Auratech Legal: Data Protection, Criminal Compliance, E-Commerce and Artificial Intelligence Experts

Auratech Legal is a law firm based in Madrid, Spain, specialising in data protection, criminal compliance, e-commerce and artificial intelligence. With a team of highly qualified legal experts, Auratech Legal is committed to providing comprehensive and tailored legal solutions to its clients around the world.

Our main focus is data protection, where we help businesses navigate the complex data privacy landscape and comply with regulations such as the General Data Protection Regulation (GDPR). Our services include data protection audits, privacy policy development and data protection training.

In the field of criminal compliance, we work with businesses to develop effective compliance programmes that minimise the risk of criminal conduct and comply with applicable laws and regulations. Our goal is to help businesses foster a culture of integrity and compliance.

In e-commerce, Auratech Legal advises businesses on a variety of legal issues, including sales contracts, terms and conditions, privacy policies and compliance with consumer protection laws. Our goal is to help businesses operate effectively and legally in the digital space.

In the field of artificial intelligence, Auratech Legal provides legal advice on a variety of issues, including intellectual property, data privacy, AI ethics and legal liability. Our goal is to help businesses navigate the complex legal landscape of AI and use this technology responsibly and ethically.

At Auratech Legal, we pride ourselves on providing our clients with exceptional service and effective legal solutions. Regardless of where our clients are located, we are committed to helping them achieve their goals and navigate the legal landscape successfully. We look forward to the opportunity to work with you!

Posts

Fingerprint time tracking reader at a company entrance

Fingerprint time tracking in 2026: annulling the AEPD guidance did not make it legal

Spain's National Court annulled the AEPD biometrics guidance in June 2026. The instrument fell, not the rule: what your company must prove before keeping a fingerprint reader.

Consent or Pay: Privacy, Personalised Advertising and the GDPR

What consent or pay means, what the EDPB requires and when consent may not be freely given under the GDPR.

EU-US Data Privacy Framework: What Companies Should Check

What the EU-US Data Privacy Framework is, when it helps international transfers and what companies should verify.

Subsidised Training Fraud in Spain: How to Detect It

How to detect fraud in subsidised training courses in Spain, what evidence to keep and what to review before applying rebates.
Fingerprint reader illustrating workplace biometric processing and the AEPD guidance for companies.

Biometric Data Processing in the Workplace: the AEPD Guide

The AEPD treats workplace biometric processing as sensitive. We explain when it may be used, the legal risks and what companies should review.

Special Categories of Data Under the GDPR: Practical Guide

Practical guide to special categories of data under the GDPR: health, biometric, political, religious and sexual orientation data, Article 9 exceptions and safeguards.
Galleta de chocolate apoyada sobre el teclado de un ordenador portátil

AEPD Cookie Guide: Key Changes for Websites

AEPD Cookie Guide: accept, reject, configure, non-essential cookies, misleading patterns and adaptation deadline for websites.
Salón de una vivienda con el testigo rojo de grabación REC en la pared

Property agency fined for exposing images of minors

The fine imposed on a property agency for exposing images of minors has highlighted the importance of protecting the rights of minors. An individual filed a complaint with the Spanish Data Protection Agency, with the aim of highlighting the…

Face recognition in exams: Is it proportionate?

The Catalan Data Protection Authority (Autoritat Catalana de Protecció de Dades) has sanctioned the Universitat Oberta de Catalunya for collecting biometric data from its students through face recognition, in order to verify that they were…

Microsoft 365 in Schools: Privacy, Cloud Services and GDPR Lessons

Lessons from the Microsoft 365 schools debate: cloud platforms, minors, contracts, international transfers and GDPR compliance.
Ponente ante un auditorio con un candado digital superpuesto sobre la imagen

The DPO in the European Union

In this article we will analyse the figure of the DPO in the EU (European Union). Javier Sempere Samaniego, Data Protection Officer of the Spanish General Council of the Judicial Power, has prepared for the Spanish Professional Privacy Association…