Privacy Policy
This policy explains how personal data is collected and used on this website. It applies to https://aureliusgrowth.eu and to enquiries sent through the contact form or by email.
Last updated: [TO BE COMPLETED: date]
Data controller
- Trading name: Aurelius Growth
- Registered company name: [TO BE COMPLETED: registered company name]
- Legal form: [TO BE COMPLETED: legal form]
- Commercial register number: [TO BE COMPLETED: commercial register number]
- VAT number: [TO BE COMPLETED: VAT number]
- Registered address: [TO BE COMPLETED: postal address]
- Country of establishment: [TO BE COMPLETED: country of incorporation]
- Telephone: [TO BE COMPLETED: telephone number]
- Email: info@aureliusgrowth.eu
- Person responsible: Ksenija Ulićević, Owner and Fundraising Consultant
No Data Protection Officer has been appointed. This is not required, because the business does not carry out large-scale processing, systematic monitoring, or large-scale processing of special categories of data.
What data is collected and how
Contact form
The contact form collects your name (required), email address (required), company (optional), type of enquiry (optional) and message (required). Data entered in the form is stored in the database of this website and is also sent by email to the owner.
Please do not include confidential or sensitive information in the message field. Use the form to make initial contact only.
If you write directly to the email address above, the content of your message and your email address are processed in order to reply.
Server logs
The hosting provider may record technical access data, such as IP address, date and time of the request, requested resource and browser user agent, for the purpose of operating and securing the server. This processing is carried out by the hosting provider on the controller’s behalf.
What is not collected
This website does not use web analytics, advertising pixels, tracking scripts, or third-party cookies. Fonts are self-hosted, so no requests are made to external font providers. There are no embedded videos, maps, social media widgets, or chat tools. No profiling or automated decision-making takes place.
Purposes and legal bases
| Processing | Purpose | Legal basis (GDPR) |
|---|---|---|
| Contact form and email enquiries | To read, assess and reply to your enquiry, and to discuss a possible professional engagement | Art. 6(1)(b), steps taken at your request prior to entering into a contract; and Art. 6(1)(f), legitimate interest in responding to business enquiries |
| Server logs and website security | To keep the website available, stable and protected against misuse | Art. 6(1)(f), legitimate interest in the secure operation of the website |
| Retention of correspondence where a legal obligation applies | Compliance with accounting, tax or evidentiary obligations | Art. 6(1)(c), legal obligation |
Where processing is based on legitimate interest, the interest is the ability to run a professional consultancy and to respond to people who choose to make contact. Because the data is limited to ordinary business contact details and the content you choose to send, this interest is not overridden by your rights and freedoms. You may object at any time.
Providing the required form fields is voluntary. Without them, an enquiry cannot be answered.
Recipients and processors
Personal data is not sold, rented, or shared for marketing purposes. Data may be accessible to:
- The hosting provider: IONOS SE, Germany. The provider stores the website and its database, and acts as a processor under a data processing agreement pursuant to Art. 28 GDPR.
- The email provider: enquiries reach the mailbox info@aureliusgrowth.eu, operated by [TO BE COMPLETED: email provider name and country]. That provider processes the content of incoming messages as part of providing the mailbox, and acts as a processor under a data processing agreement pursuant to Art. 28 GDPR.
- Professional advisers or public authorities, only where disclosure is required by law.
International transfers
No international transfers are planned for the website itself. The website and its database are hosted within the European Union.
The only processing that could take place outside the European Economic Area is the email service. If the provider of info@aureliusgrowth.eu stores messages outside the EEA, the transfer relies on an adequacy decision of the European Commission or on Standard Contractual Clauses. The current provider and the location of its servers are stated here: [TO BE COMPLETED: email provider name and country].
Retention
- Contact form entries and correspondence: [TO BE COMPLETED: retention period, suggested 24 months] from the last contact. Enquiries about public funding mature slowly, because calls for proposals open on fixed cycles and a prospective client may return when a suitable call is published. Twenty-four months covers a full cycle while keeping the data minimised.
- Data relating to a concluded engagement: kept for the statutory accounting and tax retention period applicable in [TO BE COMPLETED: country of incorporation].
- Server logs: kept for the period applied by the hosting provider, normally short and limited to what is needed for security and troubleshooting.
After the applicable period, data is deleted or irreversibly anonymised.
Your rights
Under the GDPR you have the right to access your personal data and obtain a copy; to rectification of inaccurate or incomplete data; to erasure, where a ground in Art. 17 GDPR applies; to restriction of processing, where a ground in Art. 18 GDPR applies; to object to processing based on legitimate interest, on grounds relating to your particular situation (Art. 21 GDPR); to data portability (Art. 20 GDPR); to withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal; and to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. The competent authority for this controller is [TO BE COMPLETED: supervisory authority of the country of establishment].
How to exercise your rights
Write to info@aureliusgrowth.eu or to the postal address above, stating which right you wish to exercise. Requests are answered within one month, extendable by two further months for complex requests, in which case you will be informed. Proof of identity may be requested if there is reasonable doubt as to who is making the request. Exercising these rights is free of charge, except for manifestly unfounded or excessive requests.
Security
Appropriate technical and organisational measures are applied, taking into account the nature and small scale of the processing: encrypted transmission over HTTPS and TLS, restricted administrative access protected by individual credentials, regular updates of the content management system and its components, and backups managed by the hosting provider. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.
Children
This website and the services described on it are directed at businesses and professionals. They are not intended for children, and personal data relating to children is not knowingly collected. If you believe that a child has submitted personal data through this website, please write to the address above so that it can be deleted.
Changes to this policy
This policy may be updated to reflect changes to the website, to the services, or to applicable law. The current version is always published on this page, with the date of the last update shown at the top. Where a change materially affects how your data is processed, it will be signalled on this page.