Privacy Policy

This English version is provided for convenience only. The German version (Datenschutzerklärung) is legally binding.

Last updated: October 2026

This privacy policy informs you, in accordance with Art. 13 of the General Data Protection Regulation (GDPR), which personal data we process when you visit this website or contact us, for which purposes and on which legal basis.

1. Controller

AUREA ENERGIE GmbH
Falchenstraße 106
89233 Neu-Ulm, Germany
Phone: +49 (0) 731 – 71101788
Email: info@aurea-energie.de
Represented by the managing director Dipl.-Betriebswirt (FH) Roland Fuchs

No data protection officer has been appointed, as the requirements of Section 38 of the German Federal Data Protection Act (BDSG) are not met.

2. Overview: what this website does not do

This is a static website without user accounts. It sets no cookies, stores no information on your device and reads no information from it (Section 25 of the German TDDDG). We use no analytics or tracking tools (in particular no Google Analytics), no advertising or social media services and no embedded third-party content (such as map or video services). Fonts, images and videos are delivered exclusively from our own web server; no data is transferred to third parties such as Google when you view the pages. A cookie banner is therefore not required.

3. Hosting and server log files

This website is hosted by Namecheap, Inc., 4600 East Washington Street, Suite 300, Phoenix, AZ 85034, USA. According to our findings, the web server is located in a data centre in the United Kingdom, for which an adequacy decision of the European Commission under Art. 45 GDPR exists (renewed until 27 December 2031). Where the host processes or accesses data in the USA, this is based on the European Commission's Standard Contractual Clauses (Art. 46 (2) (c) GDPR), which are part of the host's Data Processing Addendum. A data processing agreement under Art. 28 GDPR is in place with Namecheap, Inc.; the host’s Data Processing Addendum is part of its terms of service.

When you access the website, your browser automatically transmits data to the server, which is stored in server log files: IP address of the requesting device; date and time of access; page or file requested, HTTP status code and amount of data transferred; referrer URL (the previously visited page), if transmitted; browser and operating system used.

This processing is technically necessary to deliver the website and to ensure its security and stability (e.g. to fend off attacks). The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in these purposes. The log files are not combined with other data and are usually deleted within 30 days, at the latest with the host’s monthly statistics run. In addition, the host may keep its own logs for the security of its systems.

4. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, such as your enquiries via the contact form, this website uses SSL/TLS encryption. You can recognise an encrypted connection by “https://” in your browser's address bar.

5. Contact form

If you send us an enquiry via the contact form, we process the data you provide: name, email address, message and – optionally – your phone number. Mandatory fields are marked. The data is delivered by email to a mailbox of our company with our host (see section 3) and stored there to handle your enquiry.

To protect against spam and abuse, the form also stores a pseudonymised hash value (one-way function) of your IP address together with the time of the request, in order to limit the number of requests per sender. This entry is usually deleted after 24 hours, at the latest the next time the form is used.

The legal basis is Art. 6 (1) (b) GDPR where your enquiry relates to the performance of a contract or to pre-contractual measures, otherwise Art. 6 (1) (f) GDPR; our legitimate interest lies in answering your enquiry and protecting the form against abuse.

We delete your enquiry once it has been dealt with conclusively, unless statutory retention obligations apply (e.g. six years for business correspondence under Section 257 of the German Commercial Code / Section 147 of the German Fiscal Code, where the enquiry leads to a business transaction).

6. Contact by email or phone

If you contact us by email or phone, we process the data you provide to handle your request. Legal bases and retention correspond to section 5.

7. Recipients

Your data is accessible only to the host as processor (section 3) and is not otherwise passed on to third parties unless we are legally obliged to do so. No automated decision-making, including profiling (Art. 22 GDPR), takes place.

8. Your rights

Under the GDPR you have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). Please use the contact details in section 1.

Right to object (Art. 21 GDPR): Where we process your data on the basis of Art. 6 (1) (f) GDPR, you may object to this processing at any time on grounds relating to your particular situation.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority competent for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de.

9. Obligation to provide data

Providing your data is neither a legal nor a contractual requirement. Without the mandatory information in the contact form, however, we cannot answer your enquiry.

10. Changes

We update this privacy policy when the website or the legal situation changes. The version published here applies.