AURA CREATORS · YOUR DATA
Privacy Policy
Last updated: 22 October 2026
1. Controller
IQON GROUP ADVISORY LIMITED
Lordou Vyronos 61–63, 6th Floor, Flat/Office 602
6023 Larnaca, Cyprus
Company No. HE 490472
Email: info@auracreaotors.com
2. Website access and hosting
When you access this website, the hosting service processes technical information needed to provide it, including your IP address, access time, requested page, browser and operating system information, referrer and response status. This supports delivery, reliability and security, based on our legitimate interests under Article 6(1)(f) GDPR.
Hosting is provided through DomainFactory and its infrastructure providers. Relevant providers process data to deliver the contracted hosting service. The retention of technical logs is governed by the hosting configuration and operational security requirements.
3. Enquiries
When you submit the contact form, we process your name or creator name, email address, selected support, message, optional profile link and confirmation that you are at least 18. We use this information to respond and discuss a possible collaboration, based on Article 6(1)(b) GDPR for pre-contractual steps and Article 6(1)(f) GDPR for other business enquiries.
The form does not accept uploads. Please do not send identity documents, passwords, intimate images or other sensitive information with an initial enquiry. A profile link is optional and should be shared only if you want us to consider it.
Enquiries are sent to our business mailbox. Microsoft 365 is used for business email. Receipt by the website’s mail server does not itself confirm delivery to the mailbox.
4. Session protection and cookies
The contact form uses a temporary, technically necessary session cookie for request verification and abuse protection. It is marked Secure, HttpOnly and SameSite=Strict. Session data may include a random verification token and the time of the last successful submission. The form also checks a hidden spam field and elapsed time. These measures support secure operation under Article 6(1)(f) GDPR.
We do not use advertising cookies, third-party tracking, analytics scripts, externally loaded fonts or embedded social platform widgets on this website. Fonts and images are served locally. Language selection uses separate English and German pages and does not require a preference cookie.
5. Recipients and international processing
Information is accessed only where necessary by the responsible business team and contracted technical providers. Depending on the service, providers may process data outside the EEA. Applicable safeguards, such as adequacy decisions or standard contractual clauses, are used where required. We do not publish your enquiry.
6. Retention
We retain enquiries for as long as needed to handle them and related follow-up. Where no collaboration follows, our intended retention period is up to six months after the final exchange, unless a longer legal obligation or a need to establish, exercise or defend claims applies. Contract and accounting records may require longer statutory retention.
7. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction and data portability under Articles 15–20 GDPR. You may object to processing based on legitimate interests under Article 21 GDPR. If processing is based on consent, you may withdraw it for the future. Contact us using the email address above.
You also have the right to complain to a competent data protection authority, including the Commissioner for Personal Data Protection in Cyprus or the authority where you live or work.
8. External links
If you follow an external link, the destination provider’s privacy terms apply. No social-platform data is loaded merely because a platform is named on this website.
9. Updates
We may update this notice when the website or its processing changes.