Privacy Policy
As of: 03.08.2026
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
David Wessel, acting as a sole trader (autónomo) under the business name „Auris Digital“
Calle Cruz Verde 35
38410 Los Realejos, Santa Cruz de Tenerife, Spain
NIF: Z4121563Z
Email: office@auris-digital.com
No data protection officer has been appointed, as the statutory requirements for doing so are not met.
2. Applicable law
The processing of personal data via this website is governed by the GDPR, the Spanish data protection act (Ley Orgánica 3/2018, LOPDGDD), and, for the use of cookies and similar technologies, Art. 22.2 of the Spanish Information Society Services Act (Ley 34/2002, LSSI-CE).
3. Visiting the website (server log files)
This website is hosted by Hostinger operations, UAB, Švitrigailos g. 34, LT-03230 Vilnius, Lithuania, with servers located in Germany. It is a static website with no content management system and no database. When you visit, data is automatically stored in server log files: the page accessed, date and time, amount of data transferred, referrer URL, browser type and version, operating system, and IP address.
Purpose: technically error-free delivery of the website, stability and security. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning website). Retention period: a maximum of 7 days, after which the data is automatically deleted.
Hostinger is established in the EU; no transfer to third countries takes place in connection with pure hosting. A data processing agreement under Art. 28 GDPR is in place with the provider.
4. Cookies and consent
This website uses cookies and similar technologies. Cookies are small text files stored on your device.
Technically necessary storage is required for the website to function – specifically, storing your cookie choice so that we do not have to ask you again on every page. It takes place without consent; the legal basis is Art. 6(1)(f) GDPR and/or Art. 22.2 LSSI-CE.
All other cookies – in particular for statistics and marketing (sections 7–8) – are set exclusively after your express, prior consent (Art. 6(1)(a) GDPR). These services only load technically once you have agreed in the cookie banner.
On your first visit to the website, a cookie banner appears in which you can accept or decline the individual categories. Both options are presented as equally weighted. You can change or withdraw your choice at any time via the „Cookie settings“ link in the website footer.
To manage your consent we use no third-party solution. Your choice is stored exclusively locally in your browser (in local storage, under the key „auris-cookie-consent“), and only the record of which categories you allowed. No IP address or other personal data is collected or transmitted to third parties in this process. The record stays on your device until you change it via „Cookie settings“ in the footer or clear your browser storage.
You can also block or delete cookies via your browser settings. This may limit the functionality of the website.
5. Contact form
If you write to us via the contact form, we process the data you enter (name, email address, company/website, and your information about your current marketing situation) in order to handle your inquiry.
Legal basis: Art. 6(1)(b) GDPR, to the extent the inquiry is directed at concluding or performing a contract; otherwise Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries). Retention period: until your inquiry has been finally processed; beyond that, only to the extent statutory retention obligations apply.
Providing the data is voluntary; however, without it we cannot respond to your inquiry.
6. Booking an appointment via an external provider
To arrange calls, we link to an external booking service: Calendly LLC, 271 17th St NW, Atlanta, GA 30363, USA. This service is not embedded in our website. Clicking the relevant link takes you to Calendly's site; data collected there is processed by the provider under its own privacy policy.
If you book an appointment with us via this service, we receive the data you provide (including name, email address, chosen appointment) in order to carry out the appointment. The legal basis is Art. 6(1)(b) GDPR. A data processing agreement under Art. 28 GDPR is in place with the provider.
7. Google Analytics 4
This website uses – exclusively with your consent – Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“).
Google Analytics uses cookies and similar technologies to evaluate use of the website. Data collected includes pages visited, time spent, approximate location (based on a shortened IP address), device type, operating system, and referral source. The IP address is shortened before being stored.
As long as you have not consented, Google Analytics is not loaded at all: no data is transmitted to Google and no cookies are set. The service is only loaded after your active consent in the cookie banner. In doing so we use Google Consent Mode v2 – your consent status is explicitly transmitted to Google, so that analytics and advertising cookies are only used to the extent you actually consented to. If you withdraw your consent, the service is no longer loaded on your next visit.
