosting and server logs
This website is hosted on Google Cloud Run in the EU (region europe-west4, Netherlands). The provider is Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland, which processes data on our behalf under a data processing agreement. Access by Google LLC, USA, cannot be ruled out; Google LLC is certified under the EU–US Data Privacy Framework.
Each request is recorded in server logs (IP address, time, requested URL, referrer, user agent). They are used to operate and secure the website and are deleted automatically after 30 days. The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR).
Contact by email or phone
If you contact us by email or phone, we process your details to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).
Forms
When you submit a form (demo, pilot, contact, checklist), we process the data you enter to handle your request (Art. 6(1)(b) GDPR). Required fields are marked; without them we cannot handle your request. All other details are optional.
Submissions are stored in HubSpot. The provider is HubSpot Ireland Ltd., 1 Sir John Rogerson's Quay, Dublin 2, Ireland, under a data processing agreement. Our HubSpot account is hosted in EU data centres. Access by the parent company HubSpot, Inc., USA, is possible; it is certified under the EU–US Data Privacy Framework, and standard contractual clauses also apply. Together with the form we transmit the page you sent it from and your IP address. If you have accepted marketing cookies, we also link the submission to the HubSpot cookie (see below).
Marketing emails are sent only if you tick the separate, optional checkbox (Art. 6(1)(a) GDPR). You can withdraw this consent at any time, for example through the unsubscribe link in every email.
To prevent abuse, we count form submissions per IP address for ten minutes in the server's memory; this data is not stored permanently (Art. 6(1)(f) GDPR).
Forms are also protected against spam by Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. Turnstile is loaded only on pages with a form. To tell people from bots it processes your IP address and technical browser and device characteristics; it sets no tracking cookies and is not used for advertising. Our legitimate interest is protecting our forms from abuse (Art. 6(1)(f) GDPR). Cloudflare is certified under the EU–US Data Privacy Framework.
Form submissions are kept as long as we need them to answer your request and for any business relationship that follows. After that they are deleted, unless commercial or tax law requires us to keep them (up to ten years, § 257 HGB, § 147 AO).
Cookies and consent
Your choice in the cookie banner is stored in the strictly necessary cookie cc_cookie for up to six months, so the banner does not reappear on every visit (§ 25(2) no. 2 TDDDG, Art. 6(1)(c) and (f) GDPR). The banner is served by this website itself; no data is sent to third parties for it.
Analytics (Google Analytics 4) and marketing (HubSpot tracking) load only after your consent (§ 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time, with effect for the future, under "Cookie settings" in the footer.
| Tool | Purpose | Recipient | Retention | Transfer outside the EU |
|---|---|---|---|---|
| Google Analytics 4 | Usage statistics | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | Event data 14 months | Possible to Google LLC, USA; EU–US Data Privacy Framework |
| HubSpot tracking | Linking visits to a form you submitted | HubSpot Ireland Ltd. | Until you withdraw consent or ask for deletion | Possible to HubSpot, Inc., USA; EU–US Data Privacy Framework and standard contractual clauses |
Fonts and media
Fonts, images and videos are served by this website itself. No request is made to Google Fonts, YouTube or other third parties.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR). To exercise these rights, contact datenschutz@aurum-consulting.de.
Right to object (Art. 21 GDPR): Where we process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. You can object to the use of your data for direct marketing at any time without giving reasons.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany.
No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.