Data controller
Auror Ventures Partners SL (tax ID B93882256), registered at Av. Ventisquero de la Condesa 14, 3A, 28035 Madrid. Contact: hello@tuora.io.
When a booking is made on a business's page, that business is the controller of the booking's data, and Auror Ventures Partners SL acts as its processor, under the data processing agreement.
This policy applies under the General Data Protection Regulation (GDPR) and, for people in the United Kingdom, under the UK GDPR, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations (PECR).
Data processed
Contact details (name, phone and email), booking details and, where applicable, user account details and the billing details of client businesses.
When a business takes payment for a booking online, the payment is processed by Stripe in that business's own account. Card details are entered directly into Stripe's form and never reach Auror Ventures Partners SL.
Purposes and legal basis
- Managing bookings, including the business's promotions linked to them, and user accounts: performance of a contract.
- Emailing a business's offers to whoever asked for them when booking there: consent of the person, which can be withdrawn at any time with the link every such email carries.
- Providing and billing the service to client businesses: performance of a contract and compliance with legal obligations.
- Answering requests for information or a demo: consent of the person making the request.
- Writing to businesses to introduce the service: legitimate interest (below, under "Businesses we contact").
- Keeping the platform secure: legitimate interest.
Businesses we contact
To make our service known, we write to businesses whose work it suits, at the contact address the business itself publishes on its website. We keep the business's name, its website, that address and the page where we found it, what its website shows about how it works, and our correspondence. The legal basis is the legitimate interest of Auror Ventures Partners SL in making its service known to other businesses, and we only write to countries whose law allows it.
You can object at any time with the unsubscribe link every email carries, by replying "unsubscribe", or by writing to hello@tuora.io. If you object, we keep only your address on a do-not-contact list, so that we never write to you again. Without a reply, the data is deleted two years after our last contact.
Recipients
Each booking's data is shared with the business where it is made. Providers of technical services to Auror Ventures Partners SL, such as hosting, access it as processors. Data will not be shared with third parties unless the law requires it.
International transfers
The data is hosted in the European Union (Sweden). Data about people in the United Kingdom reaches the European Union under the UK's adequacy regulations for the European Economic Area, and data returned to a business in the United Kingdom under the European Commission's adequacy decision for the United Kingdom.
Retention
Data is kept for as long as the relationship lasts and, afterwards, for the periods the law requires.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to hello@tuora.io. You can also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) and, if you are in the United Kingdom, with the Information Commissioner's Office (ico.org.uk).
If a business processes your data through Tuora, that business is the controller, and you can contact it directly.
Cookies
This site only uses technical cookies: one to keep a session signed in and, when paying for a booking online, those Stripe sets in its payment form, needed to process the payment and prevent fraud. Being strictly necessary, they need no consent, under Spanish law or under the UK's PECR. No analytics or advertising cookies are used.
To understand how the site is used in aggregate, it uses Umami, an analytics tool that sets no cookies and does not identify visitors.