// 08.04 – COOKIE POLICY

Auratech

Auratech Legal Solutions, S.L.P

auratechlegal.es

TABLE OF CONTENTS

1. Information about the data controller
2. Definition and general function of cookies
3. Information about the types of cookies used and their purpose
4. Third-party services
5. How long will we keep your data?
6. Accepting, rejecting or configuring cookies
7. How to change your cookie settings
8. Data subject rights and further information on data protection
9. Updates to this Cookie Policy

1. INFORMATION ABOUT THE DATA CONTROLLER

This website https://auratechlegal.es uses cookies and/or similar technologies that store and retrieve information while you browse. In this Cookie Policy we explain what cookies are, what they are used for and how you can configure and/or disable them if you wish. We also tell you which types of cookies are used, and for what purpose, by Auratech Legal Solutions, S.L.P, the company responsible for the website https://auratechlegal.es through which you have accessed this Cookie Policy (the “Website”), whose details are as follows:

Data Controller

Company name: Auratech Legal Solutions, S.L.P · NIF (Spanish tax ID): B87984621

Trade name: Auratech

Address: Calle de las Cañas 6 (near Arturo Soria). 28043 Madrid (Madrid), Spain

Contact: Tel. +34 911 134 963 — Email: info@auratechlegal.es

Commercial Registry: Madrid Commercial Registry, Volume 36,891, Folio 1, Sheet M-660020, Entry 1

Registered office: Arturo Soria 187, piso 206. 28043 Madrid (Madrid), Spain

Activity: Data protection consultancy

This Cookie Policy has been drawn up to comply with Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE) and with the guidelines published by the competent supervisory authorities.

The law imposes two obligations:

1. Transparency: Auratech complies by providing information through this Cookie Policy.
2. Consent: obtained through the cookie management panel shown when you first visit https://auratechlegal.es, which allows you to accept, reject or configure cookies by category, before any non-essential cookies are installed.

2. DEFINITION AND GENERAL FUNCTION OF COOKIES

2.1. What are cookies?

Cookies are essential in the digital age for the operation of websites and online platforms and for improving the user experience. Here we explain their nature, purpose and use on our Website.

Nature of cookies:

• Definition: Cookies are small text files that websites store in the user’s browser. They are created when a user visits a website, online shop, intranet, online platform or similar.
• Functionality: They allow the website to remember the user’s actions and preferences, such as login, language, font size and other display settings.

Purposes and benefits:

• Range of uses: Cookies may have several purposes, including:
  • User recognition: identifying and personalising the experience of the user on subsequent visits.
  • Analysis of browsing habits: collecting information about the user’s browsing preferences and behaviour.
  • Content personalisation: adapting how content is presented to the user’s preferences and needs.
• Practical example: a user visiting an online shop may benefit from cookies that remember their shopping cart, display preferences and previously viewed products.

Use of cookies by Auratech:

• Specific application: section 3 of this policy explains exactly how Auratech uses these technologies on https://auratechlegal.es.

2.2. Types of cookies by how long they remain active

Understanding the different types of cookies by duration is essential to manage privacy and the user experience effectively. These are the two main types: session cookies and persistent cookies.

Session cookies:

• Temporary function: they collect and store information only for the duration of the user’s visit to the website.
• Purpose: they store information needed to provide a service requested on a single occasion, for example keeping form data while moving between the pages of a registration or purchase process.
• Characteristics: they are deleted automatically when the user closes the browser and do not keep user data once the session ends.

Persistent cookies:

• Extended duration: they remain on the user’s device for a predefined period, which may range from minutes to several years.
• Risks and benefits: although persistent cookies may pose greater privacy risks than session cookies, used responsibly they can offer a more personalised and efficient experience.
• Examples of use: remembering user preferences for future visits, such as the selected language or configuration options.

Importance of cookie management:

• Regulatory compliance: correctly categorising and managing cookies is essential to comply with the guidelines of the Spanish Data Protection Agency (AEPD) and the European supervisory authorities.
• Privacy focus: measures must be taken to minimise privacy risks, especially with persistent cookies, so that users’ rights and freedoms are respected.

2.3. Types of cookies by the entity that manages them

Classifying cookies by the entity that manages them is key to understanding how your data is collected and processed. This section explains the difference between first-party and third-party cookies.

First-party cookies:

• Definition: cookies sent to the user’s device from a computer or domain managed directly by the owner/publisher of the website.
• Purpose and use: they are usually essential for the website to work and allow functions such as keeping the user’s session, remembering language settings or a shopping cart.
• Example: a cookie that stores the user’s design preferences on the owner’s website.

Third-party cookies:

• Definition: cookies sent to the user’s device from a computer or domain that is not managed by the owner/publisher of the website but by another entity.
• Common use: they are often used for analytics, advertising and tracking behaviour across different websites.
• Example: a cookie from an advertising platform that tracks user activity across several websites in order to show personalised ads.

