Privacy Policy

1. Data Controller

The controller responsible for data processing under the General Data Protection Regulation (GDPR) is:

Aureon Global L.L.C.
Dushkaja 20
71000 Kaçanik
Republic of Kosovo
Email: info@aureonglobal.de

2. Collection and Storage of Personal Data

When you visit our website, general information is automatically collected. This information (server log files) includes data such as the type of web browser used, the operating system, the domain name of your internet service provider, and similar. This information does not allow any conclusions to be drawn about your identity.

3. Contact Form / Audit Form

When you submit enquiries to us via our contact or audit form, the details you provide, including the contact information you supply, are stored for the purpose of processing your request and in case of follow-up questions. We do not share this data without your consent.

The processing of data entered into the contact form is based exclusively on your consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time by sending an informal notification to us by email.

What data do we collect in the form?

• First and last name
• Email address
• Phone number (optional)
• Company name / brokerage
• Answers to the audit questions (business volume, processes, goals)

4. Cookies, Local Storage, and Analytics

Our website uses cookies and similar storage technologies (such as localStorage) only on the legal bases listed below. Non-essential storage is set only after you have given explicit, granular consent via our cookie banner. You can review or change your choice at any time using the Cookie preferences link in the site footer.

4.1 Strictly necessary (Art. 6(1)(f) GDPR · § 25(2) Nr. 2 TTDSG)

One small entry in your browser’s local storage records your cookie consent decision so we don’t have to ask again on every page. This is technically required to honour your privacy choice and is set without consent because it is necessary for the operation of the consent mechanism itself.

• aureon_cookie_consent — localStorage entry. Stores which categories you allowed plus a timestamp. Retention: up to 12 months, after which we re-prompt.

4.2 Analytics (Art. 6(1)(a) GDPR · § 25(1) TTDSG · opt-in)

If you allow analytics, we load PostHog, a privacy-friendly product-analytics tool, from its EU infrastructure. Data is processed in the European Union (Frankfurt, Germany) and is never used for advertising or shared with advertising networks.

• Provider: PostHog Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA, with EU data residency configured (data stored at eu.i.posthog.com).
• Purpose: Aggregated page-view counts, button click events, conversion funnels, and aggregated heatmaps so we can understand which content helps visitors and which does not.
• Data collected: A pseudonymous device identifier, page URL, referrer, viewport size, anonymised IP, and the events described above. We do not attempt to re-identify you.
• Retention: 12 months, then automatically deleted by PostHog.
• International transfer: PostHog Inc. is a US-headquartered processor; the EU instance is operated under PostHog’s Standard Contractual Clauses (SCCs) and Data Processing Agreement.

4.3 Session replay (Art. 6(1)(a) GDPR · opt-in, off by default)

If you additionally allow session replay, PostHog records a privacy-masked replay of your interactions on the page (clicks, scrolls, navigation) so we can identify usability bugs. Form fields and typed text are masked; we do not see passwords, addresses, or any data you type. This category is more invasive than basic analytics and is therefore disabled by default and only enabled when you explicitly toggle it on.

4.4 Marketing / advertising cookies

We do not use any marketing or advertising cookies, retargeting pixels, Facebook Pixel, Google Ads conversion tags, or third-party advertising networks on this website.

4.5 How to withdraw or change consent

You may withdraw your consent or change your category choices at any time by:

• Clicking the Cookie preferences link in the site footer;
• Clearing the aureon_cookie_consent entry from your browser’s site data, after which the banner will reappear on your next visit;
• Sending us an email at info@aureonglobal.de requesting deletion of any analytics data we hold on your pseudonymous identifier.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. Transfer of Data to Third Parties

Your personal data is not transferred to third parties for purposes other than those listed below. We only share your personal data with third parties if:

• You have given your explicit consent to do so,
• the transfer is necessary for the performance of a contract with you, or
• the transfer is necessary to fulfil a legal obligation.

6. Your Rights as a Data Subject

You have the right to:

• Request information about your personal data processed by us (Art. 15 GDPR);
• Request immediate correction of inaccurate or incomplete personal data stored by us (Art. 16 GDPR);
• Request the deletion of your personal data stored by us (Art. 17 GDPR);
• Request the restriction of the processing of your personal data (Art. 18 GDPR);
• Receive your personal data in a structured, commonly used and machine-readable format (Art. 20 GDPR);
• Lodge a complaint with a supervisory authority (Art. 77 GDPR).

To exercise your rights, please contact us at: info@aureonglobal.de

7. Data Security

We use the widely-used SSL (Secure Socket Layer) procedure during your website visit, in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. All data transmission to and from our site is encrypted and secure.

8. Retention Period

Personal data collected via our contact or audit form is retained only for as long as necessary for the purpose for which it was collected, or as required by applicable law. Audit form data is retained for a maximum of 24 months unless you request earlier deletion.

9. Updates to this Privacy Policy

This Privacy Policy is currently valid as of April 2026. Due to the further development of our website and services, or changes in legal or regulatory requirements, it may be necessary to amend this Privacy Policy. We will notify you of any material changes via the website or by email where we hold your contact details.