Legal
This notice explains how personal data is processed when you use the Aurora DSP website, customer account, store and support services.
Last updated: 18 July 2026
1. Data controller
CORIUM DIGITAL Spółka z ograniczoną odpowiedzialnością, ul. Sielska 17A, lok. –, 60-129 Poznań, Poland, legal form: spółka z ograniczoną odpowiedzialnością (Sp. z o.o.), KRS 0001154309, REGON 540854110, NIP / EU VAT ID PL 7792583468, is the controller of personal data processed for Aurora DSP. Contact: contact@auroradsp.com.
2. Data we process
Depending on how you use the service, we may process identification and contact data, account credentials, company and EU VAT information, orders, payments, recurring billing and refunds, licences and device activations, download history, support correspondence, consent records, IP address and technical security logs.
3. Purposes and legal bases
- creating and maintaining accounts, fulfilling orders, delivering software and managing licences — performance of a contract;
- tax, accounting, KSeF, consumer-law and record-keeping obligations — compliance with legal obligations;
- fraud prevention, service security, diagnostics and defence of claims — legitimate interests;
- newsletters, partner offers and non-essential analytics — consent where consent is required.
4. Recipients and service providers
Data may be shared only as necessary with hosting and infrastructure providers, payment providers selected at checkout, email and customer-support providers, accounting and tax systems including KSeF where legally required, public authorities and professional advisers. Each provider receives only the data required for its role. Card details are entered into and processed by the selected payment provider; Corium Digital does not need to store the full card number.
5. International transfers
Where a service provider processes data outside the European Economic Area, we use an applicable legal transfer mechanism, such as an adequacy decision or Standard Contractual Clauses, together with appropriate safeguards.
6. Retention
Account and entitlement data is retained while the account and product rights remain active. Transaction and tax records are retained for periods required by law. Security logs and support records are retained only for the period necessary for their purpose or the defence of claims. Consent records are retained so that we can demonstrate when and how a choice was made.
7. Your rights
You may request access, correction, deletion, restriction, portability or objection where the relevant legal conditions apply. You may withdraw consent at any time without affecting processing performed before withdrawal. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland.
Registered customers can use Personal data after signing in. You may also contact us by email.
A practical summary of GDPR requests and identity verification is available on the GDPR and Data Rights page.
8. Cookies and analytics
Essential cookies support login, cart, checkout, security and language or currency settings. Non-essential analytics or marketing technologies are used only according to the choices presented by the consent interface.
9. Automated decisions
Security and payment systems may automatically flag unusual activity for review. Aurora DSP does not use customer data for decisions producing legal or similarly significant effects without the safeguards required by law.
10. Changes
We may update this notice when services, providers or legal requirements change. The current version and update date will remain available at this address.