1. Who is responsible for your data
The controller is Vestra Trading Ltd., company no. 97328, incorporated in the Independent State of Samoa, registered office Intershore Consult (Samoa) Limited, Intershore Suite, Le Sanalele Complex, Apia, Samoa. Vestra Trading Ltd. operates the Aurelis private members' club and this website.
Privacy contact: membership@aurelisclub.com. Where an EU representative or data protection officer is required under Article 27 GDPR, their details will be published here.
2. What this website does and does not collect
- No cookies, no analytics, no tracking. This website sets no cookies and uses no analytics or advertising tools.
- Nothing loaded from third parties. Fonts and images are served from this site. Your browser does not contact Google or any other provider when you open a page.
- One local note. When you close the cookie notice, a single value is stored in your browser's local storage so the notice does not return. It contains no personal data and is never sent to us.
- Hosting logs. The site is hosted by Vercel Inc. Like any web server, the hosting provider records technical data (IP address, time, requested page, browser type) in short-lived logs for security and operation. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
3. The membership application
If you request access, we process the details you give us in the form: name, email, phone (optional), nomination or referral, areas of interest, your note, and the fact and time that you confirmed the membership declarations.
| Purpose | Legal basis (Article 6 GDPR) |
|---|---|
| Assessing your application and eligibility, and replying to you | Steps at your request before entering a contract (6(1)(b)) |
| Administering membership once accepted | Performance of the contract (6(1)(b)) |
| Identity, sanctions and good-standing checks where required | Legal obligation, or our legitimate interest in the integrity of the club (6(1)(c), 6(1)(f)) |
| Keeping a record of the declarations you confirmed | Legitimate interest in evidencing the terms of membership (6(1)(f)) |
| News about opportunities and events beyond your own application | Only with your consent, which you can withdraw at any time (6(1)(a)) |
Providing your name and email is necessary to consider an application; the other fields are optional.
4. Who receives your data
- Service providers who act on our instructions under contract: website hosting (Vercel Inc.), email (Proton AG, Switzerland), and, where checks are needed, identity or sanctions screening providers.
- Professional advisers (legal, accounting) where necessary.
- Authorities where the law requires it.
We do not sell personal data. We do not disclose the identity of members to other members, except to facilitate an introduction that both sides have agreed to.
5. International transfers
Vestra Trading Ltd. is established in Samoa, outside the European Economic Area and not covered by an EU adequacy decision. Data you send us may therefore be processed in Samoa. For transfers out of the EEA we rely on the safeguards permitted by Chapter V GDPR, in particular standard contractual clauses with our processors, and, where no other mechanism applies, on your explicit consent given when you submit the application (Article 49(1)(a)). You may ask us for details of the safeguards in place.
6. How long we keep it
- Applications that are not accepted: up to 12 months after our decision, then deleted.
- Members: for the duration of membership and 5 years afterwards, so that the confirmed declarations and membership records remain available for legal and evidentiary purposes.
- Hosting logs: retained by the hosting provider for a short period set by its own policy.
7. Your rights
Subject to applicable law, you may ask for access to your data, its rectification or erasure, restriction of processing, and portability. You may object to processing based on legitimate interests, and you may withdraw consent at any time without affecting earlier processing. Write to membership@aurelisclub.com; we answer within one month.
You also have the right to complain to a supervisory authority. In the Czech Republic this is the Úřad pro ochranu osobních údajů (uoou.gov.cz); elsewhere in the EU, the authority of your country of residence.
8. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access limited to the people who need it. No transmission or storage is completely secure; we cannot guarantee absolute security.
9. Age
Membership is open to adults only. We do not knowingly collect data from anyone under 18.
10. Changes
We may update this Notice. The current version and its date are always shown at the top of this page. Members are told about material changes.
11. Contact
Vestra Trading Ltd., no. 97328, Samoa · Intershore Consult (Samoa) Limited, Intershore Suite, Le Sanalele Complex, Apia, Samoa · membership@aurelisclub.com
This Notice summarises, in plain language, the Privacy Notice contained in the Membership Framework. Where the two differ, the Membership Framework governs the membership relationship.