AURIS CONSULTING, LEGAL AND TAX S. L. P. (hereinafter AURIS) AURIS, as the data controller and owner of this website, informs users about the processing of their personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and the Organic Law 3/2018 (LOPDGDD).

The aim of this policy is to provide you with clear and transparent information about how we process your personal data, for what purpose we do so, what your rights are and how you can exercise them.

Us, responsible for the processing of your data	IdentityAURIS LEGAL AND TAX CONSULTING SLP.  NIF: B65951055 Registered office: Passeig de Gràcia nº47, floor 1, 08007, Barcelona Email: rgpd@auris.legal
Our Data Protection officer (DPD)	If you have any questions, doubts, or suggestions regarding how we use your personal data, you can contact us. to the Data Protection Officer through the e-mail address:  xavi@auris.legal

What type of information about You we collect?

The personal data we collect from users and customers can be grouped according to the following categories:

• Basic and contact information: such as name, surname, billing address, email and telephone number.  
• Financial and economic data: information on payments, collections, billing and business transactions.
• Professional and employment dataInformation about your professional profile or career path, especially in selection processes.
• Technical data: IP address, browser, operating system, cookies and website usage preferences.
• Marketing and communication preferences: consent to receive information or newsletters and the channel of your choice.
• Images captured by video surveillance cameras: in case of accessing our facilities.
• Special categories of data: only when strictly necessary for the provision of legal services.

How do we collect your personal data?

AURIS obtains personal data primarily from interested parties when they establish direct contact with us. This may occur, for example, when a person requests information about our services, contacts the firm by phone or email, completes a form on our website, or formalizes a contract for legal or tax services.

We may also collect personal information when you submit a resume or participate in a recruitment process, in which case the data is used exclusively for professional assessment purposes and is kept for a limited period.

In addition, AURIS can obtain data from publicly accessible sources, such as commercial or property registries, or from authorized third parties, such as financial entities, public administrations or the interested party's own employer, always within the legal framework and with the corresponding guarantees.

Technical information may also be collected automatically through cookies or similar technologies while browsing our website, for analytical purposes or to improve the user experience. This information is processed in accordance with our Cookie Policy.

What purpose we treat your personal information?

Purpose of processing: Why do we collect your information?	Legal basis for processing your personal information
Provide our services to you, manage fees, accept payments and collections due	1. Contractual execution  2. In one's own legitimate interest (for example, to manage potential non-payments)
Register as a web user or a new customer	1. Express consent of the interested party 2. Contractual execution
To manage our relationship with our customers, which includes: 1.- To notify you of changes to our contracting conditions or policies.  2. Request that they complete a survey or rate our services	1. Contractual execution  2.- Compliance with a legal obligation 3. In our own legitimate interest (to update our records and to know the opinion of our clients about our services)
To send commercial communications, newsletters, Newsletters and advertising, for any communication channel	1.- Express consent of interested party  2.- In one's own legitimate interest (provided one has not expressed a wish to stop receiving communications, 'opt-out')
Respond to inquiries and/or provide information requested by the interested party, including the sending of budgets	1.- Legitimate self-interest  2. Contractual execution  3.- Consent of the interested party  4.- Fulfillment of a contractual obligation
Manage the interplay of the users in our social networks	1.- Compliance with a legal obligation (for example, to remove offensive, racist, obscene or defamatory comments; maintain an environment of respect and integration, preserve the privacy of minors, etc.)  2. Legitimate interest of our own (when we remove third-party advertising from our networks, for example).
Use analytic data to improve the web browsing experience, implement marketing strategies and optimize recruitment processes through the use of cookies.	1.- Legitimate self-interest  2. Consent of the interested party (by accepting the use of analytical cookies, for example)
To administer and protect our business and our web site. This includes the detection of problems of navigation, data analysis, testing, web, etc	1.- Compliance with a legal obligation  2. Legitimate self-interest (running our company, providing security for our networks, preventing fraud, etc.)
Suggest and recommend services that might be of interest to you	In legitimate interest (to grow our business)
Provide personal information to the authorities or by court order	Compliance with a legal obligation
Ensure greater safety for our physical facilities (installation of CCTV/ video surveillance, access control)	In legitimate interests and in the interests of third parties. For example, to detect the commission of an act harmful to our employees or customers.
Update and enhance our customer records	1.- In compliance with a legal obligation  2.- In execution of a contract  3.- In legitimate interest (to verify that we can remain in contact with our clients for matters related to the services provided).
To ensure safety in the workplace, management, personal and employability of candidates	1.- In compliance with a legal obligation 2. In our own legitimate interest and that of third parties. To improve the experience of our employees in the performance of their duties.
Suggest and recommend services that might be of interest to you	In legitimate interest
Respond to potential claims	Legitimate interest
Provide a complaint form to the users who request it through the user support (contact form, phone or e-mail)	Legal obligation
Monitoring of the procedure for the online dispute resolution of the European Commission, in particular under the platform ODR: http://ec.europa.eu/consumers/odr/ Follow-up of complaints from users and proceedings before Agencies of Consumption (registry key identification)	Legal obligation

