Privacy Policy

1. Data Controller

aurenzafeature Oy (Business ID: 2984756-3)
Mannerheimintie 12, 00100 Helsinki, Finland
Email: privacy@aurenzafeature.com
Phone: +358 9 6842 9100

2. Scope

This Privacy Policy describes how aurenzafeature Oy ("aurenzafeature", "we", "us") collects, uses, and protects personal data when you visit aurenzafeature.com, use our contact forms, or participate in The Circle membership programme. We comply with the EU General Data Protection Regulation (GDPR) and applicable Finnish data protection legislation.

3. Data We Collect

We may collect the following categories of personal data:

• Contact information: name, email address, telephone number — when you submit our contact form or apply for Circle membership
• Technical data: IP address, browser type, device information, pages visited — collected automatically via cookies (see our Cookie Policy)
• Membership data: tier level, preferences, communication history — for Circle members
• Correspondence: content of messages you send us

4. Purpose and Legal Basis

We process your data for the following purposes:

• Responding to enquiries and providing concierge services (legitimate interest / contract performance)
• Managing Circle membership (contract performance)
• Improving our website and editorial content (legitimate interest)
• Complying with legal obligations
• Sending newsletters and seasonal guides (consent — you may withdraw at any time)

5. Data Retention

Contact form submissions are retained for 24 months. Circle membership data is retained for the duration of membership plus 12 months. Technical logs are retained for 90 days. You may request deletion of your data at any time, subject to legal retention requirements.

6. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who assist with website hosting, email delivery, and analytics (bound by data processing agreements)
• Sun City Resort partners, only when you explicitly request a booking or arrangement through our concierge
• Authorities when required by law

7. International Transfers

Your data is primarily processed within the European Economic Area. If data is transferred outside the EEA (e.g., to South African resort partners), we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

8. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time
• Lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi)

To exercise any of these rights, contact privacy@aurenzafeature.com.

9. Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

10. Changes

We may update this policy periodically. Material changes will be communicated via our website. Continued use of aurenzafeature.com after changes constitutes acceptance.