Special considerations:

• Third-party cookies managed by the owner: even if cookies are installed from the owner’s domain, they are considered third-party cookies if the information collected is managed by a third party.
• Transparency and consent: users must be informed about the use of third-party cookies and their consent must be obtained in accordance with data protection law.

2.4. Types of cookies by purpose

Cookies may serve different purposes, each adapted to specific needs and to improving the user experience. The main types are:

Technical purposes:

• Description: essential for the technical operation of a website or application; they make browsing and the use of its options and services possible.
• Examples of use: controlling traffic, identifying sessions, making online purchases, managing payments or counting visits for software licensing.
• Importance: fundamental for the operation and security of online services.

Personalisation:

• Description: they personalise the user’s experience on the website by remembering specific preferences.
• Examples of use: selecting the language or configuring the appearance of the service according to browser or region.
• Regulatory exceptions: these cookies may be exempt from certain obligations if they are used solely for preferences chosen by the user.

Analytics or performance:

• Description: used to analyse user behaviour and improve the efficiency of the website or application.
• Examples of use: measuring website activity and making improvements based on how users use it.
• Impact on service improvement: they help to understand how users interact with the website, enabling user-oriented improvements.

Behavioural advertising:

• Description: these cookies track browsing habits in order to show personalised advertising.
• Examples of use: creating a profile based on the user’s browsing habits to show relevant ads.
• Privacy considerations: their use requires careful and transparent management because of its impact on user privacy.

2.5. Cookies exempt from the consent requirement

Cookies used for any of the following purposes are exempt from the obligations laid down in article 22.2 of the LSSI:

• Solely enabling communication between the user’s device and the network.
• Strictly providing a service expressly requested by the user.

In this respect, the Article 29 Working Party, in its Opinion 4/2012, considered that the exempt cookies include those used for:

1. “User input” cookies (session cookies used to keep track of the user’s input when filling in online forms over several pages, or as a shopping cart).
2. Authentication or user identification cookies (session only).
3. User security cookies (for example, cookies used to detect repeated failed login attempts).
4. Multimedia player session cookies.
5. Load-balancing session cookies.
6. User interface customisation cookies.
7. Certain social plug-in content-sharing cookies (the exemption applies only to users who have chosen to stay logged in).

These cookies therefore fall outside the scope of article 22.2 of the LSSI and do not require the user’s consent, without prejudice to the general duty to inform about their existence.

3. INFORMATION ABOUT THE TYPES OF COOKIES USED AND THEIR PURPOSE

The website https://auratechlegal.es of Auratech uses only the cookies and similar technologies listed below, identified through a technical audit of the site carried out on 23 and 26 October 2026 (before accepting, after rejecting, after accepting and after playing a video). Technical cookies are installed without prior consent, without prejudice to the duty to inform; third-party multimedia content is only loaded if the user actively accepts it.

Note: where it is not possible to explain sufficiently the purpose of the cookies used by third parties or how to delete them, a link to the third party’s website is provided.

3.1. First-party technical and necessary cookies (exempt from consent)

3.2. Analytics, measurement or advertising cookies

This website does not use analytics, measurement or advertising cookies, whether first-party or third-party.

3.3. Third-party multimedia content: YouTube videos (consent required)

The YouTube videos embedded on the website are loaded in privacy-enhanced mode (www.youtube-nocookie.com) and remain blocked until the user accepts the “Third-party content (YouTube)” category and presses play. At that point, Google’s player stores the local storage keys listed below in the browser (a technology equivalent to cookies) and sends technical and usage data about the player to Google. As Google does not limit these purposes to simply playing the video, they are treated as third-party content that requires consent. If the user does not accept it, the videos are not loaded.

3.4. International data transfers to third countries

Transfers to third countries (USA):

The provider of the videos embedded on this website (Google, through YouTube) may process data outside the European Economic Area (for example, in the United States). This only happens if the user accepts YouTube content and plays a video.

Where applicable, these international data transfers may be based on:

• the European Commission Adequacy Decision of 10 July 2023 on the EU–US Data Privacy Framework (DPF), where the provider is certified under that framework, and/or
• the Standard Contractual Clauses (SCCs) approved by the European Commission, together with supplementary measures where necessary.

Should the Adequacy Decision cease to apply, international transfers will be based on the alternative mechanisms provided for in the applicable legislation.

In each case, users can consult detailed information on international transfers and the applicable safeguards in the privacy or cookie policy of the relevant provider, linked in this Policy:

• Google LLC / Google Ireland Ltd. (YouTube): https://policies.google.com/privacy?hl=en

4. THIRD-PARTY SERVICES

4.1. Integration with third-party platforms

At Auratech we understand the importance of digital interaction across different platforms and services. However, it is essential to be aware of the privacy and cookie policies of the third parties we interact with.

