Privacy Policy for Aegis Aurum
Last Updated: 11 November 2025
1. Introduction
Welcome to Aegis Aurum. We are committed to protecting your privacy and handling your personal data in an open and transparent manner. This Privacy Policy explains how we, Aegis Aurum ("we", "us", "our"), collect, use, and share your personal data when you visit our website, purchase our products, or otherwise interact with us.
This policy applies to all individuals within the European Union (EU) and European Economic Area (EEA) in accordance with the General Data Protection Regulation (GDPR).
2. Who We Are (The Data Controller)
The entity responsible for your personal data (known as the "Data Controller" under GDPR) is:
Company Name: [Your Company Name, e.g., Aegis Aurum kft.]
Company Registration Number: [Your Company Registration Number]
Address: [Your Full Registered Business Address]
Email: [Your Privacy-Specific Email, e.g., privacy@aegisaurum.eu]
3. What Personal Data We Collect
We may collect, use, and store different kinds of personal data about you, which we have grouped together as follows:
Identity Data: Includes your first name and last name.
Contact Data: Includes your billing address, delivery address, email address, and telephone number.
Document Data: all data on your Hungarian ID card, Hungarian driver’s license or passport (whichever you chose to use for identification purposes), and all data of the document certifying you residence or place of stay.
Financial Data: Includes your payment card details or bank account information. Note: We do not store your full payment card details; they are processed securely by our payment gateway.
Transaction Data: Includes details about payments to and from you and other details of products you have purchased from us.
Technical Data: Includes your internet protocol (IP) address, browser type and version, time zone setting and location, and other technology on the devices you use to access this website.
4. How and Why We Use Your Personal Data
We will only use your personal data when the law allows us to. Most commonly, we will use your personal data for the following purposes and on the following legal bases:
Purpose / Activity |
Type of Data |
Legal Basis for Processing |
To process and deliver your order, including managing payments and shipping. |
Identity, Contact, Financial, Transaction |
To perform the contract we have with you. |
To manage our relationship with you (e.g., notifying you about changes to our terms or privacy policy). |
Identity, Contact |
To comply with a legal obligation; Necessary for our legitimate interests (to keep our records updated). |
To protect our business and this website from fraud and other illegal activities. |
Identity, Contact, Technical |
Necessary for our legitimate interests (to protect our assets and prevent fraud). |
To use data analytics to improve our website, products, and customer experience. |
Technical |
Necessary for our legitimate interests (to define types of customers for our products and to keep our website updated and relevant). |
To comply with legal or regulatory obligations (e.g., AML, tax and accounting laws). |
Identity, Document, Contact, Transaction |
To comply with a legal obligation. |
5. Data Sharing and Third Parties
We may have to share your personal data with certain trusted third parties to run our business, including:
Payment Service Providers to process your payments securely.
Delivery and Shipping Companies to deliver your order to you.
Professional Advisers including lawyers, bankers, auditors, and insurers who provide services to us.
Governmental Bodies and Regulators to comply with our legal obligations.
We require all third parties to respect the security of your personal data and to treat it in accordance with the law.
6. International Transfers
We primarily store and process your data within the European Economic Area (EEA). If we ever need to transfer your personal data out of the EEA, we will ensure a similar degree of protection is afforded to it by ensuring adequate safeguards are in place, as required by law.
7. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorized way. We limit access to your personal data to those employees and third parties who have a business need to know.
8. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, unless otherwise prescribed by law, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. By law, we have to keep certain information about our customers (including Contact, Identity, Financial, and Transaction Data) for a certain number of years for tax, AML, and other regulatory purposes.
9. Your Legal Rights
Under the GDPR, you have several important rights regarding your personal data. These include:
The right to be informed: You have the right to be provided with clear, transparent, and easily understandable information about how we use your information.
The right of access: You have the right to obtain a copy of your personal data.
The right to rectification: You have the right to have your personal data corrected if it is inaccurate or incomplete.
The right to erasure: Also known as 'the right to be forgotten,' this enables you to request the deletion of your personal data where there's no compelling reason for us to keep using it.
The right to restrict processing: You have rights to 'block' or suppress further use of your information.
The right to data portability: You have the right to obtain and reuse your personal data for your own purposes across different services.
The right to object: You have the right to object to certain types of processing.
If you wish to exercise any of these rights, please contact us at privacy@aegisaurum.eu.
We shall comply with the request to exercise the rights of the data subject within one month of receipt of the request. The date of receipt of the request shall not be included in the deadline.
If necessary, taking into account the complexity of the request and the number of requests, we may extend this deadline by a further two months. We shall inform you of the extension of the deadline within one month of receipt of the request, stating the reasons for the delay.
10. Cookies
Our website uses cookies to distinguish you from other users. This helps us to provide you with a good experience when you browse our website and also allows us to improve our site. For detailed information on the cookies we use and the purposes for which we use them, please see our Cookie Policy.
11. Changes to This Privacy Policy
We keep our privacy policy under regular review. Any changes will be posted on this page and, where appropriate, notified to you by email.
12. Contact and Complaints
If you have any questions about this privacy policy or how we handle your personal data, please contact us at privacy@aegisaurum.eu.
If you think that we have violated the applicable data protection requirements while processing your personal data, you may
- lodge a complaint with the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, website: https://www.naih.hu), or
- turn to the court for the protection of your data, which will hear the case in an expedited proceeding. In this case, you are free to decide whether to file your claim with the court with jurisdiction over your place of residence (permanent address) or place of stay (temporary address) or the seat of the Authority. You can find the court with jurisdiction over your place of residence or place of stay at https://birosag.hu/ugyfelkapcsolatiportal/birosag-kereso. According to the Authority's headquarters, the Metropolitan Court has jurisdiction over the lawsuit.
However, we would appreciate the chance to deal with your concerns first.