Privacy policy

This website is deliberately built lean. It sets no cookies, uses no analytics or tracking services and loads nothing from third-party servers. Fonts and graphics come from our own server too. That is why there is no consent banner for you to click away here.

We process personal data in three cases only: what is technically necessary when a page is requested, when you write to us, and when you subscribe to the newsletter. Exactly two service providers are involved: our host and the service that sends the newsletter. Both may transfer data to countries outside the EU; the safeguards that apply are set out in the relevant sections. We embed no other external services.

The controller responsible for data processing on this website is:

Muhammad Asif
Aurenta Media
Käthe-Dorsch-Ring 18
12353 Berlin
Germany
Email: kontakt@aurentamedia.com

This website is hosted with Network Solutions, a service of Newfold Digital, Inc., 5335 Gate Parkway, Jacksonville, FL 32256, USA. The provider supplies the server the pages sit on and processes personal data on our instructions in doing so. A data processing agreement under Article 28 GDPR is in place with the provider. Bird & Bird GDPR Representative Services SRL, Avenue Louise 235, 1050 Brussels, Belgium, is appointed as its representative in the European Union under Article 27 GDPR.

Every time a page is requested the server automatically stores log files containing your IP address, the date and time of access, the address requested, the page visited before, the volume of data transferred, the HTTP status code and details of your browser and operating system. This data is needed to deliver the site, keep it running reliably and fend off attacks. The legal basis is our legitimate interest in a secure and functioning service under Article 6 (1) (f) GDPR.

Because the provider is based in the United States, personal data may be transferred there. The USA is not consistently regarded as a country with an adequate level of data protection. The transfer is based on the adequacy decision for the EU-US Data Privacy Framework, insofar as the provider is certified under it, and otherwise on the European Commission's standard contractual clauses under Article 46 (2) (c) GDPR. You can request a copy of these safeguards from us. Log files are deleted after seven days at the latest; if a security incident occurs we keep the affected entries until the incident has been resolved. We do not combine log files with any other source of data.

The connection to this website is encrypted with TLS. You can tell by the padlock and the “https://” in your browser's address bar.

When you email us, we process your address and the content of your message in order to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, and otherwise our legitimate interest in replying under Art. 6(1)(f) GDPR.

Providing this information is neither required by law nor by contract. It is, however, necessary for us to reply: without an address to write back to, an enquiry stays unanswered. We delete your message once your matter has been dealt with. If the enquiry turns into an engagement, the correspondence is subject to the statutory retention periods of six and ten years under commercial and tax law (Section 257 HGB, Section 147 AO).

The contact form does not send any data to us by itself. It assembles your entries into an email that opens in your own email program. Nothing is transmitted until you click send there. From that point on, what is described under “Contact by email” applies. No further services, spam protection systems or analytics are involved.

We use Brevo to send our newsletter, a service of Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, a subsidiary of Sendinblue SAS, Paris. When you subscribe, your email address is transmitted to Brevo and stored there. Brevo processes the data as our processor; an agreement under Article 28 GDPR is in place.

After signing up you receive an email with a confirmation link. You are only subscribed once you click it (double opt-in). The time and IP address of your signup and confirmation are stored as proof of your consent. No connection to Brevo is made until you click “Subscribe”.

We do not track whether you open the newsletter or click links in it. The legal basis for the processing is your consent under Article 6 (1) (a) GDPR, and Section 7 (2) no. 2 UWG for the sending itself. The only mandatory field is your email address; every other field is optional. Brevo stores the data primarily on servers in the European Union but states that it reserves the right to pass individual processing operations to recipients in the USA and India. This is based on the EU-US Data Privacy Framework and on the European Commission's standard contractual clauses under Article 46 GDPR respectively. You can request a copy of these safeguards from us.

You can withdraw your consent at any time, using the unsubscribe link in every issue or by sending us a plain email. Withdrawing is as easy as subscribing and costs nothing. The lawfulness of processing carried out up to that point is unaffected. After withdrawal we remove your address from the list. We keep the record of your consent for as long as we need it to meet our accountability obligation under Article 5 (2) GDPR.

The website remembers whether you chose the light or dark design, and German or English. This setting is kept in your browser's local storage, never leaves your device and is not sent to us.

Storing it is strictly necessary to keep the display you explicitly chose (§ 25(2) no. 2 TDDDG). You can delete it at any time through your browser. This website sets no cookies.

Under the GDPR you have the right at any time to:

• access the data stored about you (Art. 15)
• have inaccurate data corrected (Art. 16)
• have your data erased (Art. 17)
• restrict processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw any consent you have given, with effect for the future (Art. 7(3))

To exercise any of these rights, an informal email to kontakt@aurentamedia.com is enough.

You also have the right under Article 77 GDPR to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59–61, 10555 Berlin, mailbox@datenschutz-berlin.de.

We update this policy when the website or the law changes. The version published here applies.

Last updated: September 2026