Privacy Policy

Last updated: 23.09.2026

Aurilux OÜ respects the privacy of its customers and website visitors. In this privacy policy, we explain what personal data we collect, for what purposes we use it, how long we store it, and what rights data subjects have regarding their data.

Registrar

The controller responsible for the processing of personal data is:

Aurilux OÜ
Registration number: 14943260
Address: Läike tee 3c, Peetri, 75312 Harju maakond, Estonia
E-mail: info@aurilux.fi
Website: aurilux.fi

For all questions related to the processing of personal data, you can contact us at info@aurilux.fi.

What kind of personal data do we collect?

Depending on how a person contacts us and what kind of service they need, we may process the following information:

  • name;
  • company name;
  • e-mail address;
  • telephone number;
  • delivery and billing information;
  • the content of the contact or request for quotation;
  • information about the desired product, dimensions, quantity, installation location and delivery time;
  • logos, design files, drawings, photographs and other materials attached to the request for quotation;
  • Correspondence with Aurilux;
  • information related to the order, quote, contract and payments;
  • technical information related to your use of the website, such as IP address, browser type, device information, time of visit and server logs;
  • Information collected using cookies is based on the choices made by the visitor.

We ask that you do not include personal data in your requests for quotations that is not necessary to evaluate the desired solution or to fulfill the order.

How do we collect personal data?

We mainly receive personal data from:

  • through contact and request for quotation forms;
  • by email or telephone;
  • in connection with the preparation of an order, offer or contract;
  • technical data generated in connection with the use of the website;
  • from the customer's representative or partner when necessary to fulfill the order.

For what purposes do we use personal data?

We process personal data for the following purposes:

  • responding to questions and contacts;
  • specifying the desired advertising solution;
  • preparing an offer;
  • preparation and execution of the order;
  • communication with the customer during production and delivery;
  • arranging delivery of products;
  • preparing invoices and fulfilling accounting obligations;
  • handling any complaints, warranty issues and disputes;
  • ensuring the operational reliability and security of the website;
  • analyzing website usage if the visitor has given their consent;
  • fulfillment of legal obligations.

Aurilux does not use the contact information received in connection with the request for quotation to send marketing messages without a separate legal basis.

Legal basis for processing personal data

The legal basis for processing personal data depends on the purpose of the processing:

  • implementation of measures prior to the conclusion of the contract, when a person sends a request for quotation or requests a quote;
  • implementation of the agreement, when the information is used to process an order, communicate, invoice or arrange delivery;
  • compliance with a legal obligation, for example, in the preservation of accounting documents;
  • Aurilux's legitimate interest, for example, in managing customer communications, ensuring website security and preparing for potential legal claims;
  • consent, when non-essential analytics or marketing cookies are used or when consent is requested for another specific purpose.

When processing is based on consent, consent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

How long do we retain personal data?

We only retain personal data for as long as is necessary to fulfill the purposes for which it was processed or to comply with legal obligations.

The general retention periods are as follows:

  • We retain general contacts and requests for quotations for a maximum of two years from the last contact;
  • We generally retain correspondence, files and documents related to the execution of an order for a maximum of three years after the end of the order, unless a longer retention period is necessary to process a complaint, warranty or legal claim;
  • We retain accounting documents for the period prescribed by law;
  • We only retain technical log data from the website for as long as is necessary to ensure the security and operational reliability of the website;
  • Information collected through cookies is retained for the duration of the cookie and the choices made by the visitor.

When the information is no longer needed and there is no legal basis for its retention, we delete or anonymize it.

To whom can we disclose personal data?

Aurilux employees and representatives have access to personal data only to the extent necessary to perform their duties.

If necessary, we may use service providers from the following groups:

  • web hosting and website maintenance service providers;
  • email and other IT service providers;
  • accounting and payment service providers;
  • transportation and courier service providers;
  • providers of legal services and advisory services;
  • other service providers necessary to fulfill the order.

We only provide the transport service provider with the information necessary for delivery, such as the recipient's name, phone number and delivery address.

Service providers process personal data in accordance with Aurilux's instructions or to fulfill their own legal obligations. We may also disclose information to authorities if we are legally obliged to do so.

We do not sell or disclose personal information to third parties for their own marketing purposes.

Transfer of personal data outside the European Economic Area

We prefer service providers that process personal data in the European Economic Area.

If the service provider we use processes data outside the European Economic Area, the data will only be transferred if there is a legal basis for the transfer in accordance with the General Data Protection Regulation and appropriate safeguards, such as an adequacy decision by the European Commission or standard clauses approved by the Commission.

Cookies

The website may use cookies and other similar technologies.

Cookies that are strictly necessary for the operation of the website may be used without your consent. They may be necessary, for example, for website security, form functionality, language selection, or to store cookie settings.

Analytics, preference and marketing cookies are only used with the visitor's consent. The visitor can make their choices through the cookie notice and change them later in the cookie settings.

Blocking cookies may affect the functionality of some features of the website.

External links

The website may contain links to other websites. When a visitor navigates to an external website, the operator of that website is responsible for the processing of personal data there.

We recommend that you review the privacy policy of each external service or website.

Data subject rights

Depending on the circumstances of the processing, the data subject has the right to:

  • to find out whether and what personal data about him/her is being processed;
  • to receive a copy of their personal data;
  • demand the correction of incorrect or incomplete information;
  • to request the deletion of personal data if there is no legal basis for its retention;
  • to request restriction of processing of personal data;
  • object to processing based on legitimate interest;
  • to receive the data you have provided in a machine-readable format and to transfer it to another controller, if the right to data portability applies;
  • withdraw previously given consent;
  • lodge a complaint with the competent data protection authority.

To exercise your rights, please send your request to info@aurilux.fi. If necessary, we may request additional information to verify the identity of the requester before processing the request.

We will respond to your request without undue delay and generally within one month. In the case of a complex or extensive request, the response time may be extended to the extent permitted by law.

Making a complaint

If you believe that your personal data has been processed in violation of data protection requirements, please first contact Aurilux at info@aurilux.fi, so that we can figure it out.

You also have the right to lodge a complaint with the competent supervisory authority.

The Estonian supervisory authority is Andmekaitse Inspektionsioon:
www.aki.ee

In Finland, you can contact the Office of the Data Protection Ombudsman:
www.tietosuoja.fi

Automated decision-making

Aurilux does not use automated decision-making or profiling based on personal data that would have legal effects on the person or other similarly significant effects.

Information security

We use appropriate technical and organizational measures to protect personal data. These include need-based access rights, secure network traffic, keeping the website and software used up to date, backups, and protecting login information.

No method of data transfer or storage is completely risk-free, but we use reasonable measures to prevent the accidental or unlawful destruction, loss, alteration, unauthorized disclosure, and misuse of personal data.

Changing the privacy policy

We may update this privacy policy if our services, the tools we use on the website, or legal requirements change.

The current version is always published on this page together with the latest update date.