Skip to main content

Privacy Policy

Your privacy is important to us. This policy explains how we collect, use, and protect your personal data.

Last updated: January 2025

Introduction

Aurex ('we', 'our', or 'us') is committed to protecting your personal data and respecting your privacy. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Data We Collect

Personal Information

  • Name and contact details (email, phone)
  • Company information
  • Service preferences and inquiries
  • Assessment quiz responses and results

Technical Data

  • IP address and browser type
  • Device information
  • Pages visited and time spent
  • Referring website

How We Use Your Data

  • To respond to your inquiries and provide services
  • To conduct assessments and provide recommendations
  • To improve our website and services
  • To comply with legal obligations (DORA, GDPR, etc.)
  • To communicate about our services and updates

Legal Basis for Processing

  • Contract performance: providing services you request
  • Legitimate interest: improving our services and security
  • Legal obligation: compliance with DORA and other regulations
  • Consent: cookies and marketing communications

Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

  • Service providers who assist our operations (hosting, email)
  • Regulatory authorities when required by law (DORA, CSSF)
  • Business partners with your explicit consent

Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy, unless required by law to retain it longer. Assessment results are retained for 12 months.

Your Rights Under GDPR

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your personal data
  • Restrict: Limit how we use your data
  • Portability: Receive your data in a structured format
  • Object: Object to processing based on legitimate interest
  • Withdraw: Withdraw consent at any time

Cookies and Tracking

We use essential cookies for website functionality. Optional cookies help us understand usage patterns. You can manage preferences via our cookie banner.

Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular security assessments aligned with DORA requirements.

International Data Transfers

Your data is processed within the EU/EEA. We do not transfer your data outside the EU without adequate safeguards.

Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect data from minors.

Changes to This Policy

We may update this privacy policy from time to time. Significant changes will be notified via email or website notice.

Contact Us

For privacy-related inquiries, contact us at:

privacy@aurex.lu