Privacy policy
Courtesy translation. The legally binding version of this document is the Spanish one, available at aureasolution.com/privacidad.html. In case of any discrepancy, the Spanish text prevails.
Data controller: Antonio Aguilar García (AUREA), Spanish tax ID 76667729N, Barranco 25, 23686 Mures (Jaén), Spain · info@aureasolution.com.
What data we process and why
We process the data you give us voluntarily when you get in touch:
- Phone, WhatsApp or email: whatever you include in your message, so we can answer your question or prepare the audit you asked for.
- The Engine Room: your email address, to send you the monthly newsletter. Only if you sign up.
- Audit booking: name, email and whatever you provide when booking, so we can run the session.
We do not build profiles or make automated decisions using your data.
Legal basis
Your consent (GDPR Article 6.1.a) for the newsletter, and steps taken at your request prior to entering a contract (Article 6.1.b) for answering enquiries and preparing audits. You can withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand.
How long we keep it
Contact data is kept for as long as the relationship lasts and afterwards for any applicable statutory limitation periods. Newsletter data is kept until you unsubscribe: every issue includes a link to do so.
Who else accesses your data
We do not sell or hand over your data. The suppliers strictly needed to deliver the service do take part, acting as processors under a signed agreement in line with GDPR Article 28:
- The web hosting provider for aureasolution.com.
- The email provider through which we receive your messages.
- WhatsApp (Meta Platforms Ireland Ltd.), if you choose that channel. Meta may transfer data to the United States under the EU-US Data Privacy Framework. If you would rather avoid that, email or call us instead.
- Google Ireland Ltd., only if you book through the calendar embedded on the free audit page.
Beyond those cases, no international data transfers take place. The systems AUREA deploys for its clients run on the client's own infrastructure and backups are stored encrypted.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent, by writing to info@aureasolution.com stating which right you wish to exercise. We will reply within one month.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency: aepd.es.
Security
We apply technical and organisational measures to protect your data: encryption in transit (HTTPS), encrypted backups and access control. No system is infallible, but we work to keep the risk as low as is reasonable.
Last updated: 31 August 2026.