Privacy Policy

This website is operated by aurora (or more precisely AY OÜ), a legal services company operating out of Estonia.  You can see the exact information of the company if you scroll to the bottom of this page.

This privacy policy will describe how we process your data and what you can do about it. It is written in understandable language and without any unnecessary legalese because we think that this is how public-facing policies should be written. After all, we want you to clearly understand what is going on with your personal data and how you can protect it.

When we say “We” we mean aurora and when we say “You” we mean… you, the visitor. When we say “site” or “website” we mean https://aurora.legal

1. What applies to us?

We are a EU company which means we are subject to the GDPR. It ensures that you have rights and other cool things. If we want to say this properly, The processing of your personally identifiable information is subject to the EU General Data Protection Regulation.

2. What data do we collect?

We don’t collect a lot of data about you and the data we do collect depends on what you want to share with us. When contacting us at the email address shown at the bottom of this page you will probably share some information about what service you are looking for – this will include at least your email address, your name, the name of your company and your contact details. You can share other kinds of information if you would like.

3. What is the basis for data processing?

When you contact us at the email address you give us consent for the processing of your personal data. You can take that consent back at any time if you do not want us to process your data any longer by contacting us at the same email address.

Additionally, we also have a legitimate interest in processing your data as this is needed to attend to your communication with us. If you enter into an agreement with us then we will also need to process your personal data to fulfil our obligations to you under that agreement.

4. Cookies

You probably noticed the cookie pop up when you visited the website. We use GoDaddy as our website and hosting and everything provider and tried to decrease the number of cookies to the bare minimum. This means that the cookies collected are strictly necessary for the stable performance of the website.

The cookies collected are as follows:

_scc_session – this cookie is used to maintain an anonymized user session and expires within 30 minutes.

_tccl_visitor – this cookie is used to track and analyze the behavior of visitors on the website and help with improving functionality, expiring after 1 year.

_tccl_visit – this cookie is used to track a visitor’s navigation and behavior on the website to enhance site performance and understand visitor usage patterns, and expires after 30 minutes.

_cookie_terms_accepted, _cookie_warning_dismissed – these cookies are used to track whether you accepted cookies.

dps_site_id – this cookie is used to identify the site ID of the user  and expires when the browsing session ends.

5. What can you do about the processing of your data?

Many things, but more specifically you have the right to require us to rectify (=fix) untrue personal data, to delete your personal data (we won’t be able to work with you though until you allow us to again), to ask where your information is sent and who has access to it, and to address your data protection authority if you believe that we are processing your personal data in a way that we shouldn’t. We definitely won’t do that because that’s wrong and contrary to the law, but we still want to make sure you have this right.

If you would like to exercise any of your GDPR rights, please contact us at [email protected]

6. Closing words

This policy will be updated from time to time to reflect any changes in our business or the law. Please make sure you check this page out occasionally to be up-to-date with any changes.