Last updated: November 10, 2025

Data Controller

AURA
Chemin de Pégran 4c, 1588 Cudrefin, Switzerland
contact@auraofficial.ch

What data do we collect?

Simple visitors (just browsing)
→ Absolutely nothing personal.
We do not use cookies that identify you.
We only use essential technical cookies (session ID) and anonymous analytics via Google Analytics 4 with IP anonymisation and without cross-site tracking.
No advertising, no profiling, no sale of data.

Talents who purchase a book
→ When you place an order, we collect:

Full name, date of birth, address, phone, e-mail
All content you upload (photos, videos, measurements, biography, social links)
Payment data (processed exclusively by Stripe)
Invoices and correspondence

Why do we process your data ? (legal basis)

We only process your personal data for the following clearly defined purposes and on the following legal bases (Swiss FADP / GDPR):

To create, host and maintain your personalised portfolio website
Legal basis: performance of the contract with you
To issue invoices and process payments
Legal basis: performance of the contract + legal obligation (Swiss accounting law)
To communicate with you (updates, support, reminders)
Legal basis: performance of the contract + legitimate interest
To defend our rights in case of dispute or non-payment
Legal basis: legitimate interest
To generate anonymous website statistics (Google Analytics 4 – IP fully anonymised)
Legal basis: legitimate interest (data anonymised from the start – no personal identification possible)

No other use. No marketing. No sale of data.

How long do we keep your data?

Book content: as long as you are a paying client + 12 months after termination (licence Terms of Sale)
Invoices: 10 years (Swiss accounting law)
ID document: max 30 days after identity verification
Analytics: 14 months max (GA4 default)

Who has access?

Our four partners (strict internal access)
Hostinger (EU servers – DPA signed)
Stripe (payment – PCI-DSS)
Google Analytics 4 (anonymised)

No sale, no transfer to third parties for marketing.

Security

TLS/HTTPS encryption

Your rights (LPD art. 25 / RGPD art. 15-22)
You may at any time, free of charge:

Access your data
Rectify
Delete (except invoices)
Restrict processing
Object
Data portability (portfolio zip on request)

Contact: contact@auraofficial.ch

Governing law

Swiss Federal Act on Data Protection (FADP).
For EU residents: GDPR applies in addition.
Competent authority: Swiss Federal Data Protection and Information Commissioner (FDPIC).
Jurisdiction: courts of the Canton of Vaud.