Privacy Policy
Aurora Luxury respects the privacy of website visitors and people who enquire about its services. This notice, provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), explains what personal data are processed, for what purposes and how you can exercise your rights.
Last updated: 11 November 20261. Data controller
Aurora Luxury di Giordano Andrea, a sole proprietorship with registered office at Via Primo Maggio 4, 10024 Moncalieri (Turin), Italy; VAT number IT13035270019; Italian tax code GRDNDR91C23L219U; Business Register reference REA TO-1334342. Email: info@auroraluxury.it; certified email (PEC): auroraluxury@pec.it; telephone: +39 340 6475643.
The data controller is Andrea Giordano, as owner of the Aurora Luxury sole proprietorship. You may use the email or certified email address above for data protection enquiries and to exercise your GDPR rights.
2. Personal data processed
Browsing data: IP address, date and time of requests, pages and resources accessed, browser and device information, and other technical data needed to deliver pages, operate the website and ensure its security. This information may be recorded in the logs of the systems hosting the website.
Information you choose to provide: your name, contact details, email correspondence, telephone communications, service preferences and any other details you provide to receive a reply or a quotation.
Information related to professional engagements: contractual details, billing data and information strictly necessary to manage services agreed with a client.
The website does not provide contact forms, account registration, personal areas or online checkout. Messages sent to the business email address are processed directly through the mailbox and are not entered into a website database or CRM system. Please do not send sensitive or health information unless it is genuinely required for your enquiry.
3. Purposes and lawful bases
Responding to enquiries, providing information and preparing tailored proposals: taking steps at the data subject's request before entering into a contract (GDPR Article 6(1)(b)).
Managing requested services and client relationships, as well as meeting administrative, tax and accounting requirements: performing a contract and complying with legal obligations (GDPR Article 6(1)(b) and (c)).
Keeping the website and communications secure, operating the website and preventing abuse or unlawful access: the controller's legitimate interest in safeguarding its systems (GDPR Article 6(1)(f)).
Establishing, exercising or defending legal claims: the controller's legitimate interest in protecting its legal rights (GDPR Article 6(1)(f)).
The website does not use visitor analytics, advertising pixels, newsletters, automated marketing or profiling systems. Contact details received with enquiries are not used for promotional mailings.
4. Providing personal data
You can browse the website without voluntarily supplying identifying information, apart from the technical data needed to serve its pages. Providing contact details and information relevant to your enquiry is optional; however, without the information needed to handle it, we may be unable to reply, prepare a proposal or deliver the requested service.
5. Processing and recipients
Personal data are processed using electronic systems and appropriate organisational arrangements to preserve confidentiality, integrity and availability. Access is limited to the controller, authorised collaborators and parties who need the information for their work.
Netsons provides website hosting and email services. The provider processes the technical data required to deliver, secure and operate those services according to the applicable roles and data-processing arrangements. Information relating to an enquiry may be disclosed to professional or accounting advisers and, only where necessary for an agreed assignment, to the partners and suppliers involved in fulfilling it. Suppliers processing information on the controller's behalf are engaged as processors under Article 28 GDPR when required.
Information may also be disclosed to authorities where required by law. Personal data are not sold to third parties.
6. External fonts, media and social links
Inter Tight is loaded from files hosted on the website. The Henston font is delivered through Adobe Fonts (Adobe), which receives technical information needed to serve it, including the IP address used for delivery. Adobe states that its website font service does not store that IP address and does not set cookies to serve fonts. Service information: www.adobe.com/privacy/policies/adobe-fonts.html.
Images and gallery videos are served directly by the website and do not require third-party video players. The Instagram profile link takes you to a separately operated service, whose own terms and privacy policies apply after you follow the link.
7. Transfers outside the European Economic Area
Using digital services provided by international companies, including Adobe Fonts, may involve technical communications with infrastructure located outside the European Economic Area. Where personal data are transferred to third countries, the controller applies the conditions laid down in GDPR Articles 44 and following, including adequacy decisions or appropriate safeguards where applicable. You may request information about these safeguards through the controller's contact details.
8. Retention periods
Email enquiries are handled by the controller directly through the mailbox and are not stored in a website database or CRM. Messages are kept only for as long as necessary to reply and complete the correspondence; they may be retained longer where necessary to document agreements, comply with legal obligations or protect legal rights.
Data relating to contracts, invoices and accounting records are retained for the period required by applicable law, generally 10 years where legally prescribed, and for any additional period necessary to protect rights in the event of disputes.
Technical browsing logs are handled by Netsons hosting infrastructure for the period needed to deliver and secure the service and investigate any incidents, in accordance with the applicable service rules. The dismissal of the technical-cookie notice is stored solely on the visitor's device for no more than six months.
9. Your rights
Subject to the conditions and limits of the GDPR, you can request access to your personal data, correction of inaccurate data, erasure, restriction of processing and data portability where applicable. You may also object to processing based on the controller's legitimate interests for reasons related to your particular situation.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of earlier processing. Requests can be sent to info@auroraluxury.it or auroraluxury@pec.it. You also have the right to lodge a complaint with the Italian Data Protection Authority: www.garanteprivacy.it.
10. Changes to this notice
This notice is updated when significant changes are made to processing practices or to services available through the website. The version published here applies as of the last-updated date shown on this page.