Use of Artificial Intelligence (AI) tools

Within the framework of certain projects and services, AURIS may employ Artificial Intelligence (AI) tools with the aim of increasing the efficiency, accuracy and quality of both its internal processes and the legal and administrative services provided to its clients.

Among these tools is ChatGPT, developed by OpenAI, used exclusively for professional purposes and under strict guarantees of confidentiality, security, and human oversight. These tools can be used, among other things, for tasks such as assisting in the drafting of legal documents, analyzing texts or information, generating reports, and optimizing administrative or communication procedures.

The processing of personal data using AI tools is carried out only when necessary for the performance of the contracted service and always in accordance with a legitimate legal basis and the principles of Regulation (EU) 2016/679 (GDPR). Under no circumstances are personal data used to train AI models, nor are automated decisions made that produce legal effects or significantly affect data subjects.

AURIS guarantees that all use of AI is subject to human review controls, appropriate technical and organizational security measures, and an impact assessment when required by current regulations.

Data storage and security in the use of AI

Personal data processed through ChatGPT and other AI tools is processed securely and in accordance with Regulation (EU) 2016/679 (GDPR) and the Organic Law 3/2018 (LOPDGDD).

The tools used by AURIS operate on infrastructures that meet high standards of security and confidentiality. In some cases, data may be temporarily hosted on OpenAI servers or other providers located in the European Economic Area (EEA) or in countries that guarantee an adequate level of protection according to Article 46 of the GDPR.

AURIS maintains the necessary data processing agreements with the technology providers involved in the process, ensuring that they act as data processors and apply the appropriate technical and organizational measures to preserve the confidentiality and security of the information.

For more information on the use of AI or to exercise your data protection rights, you can write to rgpd@auris.legal.

Who we may share your personal data?

AURIS may share personal information with service providers acting as data processors, with banking entities for payment management, or with competent authorities when there is a legal obligation.

All third parties with whom AURIS collaborates are subject to confidentiality agreements and comply with the technical and organizational measures required by data protection regulations.

Where do we store your personal information? 

All the information that you provide to us, through this website as well as through other channels or channels, it will be hosted on servers in the AURIS, and One Drive of Microsoft Office. These servers are hosted within the European Economic area. 

How long will we keep your personal data?

Your data will be kept for as long as you maintain a business relationship with us or until you exercise your right to cancellation, objection, or restriction of processing. However, we will retain certain identifying personal data and traffic data for the maximum period of 2 years in case it is required by the Judges and Courts or to initiate internal actions arising from the improper use of the website.

Also, we inform you that our policy of conservation of information conform to the time limits that mark the different legal responsibilities to effects of prescription: 

-As a general rule:

In virtue of what is established in article 30 of the Code of Commerce, and unless other criteria, all of the documents and/or company information will be retained during 6 years ago. 

This affects all the documentation, accounting, tax, labor, or commercial, including the correspondence.

-Specific deadlines:

Our company also must score a minimum time limits, depending on the type of data concerned, and according to the different periods of prescription, which must know each of the departments. 

In this box relate to the periods of limitations that affect or may affect our organization:

Subject	Prescription	Rules
Labour, for the purposes of offences	3 years	Art. 4.1 RD 5/2000
Social security, for the purposes of offences	4 years	Article 4.2 Royal Decree 5/2000
The prevention of Occupational Risks, the effects of violations	3 years if the offense is serious	Art. 4.3 RD 5/2000
	5 years if the offense is very serious
Tax effects of tax debts	4 years	Art. 66 Law 58/2003
Tax effects of checks fees offset or deduction applied	10 years	Art. 66 bis Law 58/2003
Accounting and business	6 years ago	Article 30 of the Commercial Code
Crimes against Public Finances and Social Security	10 years	Art. 131 WHAT 10/1995

Shall not be subject to decisions based on automatic processing that produce effects on your data.

