Privacy Notice

1. Introduction and scope

This Privacy Notice applies to personal data that we collect and process when you visit the Aurelius website, subscribe to updates where available, or submit enquiries through our online forms.

It does not extend to separate client relationships, mandates or transactions which may be governed by additional or different privacy terms set out in dedicated documentation or agreements.

2. Categories of personal data we may collect

Depending on how you interact with our website, we may collect and process the following categories of personal data:

• Identification and contact details (for example name, business email address, telephone number, organisation).
• Information relating to your enquiry or mandate (for example sector focus, type of transaction, role within your institution).
• Technical and usage data (for example IP address, browser type, device identifiers, date and time of access, pages visited).
• Communication metadata (for example correspondence history, time stamps and internal notes linked to your enquiry).

We generally collect personal data directly from you. In limited cases, we may supplement information using publicly available sources (for example professional registries, corporate websites or regulatory filings).

3. Purposes of processing and legal bases

We process personal data only where we have a valid legal basis to do so and for clearly defined purposes, which include in particular:

• Responding to your contact or mandate enquiries and maintaining a record of our communications.
• Operating, monitoring and improving our website, including for security, analytics and fraud-prevention purposes.
• Complying with legal, regulatory or supervisory obligations applicable to Aurelius.

Depending on the context, the relevant legal bases may include the performance of pre-contractual steps at your request, our legitimate interests in operating a secure and informative website, or compliance with legal obligations.

4. Recipients of data and international transfers

Access to personal data is restricted to those persons within Aurelius and selected service providers who need the information in order to perform their tasks, such as IT hosting, website analytics or client relationship management.

Where data is transferred to service providers or partners in other countries, we take appropriate steps to ensure that an adequate level of data protection is maintained, for example by relying on recognised transfer mechanisms or contractual safeguards, where required by law.

5. Data retention and information security

We retain personal data only for as long as necessary to fulfil the purposes described in this Notice or to comply with legal and regulatory requirements (including applicable retention periods for business correspondence and records).

We implement technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse or alteration. While no system is entirely risk-free, we seek to maintain security standards that are appropriate in a banking and capital markets context.

6. Your data protection rights

Subject to applicable law and certain limitations, you may have rights in relation to your personal data, which can include in particular:

• The right to obtain information about whether we process your personal data and to request a copy of such data.
• The right to request rectification, erasure or restriction of processing of your personal data.
• The right to object to certain processing activities, and the right to lodge a complaint with a competent data protection authority.

If you wish to exercise any of these rights, please contact us using the details provided in the “Contact” section below. We may need to verify your identity before responding to your request.

7. How to contact us and updates to this Notice

If you have questions about this Privacy Notice or the way Aurelius handles personal data, please reach out to us via the details provided on the Contact page, clearly indicating that your request relates to data protection.

We may update this Privacy Notice from time to time, for example to reflect changes in regulation, our services or our internal processes. The version published on this website is the one currently in force.