Legal notice

privacy policy

1. Controller

Aura Engineering GmbH & Co. KG, Hauptstr. 21, D-55758 Niederhosenbach
Email: info@aura-engineering.de
Phone: +49 6785 2492308

2. General information

We process personal data only where necessary to provide this website, communicate with you or handle an enquiry. Processing is carried out in accordance with the General Data Protection Regulation and the German Federal Data Protection Act.

3. Hosting and server log data

We operate this website on a virtual private server managed by us and provided by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes hosting data on our behalf.

When the website is accessed, technically necessary log data may be generated: IP address, date and time, requested address, referrer, browser and operating system, HTTP status and transferred data volume. This data is used to deliver the site, maintain stability and defend against attacks. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is secure and reliable operation. Logs are deleted as soon as they are no longer needed for these purposes and are retained longer only where necessary to investigate or document a specific security incident.

4. Technically necessary cookies and consent preference

The website may set technically necessary cookies: django_language stores your language selection for up to one year; csrftoken protects forms for up to one year; sessionid maintains a necessary session, particularly for status messages and the protected administration area, generally for up to two weeks; aura_consent_v1 stores your privacy choice for 180 days. These operations are necessary under section 25(2) TDDDG. Where personal data is processed, the legal basis is Article 6(1)(f) GDPR; our interests are security, usability and documenting your choice.

The optional Google Maps integration is activated only after your consent under section 25(1) TDDDG and Article 6(1)(a) GDPR. You can change your choice at any time through “Privacy settings” in the footer. Withdrawal applies for the future and is as easy as giving consent.

The aura_consent_v1 cookie contains only your choice, not a unique visitor identifier. We do not maintain a separate IP-based consent register for it. If you delete the cookie or it expires, you will be asked again on your next page load.

5. Contact form and project enquiries

When you contact us through the form, we process your name, email address and message as required fields and, optionally, your company and telephone number. We need the required fields to identify and answer your enquiry; the form cannot be submitted without them. The data is transmitted over an encrypted connection, stored in our website database and forwarded to us by email.

The legal basis is Article 6(1)(b) GDPR where the enquiry concerns a quotation, contract or pre-contractual measures. For other business communication, the legal basis is Article 6(1)(f) GDPR; our legitimate interest is answering the enquiry and maintaining business contacts.

6. Recipients and Microsoft 365

Hosting data and the website database are processed at IONOS. Contact enquiries are also transmitted to our Microsoft 365 mailbox. The provider for the European Economic Area is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Our tenant is configured for a German or European data region. Individual processing operations or support access outside the EEA nevertheless cannot be ruled out completely. Microsoft provides the safeguards required by data-protection law, in particular standard contractual clauses and, where applicable, adequacy decisions. Data-processing agreements are in place with the service providers.

7. Google Maps

The Google Maps map is initially blocked completely. For this integration, your browser connects to Google only after you select “Allow Google Maps” or “Load Google Maps”. In particular, your IP address, browser and device information, time and the page accessed may be processed, and cookies or similar technologies may be used. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Processing by Google LLC in the United States and other third countries is possible. Processing is based exclusively on your consent under Article 6(1)(a) GDPR and section 25(1) TDDDG. Further information is available in the Google privacy policy.

Choosing “Necessary only” through “Privacy settings” removes the embedded map on this page. This does not undo data already transferred to Google; we cannot delete Google’s cookies. Independently of the embedded map, the address links lead to Google Maps. Opening these links takes you away from our website, where Google’s privacy policy applies.

8. External links and social networks

Our links to Instagram and LinkedIn transfer data to the respective provider only when you open the link. The provider's privacy policy then applies.

9. Retention

The copy of a contact enquiry stored in the website database is deleted automatically 180 days after receipt. We delete email copies as soon as they are no longer needed to handle the enquiry and possible follow-up questions. If an enquiry results in a contractual relationship or a business record subject to retention requirements, we retain the necessary data until the applicable statutory retention and limitation periods expire. The consent choice is requested again after 180 days.

10. Your rights and withdrawal

Subject to the applicable legal requirements, you have rights of access, rectification, erasure, restriction of processing and data portability. You may withdraw consent at any time with effect for the future. Where processing is based on Article 6(1)(f) GDPR, you may object on grounds relating to your particular situation. To exercise your rights, send a message to the contact details above.

11. Right to lodge a complaint

You may lodge a complaint with a data-protection supervisory authority. The authority responsible for our registered office is: The State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Hintere Bleiche 34, 55116 Mainz, Germany. Contact the supervisory authority.

12. Automated decisions

No automated decision-making, including profiling within the meaning of Article 22 GDPR, takes place.

13. Last updated

This privacy policy was last updated in September 2026.