Our communications

All personal information that you communicate to us will be incorporated into our information systems. If you agree to this privacy policy, means that it gives AURIS express consent to perform the following activities and/or actions, while not tell us otherwise:

• To send you commercial communications, promotional and direct marketing through any means of communication enabled, to inform you of the activities, services, promotions, advertising, news, offers, and other information about related products and services with us. 
• The sending of electronic communications, provided that you have subscribed to our NEWSLETTER, and has not been discharged.
• The preservation of the data during the time periods provided in the applicable provisions.

How can you stop receiving marketing communications (opt-out)?

You may revoke any express consent you have given us to send you marketing information at any time. To do so, you can unsubscribe using the opt-out option when available on our website, or by sending us an email with the subject line “unsubscribe” to rgpd@auris.legal

According to the LSSICE, never perform SPAM, therefore, we will not send you marketing emails if you have not been requested or authorized by You, however, in all of our communications, you will have the possibility to revoke his consent. 

We will not discuss your personal data for any other purpose than those described except by legal obligation or court order.

User Responsibility – Declaration of Truthfulness

By providing us with your personal information through electronic channels, the user declares that he is above 14 years of age and that all information provided to AURIS are true, accurate, complete and up to date. For these purposes, the user confirms that responds to the accuracy of the data communicated and will keep conveniently updated the information in a way that responds to their real situation, and being responsible for false information and inaccurate that it could provide, as well as for damages and losses, direct or indirect, that may arise therefrom. 

If you send us your resume

In the event that you want to get your CV via our email, we hereby inform you that the data supplied will be treated to make him a participant in the selection processes that may exist, carrying out an analysis of your professional profile with the aim of selecting the application more suitable for the eventual vacancy.  

We do not accept cvs submitted through other channels (for example, delivered by hand on paper). In case of any change in the data, please notify us in writing as soon as possible, in order to keep your data properly updated. 

Resumes will be kept for a maximum of two years, after which they will be securely destroyed and all included data deleted. We guarantee complete confidentiality. Therefore, after this period, if you wish to continue participating in any selection processes, you will need to resubmit your resume.  

The data may be processed and/or communicated to the companies in our group during the time of conservation of their curriculum and for the same purposes previously reported. 

How do we keep your information safe?

We take very seriously the protection of your data. For this reason, we guarantee the implementation of security measures, controls and procedures of physical, organizational and technological, are appropriate to prevent their information from being lost accidentally, to be used or accessed maliciously. 

We limit access to your data to entities and persons entitled to it, and we make sure to train all of our staff properly. All persons involved in the processing of personal data are subject to a duty of confidentiality.

Additionally, we have technical procedures in place to respond to any suspected data security breach. If necessary, we will notify you, as well as the supervisory authority (the Spanish Data Protection Agency - AEPD), in accordance with applicable regulations.

How can you exercise your rights ARCOLP?

Both the RGPD as the rule of transposition to the legality hispaniola (LOPDGDD), we guarantee the exercise of the following rights. You can exercise at any time and always for free:

Right of access	The right to receive a copy of your personal information.
Right to rectification	The right to request the correction of errors in personal information.
Right of cancellation/deletion (right to be forgotten)	The right to request that we remove your personal information - in certain situations.
Right of limitation	The right to request the restriction of the processing of their data.
Right of opposition	The right to oppose: 1.- to the processing of your data for direct marketing (including profiling). 2. In certain circumstances, we may continue to process your data. For example, processing based on our legitimate interest.
Right to portability	The right to receive your personal information in a structured form, in a human-readable format and/or transmit this data to a third party – in specific situations.
Automated individual decisions	Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects or significantly affects.

To exercise any of the aforementioned rights, you can send your request to the email address specifically enabled for this purpose: rgpd@auris.legal

You can also contact our DPD: xavi@auris.legal

You must attach to your application information on what you need, with accuracy and, in any case, proof of his identity, valid in law.

The supervisory authority in data protection 

We hope that we can resolve any question or doubt that may be of concern in relation to your personal information. But if you want to lodge a complaint before the competent authority, has the right to do so. 

In Spain, the highest authority in matters of data protection is the Spanish Agency for Data Protection (AEPD).

https://www.aepd.es/es – Tel: 91 266 35 17.

Changes to this privacy policy

AURIS reserves the right to modify this policy to adapt it to legislative or jurisprudential developments.