Privacy policy

Cosmolabs OÜ (trading as Aura), with registry code 17106582 and registered office at Ahtri tn 12, 15551 Tallinn, Estonia, is the controller of the personal data collected through this website.

You can contact us at any time at hola@auradesign.tech.

We only process the data you provide voluntarily:

• Contact details: name, email address and, if you provide them, company and phone number.
• The content of your messages: project description, timelines, approximate budget or any information you choose to include.
• Job applications: the data and documents you send us when applying for a position.
• Technical browsing data: IP address, device and browser type, and pages visited, in aggregate form.

• Responding to your information requests and preparing proposals — basis: your consent and our legitimate interest in handling commercial enquiries.
• Managing recruitment processes — basis: your consent.
• Complying with accounting, tax and legal obligations — basis: compliance with a legal obligation.
• Measuring site usage and improving how it works — basis: your consent for non-essential cookies.

We keep contact data while a relationship or mutual interest exists and, afterwards, for the legally required period. Speculative applications are kept for a maximum of twelve months unless you ask us to delete them sooner.

We do not sell or share your data with third parties. We use technology providers (hosting, email and analytics) acting as processors under contract and with adequate safeguards. Where a provider is located outside the European Economic Area, the transfer is covered by the European Commission's standard contractual clauses.

You can exercise your rights of access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to hola@auradesign.tech. You can also lodge a complaint with the Estonian Data Protection Authority (Andmekaitse Inspektsioon).

We apply reasonable technical and organisational measures to protect information against unauthorised access, loss or alteration, including encryption in transit and role-based access restrictions.