1. Controller
AUROVIAQ, Aleksander Kajba s.p., Cesta talcev 4, 3325 Šoštanj, Slovenia is the data controller. Questions and requests: hello@auroviaq.com.
2. Data we process
An enquiry contains your name, company/property, email, optional phone and website, location, property type and units, selected services, message, and acknowledgement of this policy. We do not automatically collect UTM parameters, advertising identifiers or the referring page.
The demo concierge processes the question, selected host language and necessary request data. Answers are deterministic; questions are not sent to an external AI provider or stored in an application database. Hosting infrastructure may temporarily keep security logs such as an IP address.
3. Purposes and legal bases
We process enquiries to respond, prepare an offer and take pre-contract steps (GDPR 6(1)(b)); protect the service, prevent abuse and establish claims under legitimate interests (6(1)(f)); retain legally required business records (6(1)(c)); and use non-essential technologies only with consent (6(1)(a)), which you may withdraw at any time.
4. Recipients and processors
Access is limited to AUROVIAQ and providers necessary for operation, security and message delivery. When email delivery is configured, enquiry data is sent to Resend as email infrastructure provider. Hosting may process necessary technical logs. If Cloudflare Turnstile form protection is enabled, Cloudflare processes necessary technical and security signals to check for abuse. The 360° viewer, fonts and demo media are self-hosted. No analytics, advertising pixel, map or external AI service currently loads.
5. International transfers
If a processor handles data outside the EEA, an applicable GDPR Chapter V safeguard is used, such as an adequacy decision or standard contractual clauses. Details are available from AUROVIAQ on request.
6. Retention
Enquiries are kept only as needed to respond, prepare or perform a business relationship, comply with legal periods and defend claims. Failed enquiries are not stored by the application. The browser privacy choice lasts no more than 12 months before renewal. Infrastructure security logs follow the provider's limited retention periods.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability, object to legitimate-interest processing, and withdraw consent without affecting earlier lawfulness. Contact hello@auroviaq.com. You may complain to the Slovenian Information Commissioner, Dunajska cesta 22, 1000 Ljubljana, gp.ip@ip-rs.si, https://www.ip-rs.si.
8. Required data and automation
Required fields are needed to handle an enquiry; without them we may be unable to respond. We do not carry out automated decision-making or profiling producing legal or similarly significant effects.
9. Security, links and changes
Measures include encrypted transport, request size and rate limits, origin checks, input validation and restricted access. No system is completely secure. External sites control their own notices. We update this policy when actual processing or law changes; the date appears above.