The mere existence of links to our social media profiles (X, Facebook, Instagram and LinkedIn) does not mean that third-party cookies are installed on this website. The services involved in the operation of the site are the following:

4.2. Guidance for users

• Recommendation: users who visit or interact with our profiles on third-party services should carefully review the privacy and cookie policies of those services.
• Third-party services:
  • YouTube: used to host and show Auratech’s informative videos.
  • LinkedIn: used for professional connections and firm updates.
  • X (Twitter): used to share news and regulatory updates.
  • Facebook: social platform where we share content.
  • Instagram: platform for sharing images and videos.

4.3. Privacy and cookie considerations

• Third-party policies: each of these services has its own privacy and cookie policy, which may differ from ours.
• User responsibility: users are responsible for reviewing these policies to understand how their personal data and cookie preferences are handled on those platforms.
• Measurement tools: this website does not use analytics or audience measurement tools.

4.4. Auratech’s commitment

To make it easier for you to manage your privacy, here are direct links to the cookie and privacy policies of the third parties present on this website and of the social platforms we interact with:

• Google / YouTube
• LinkedIn
• X (Twitter)
• Facebook
• Instagram

* These links take you to external websites not owned by Auratech.

5. HOW LONG WILL WE KEEP YOUR DATA?

The retention period is shown in the fourth column of the tables in section 3.

6. ACCEPTING, REJECTING OR CONFIGURING COOKIES

6.1. Information and options for the user

Auratech is committed to giving users clear and accessible options regarding the use of cookies on its website. On each visit, relevant information is provided so that users can make informed decisions about cookies.

The cookie panel/button (first layer) allows users to Accept, Reject and Configure cookies with equal ease, and we do not install non-essential cookies until the user accepts or configures them.

6.2. Actions available to the user

1. Accept cookies:
   • Procedure: if you select “Accept”, the cookie notice will not be shown again in future sessions on the website.
   • Additional consideration: if you accept third-party cookies, you must delete them through your browser options (see section 7) or as indicated by the third party.
2. Reject cookies:
   • Procedure: if you choose “Reject”, we will not install non-essential cookies. The notice will not be shown again during the current session and we may remember your choice for a maximum of 12 months, unless you delete your cookies or change your settings.
   • Implications: this option may limit some features of the website.
3. Configure cookies:
   • Access to detailed information: a link or mechanism is provided to access more detailed information about Auratech’s cookie policy.
   • Changing preferences: you can adjust, restrict or block cookies at any time, which may affect how the website works.
4. Withdrawing consent:
   • You can change your preferences or withdraw your consent at any time, as easily as you gave it, through the cookie management mechanism available on the website (for example, the permanently available “Cookie Settings” link or button) or from the link in the website footer.

7. HOW TO CHANGE YOUR COOKIE SETTINGS

At Auratech we understand the importance of giving users control and flexibility over cookie management. Below is a guide on how to change the cookie settings in your browser.

7.1. General instructions for managing cookies

• Access to settings: you can restrict, block or delete cookies from Auratech or any other website through your browser.
• Help function: each browser has a different procedure for managing cookies. Use your browser’s “Help” function for specific instructions.

7.2. Steps for common browsers

1. Microsoft Edge: go to “Settings” > “Cookies and site permissions” > “Manage and delete cookies and site data”, where you can block, delete or allow cookies.
2. Firefox: select “Settings” > “Privacy & Security” and customise the cookie and site data options.
3. Chrome: go to “Settings” > “Privacy and security” > “Cookies and other site data” and choose to allow, block or delete cookies.
4. Safari: in “Settings/Preferences”, select “Privacy” and manage your cookie and tracking preferences.
5. Opera: go to “Settings” > “Advanced” > “Privacy & security” and manage cookies and other site data.

7.3. Additional information and resources

• In addition to the built-in help function, you can find online tutorials and guides with detailed steps for different browsers.
• Please note that restricting or blocking cookies may affect how our website and other online services work.

7.4. Auratech’s commitment to privacy

We follow the guidelines of the AEPD and the European supervisory authorities so that our users can easily manage their privacy and data protection.

8. DATA SUBJECT RIGHTS AND FURTHER INFORMATION ON DATA PROTECTION

You can obtain more information about the processing of your personal data or exercise your data protection rights (access, rectification, erasure, objection, restriction or portability) by following the instructions in Auratech’s privacy policy.

You can also contact the Data Protection Officer (DPO) at info@auratechlegal.es, or lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that your rights have not been properly respected.

9. UPDATES TO THIS COOKIE POLICY

9.1. Commitment to updating and transparency

At Auratech we are committed to continuous improvement and to adapting to regulatory and technological changes. Our Cookie Policy may therefore be updated periodically to reflect changes in our use of cookies or in the relevant legislation.

9.2. Recommendations for users

• Regular review: we advise you to review our Cookie Policy each time you visit https://auratechlegal.es so that you are always informed about how and why we use cookies.
• Notification of changes: although we try to inform users of significant changes to our policy, reviewing it regularly is the best way to stay up to date.

Last updated: 26 October 2026