Purpose: traffic measurement, analysis of usage behavior, improving our offering. Legal basis: Art. 6(1)(a) GDPR (consent), Art. 22.2 LSSI-CE. Retention period: up to 14 months. Withdrawal: at any time via „Cookie settings“ in the footer.
A data processing agreement is in place with Google. For more information, see section 9 (third-country transfer) and policies.google.com/privacy
8. Advertising and conversion tracking
We currently use no advertising or conversion tracking whatsoever on this website. In particular, no Google Ads conversion tracking, no remarketing and no Meta Pixel (Facebook/Instagram) are embedded. No data is transmitted to Google, Meta or any other advertising network for advertising purposes, and no audience building or cross-site recognition takes place.
The cookie banner already contains a „Marketing“ category so that, should we introduce such an integration in future, it can only happen after your express prior consent. As long as no such services are embedded, selecting this category has no technical effect.
We will update this privacy policy before activating any such technologies.
9. Transfers to third countries
Google (section 7) also processes data in the USA. The USA does not have a level of data protection fully comparable to the EU; in particular, US authorities may, under certain conditions, access personal data without data subjects being aware of it or able to effectively challenge it.
We base the transfer on the European Commission's adequacy decision for the EU-US Data Privacy Framework of 10 July 2023, under which Google LLC is certified (register: dataprivacyframework.gov). In addition, the EU Commission's Standard Contractual Clauses (Art. 46(2)(c) GDPR) apply under the data processing agreement.
Since Google Analytics is only loaded after your consent, by selecting the „Analytics“ category you also consent to the associated transfer of data to the USA (Art. 49(1)(a) GDPR). Without your consent, no such transfer takes place.
Hostinger (section 3) is an EU company and operates its servers in Germany; no transfer to third countries takes place in this respect. Consent management does not involve any third-party provider (section 4), so no data transfer occurs there either.
10. Recipients and processors
We only share personal data to the extent necessary to provide our services, where you have consented, or where we are legally obliged to do so. Service providers we use (hosting, email, appointment booking and – subject to your consent – web analytics) are contractually bound under Art. 28 GDPR and process data exclusively on our instructions.
We do not sell personal data. We do not carry out automated decision-making, including profiling, under Art. 22 GDPR.
11. Data processing on behalf of our clients
Where, as part of our consulting and marketing services, we process personal data on behalf of our clients (e.g. tracking setup, analytics, CRM, advertising accounts), we act in that respect not as controller but as processor under Art. 28 GDPR. This is based on a separate data processing agreement with the respective client; the client remains the controller.
We provide clients with an overview of the sub-processors we use as part of the respective data processing agreement, and on request at any time.
This section applies exclusively to our client projects, not to the processing of your data when visiting this website.
12. Your rights
You have the right at any time to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and the right to object to processing based on legitimate interests (Art. 21). You may withdraw any consent given at any time, with effect for the future.
To exercise your rights, an informal message to office@auris-digital.com is sufficient.
Right to lodge a complaint: the supervisory authority responsible for us is the Spanish data protection authority:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid, Spain
www.aepd.es
Under Art. 77 GDPR, you may also contact the supervisory authority of your habitual residence or place of work.
13. Data security
We take appropriate technical and organizational measures under Art. 32 GDPR to protect your data against loss, misuse, and unauthorized access. The website is delivered via an encrypted TLS connection (https).
14. Changes to this privacy policy
We update this privacy policy whenever our website, the services we use, or the legal situation change. The version published here applies at any given time.
This is a non-binding English translation of our German Datenschutzerklärung, provided for convenience; in case of any discrepancy, the German version is authoritative.
Auris Digital · David Wessel · Calle Cruz Verde 35, 38410 Los Realejos, Santa Cruz de Tenerife · NIF Z4121563Z · office@auris-digital.com