Privacy

Privacy Notice

This notice explains which data is processed on aurillia.de, why it is used, and which rights you have.

Last updated: May 26, 2026

Service Providers Used

The following service providers may be used for operation, contact form handling, database storage, email delivery, optional AI assistant features, and spam protection.

Vercel Inc.

Address

440 N Barranca Ave #4133

Covina, CA 91723

USA

Purpose

Hosting, deployment, website delivery, and security/server logs.

Data Processed

IP address, requested URL, date and time, referrer, browser and device information, and technical log data.

Legal Basis

Art. 6(1)(f) GDPR; legitimate interest in secure and stable website delivery.

International Transfers

Processing may take place in the United States or other locations; safeguarded by a DPA and standard contractual clauses where required.

More Information

Supabase, Inc.

Address

970 Toa Payoh North #07-04

Singapore 318992

Singapore

Purpose

Database for project inquiries, voluntarily provided contact details, and optional AI assistant usage logs.

Data Processed

Name, email address, project note, interest, inquiry source, technical usage data, token values, and pseudonymized fingerprints.

Legal Basis

Art. 6(1)(b) GDPR for pre-contract project inquiries, otherwise Art. 6(1)(f) GDPR.

International Transfers

Processing may take place outside the EU; safeguarded by a DPA and standard contractual clauses where required.

More Information

OpenAI Ireland Limited / OpenAI OpCo, LLC

Address

OpenAI Ireland Limited

1st Floor, The Liffey Trust Centre

117-126 Sheriff Street Upper

Dublin 1, D01 YC43, Ireland

OpenAI OpCo, LLC

1455 3rd Street

San Francisco, CA 94158, USA

Purpose

Optional AI assistant, moderation, and generation of replies to chat messages.

Data Processed

Chat messages, conversation context, technical request information, and voluntarily provided contact details.

Legal Basis

Art. 6(1)(f) GDPR; for concrete project inquiries also Art. 6(1)(b) GDPR.

International Transfers

OpenAI may transfer data to affiliates or subprocessors outside the EU; safeguarded by a DPA and standard contractual clauses where required.

More Information

Plus Five Five, Inc. (Resend)

Address

2261 Market Street #5039

San Francisco, CA 94114

USA

Purpose

Transactional email delivery for contact form inquiries.

Data Processed

Email address, reply-to address, message content, subject, delivery data, and technical metadata.

Legal Basis

Art. 6(1)(b) GDPR for pre-contract project inquiries, otherwise Art. 6(1)(f) GDPR.

International Transfers

Processing may take place in the United States; safeguarded by a DPA, Data Privacy Framework, and standard contractual clauses where required.

More Information

Cloudflare, Inc. (Turnstile)

Address

101 Townsend Street

San Francisco, CA 94107

USA

Purpose

Optional bot and spam protection for the contact form when Turnstile is enabled.

Data Processed

IP address, user agent, TLS fingerprint, sitekey, origin, and further technical signals.

Legal Basis

Art. 6(1)(f) GDPR; legitimate interest in spam and abuse protection.

International Transfers

Processing may take place outside the EU; safeguarded by a DPA, Data Privacy Framework, and standard contractual clauses where required.

More Information

1. Controller

The controller for personal data processed through this website is:

Aurillia, Adrian Dever. Contact: info@aurillia.de, +49 170 3440633.

2. Hosting and Technical Delivery via Vercel

This website is delivered through Vercel. Technical access data may be processed when pages are requested, including IP address, date and time, requested URL, referrer, browser and device information, and server logs.

This processing is necessary for secure, stable, and fast delivery of the website and is based on Art. 6(1)(f) GDPR.

3. Contact Form and Project Inquiries

If you use the contact form or contact us by email or phone, we process the information you provide, including name, email address, phone number, company, current website, timeline, project type, and message.

The data is used to answer your inquiry, assess a potential project, ask follow-up questions, and communicate about it. The legal basis is Art. 6(1)(b) GDPR where the inquiry relates to a potential contract, otherwise Art. 6(1)(f) GDPR.

4. Lead Storage and Usage Logs via Supabase

Project inquiries and voluntarily provided contact details may be stored in Supabase so that requests can be handled properly.

If the optional AI assistant is enabled, technical usage data such as timestamp, rough inquiry type, token usage, and a pseudonymized fingerprint may be logged for abuse prevention and cost control.

5. Optional AI Assistant via OpenAI

The chat assistant is an optional first-step project guidance tool. If enabled, your chat messages are sent to OpenAI to generate a reply and check for abusive content.

Please do not enter sensitive data, passwords, confidential customer data, or trade secrets into the chat. Contact details are stored only if you voluntarily provide them in a project context.

The AI assistant does not make legally binding decisions about you and does not replace individual advice or a concrete offer.

6. Email Delivery via Resend

Resend may be used to forward contact form inquiries by email. The data required for delivery is processed for that purpose.

Depending on configuration, messages may also be forwarded internally. The legal basis is handling your inquiry under Art. 6(1)(b) or Art. 6(1)(f) GDPR.

7. Bot and Spam Protection via Cloudflare Turnstile

The contact form may use Cloudflare Turnstile when this protection is technically enabled. Turnstile helps detect automated or abusive form usage.

Technical signals such as IP address, user agent, TLS fingerprint, sitekey, origin, and similar security data may be processed. The legal basis is Art. 6(1)(f) GDPR.

8. Local Browser Storage

The website may store functional preferences such as the selected color theme in your browser's local storage. This is used only for usability and is not tracking.

The website currently does not set marketing cookies or external analytics cookies.

9. Fonts

Fonts are served by the application itself. The browser does not need to request Google Fonts directly to display them.

10. Retention

Personal data is retained only as long as necessary to handle the inquiry, communicate about a project, prevent abuse, or comply with statutory retention obligations.

Data that is no longer required is deleted or anonymized.

11. Your Rights

Subject to the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability, and objection to certain processing.

You also have the right to lodge a complaint with a competent data protection supervisory authority.

12. International Transfers

Some service providers are based or technically process data outside the European Union. Where required, appropriate safeguards such as data processing agreements, Data Privacy Framework certifications, and standard contractual clauses are used.

13. Requirement to Provide Data and Automated Decisions

Providing contact and project information is voluntary. Without contact details needed for a reply or without sufficient project information, we may not be able to handle your inquiry.

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

14. Changes

This privacy notice may be updated if features, providers, or legal requirements change.

AURILLIA

Aurillia builds clear websites, selected mobile extensions, and digital surfaces that explain better, sell more clearly, and remain useful after launch.

Currently open for selected web projects.

Services

What we handle

Structure & copyDesign systemNext.js buildSEO basicsLaunch & care

Aurillia

German / EnglishRemote from GermanyReply in 1-2 business days

Project on your mind?

Send the current site, a rough idea, or the places where the experience is getting stuck.

Get in touch

© 2026 Aurillia.