Privacy Notice
How we handle
your data.
Last updated · 15 July 2026
This notice explains how Auraz Global collects, uses, and protects your personal data when you visit our website or interact with us. It is written to satisfy the transparency requirements of the EU General Data Protection Regulation (GDPR) and applicable US state privacy laws — including the California Consumer Privacy Act as amended by the CPRA, the Virginia Consumer Data Protection Act, the Colorado Privacy Act, the Connecticut Data Privacy Act, and equivalent laws now in force across other US states.
1. Who we are
Auraz Global is the data controller for personal data collected through this website. For questions about this notice, or to exercise any of your rights, contact us at gdpr-ask@aurazglobal.com.
2. What data we collect
When you interact with our website, we collect the following categories of personal data:
  • Information you provide via our forms: full name, professional title, company name, market sector, country of main offices, email address, phone number, and any content you enter in the free-text fields (Areas of Interest, Your Inquiry).
  • Consent record: the timestamp and content of the consent you provide when submitting a form.
  • Technical data captured automatically: your IP address, approximate country and region derived from your IP, browser type, and device type.
  • Aggregate site analytics: pages visited, time on page, referral source. This data is anonymized and does not identify you individually.
  • Correspondence history: the content of any emails or messages exchanged with us.
3. Why we collect it
  • To respond to specific requests you make — for example, to send you a working paper you have requested.
  • To communicate with you about Auraz Global's institutional research where you have consented to such contact.
  • To operate, secure, and improve our website.
  • To comply with our legal and regulatory obligations.
4. Legal basis for processing
  • Consent (GDPR Article 6(1)(a)) — where you have checked the consent box on our forms, we process your data on that basis. You may withdraw consent at any time.
  • Legitimate interests (GDPR Article 6(1)(f)) — for essential website security, fraud prevention, and to respond to inquiries you initiate.
  • Legal obligations (GDPR Article 6(1)(c)) — where processing is required to comply with applicable law.
5. Who receives your data
Your data is accessed by authorized personnel of Auraz Global and, in defined roles, by our service providers acting as data processors under contract to us:
  • Resend — transactional email delivery for our forms.
  • Vercel — website hosting and infrastructure.
  • Google Workspace — inbox and mailbox services.
  • GoDaddy — domain registration.
Each of these processors is contractually bound to process your data only on our instructions and to maintain appropriate security measures. We do not sell or share your data with third parties for marketing purposes.
6. International transfers
Some of our processors are located outside the European Union and European Economic Area — primarily in the United States. Where such transfers occur, they are governed by the European Commission's Standard Contractual Clauses, or by other appropriate safeguards under GDPR Chapter V (Articles 44–50).
7. How long we keep your data
We retain your data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:
  • Contact and inquiry data: retained during active correspondence and for a reasonable period thereafter for follow-up.
  • Working paper requests: retained while you remain interested in receiving communications about our research.
  • Website analytics: retained in aggregate, anonymized form only.
  • Records of consent and its withdrawal: retained for the duration of our legal obligation to demonstrate GDPR compliance.
You may request deletion of your data at any time by writing to gdpr-ask@aurazglobal.com.
8. Your rights
Under the GDPR and applicable US state privacy laws, you have the following rights:
  • Right of access — obtain a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate or incomplete data.
  • Right to erasure — request deletion of your personal data (“right to be forgotten”).
  • Right to restrict processing — request that we limit our processing of your data.
  • Right to data portability — receive your data in a structured, machine-readable format, or have it transmitted directly to another controller where technically feasible.
  • Right to object — object to processing based on our legitimate interests or for direct marketing.
  • Right to withdraw consent — where processing is based on your consent, withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing.
  • Right not to be subject to automated decision-making — including profiling that has legal or similarly significant effects.
  • Right to lodge a complaint — with your national or state data protection supervisory authority.
9. How to exercise your rights
To exercise any of the rights above, or for any question about how we handle your data, contact us at gdpr-ask@aurazglobal.com. We will respond within one month, in line with GDPR Article 12(3). Complex requests may take longer, in which case we will inform you within the first month and complete our response within a further two months.
We may require you to verify your identity before responding to certain requests, in order to protect your data against unauthorized disclosure.
10. Cookies and analytics
This website uses Vercel Analytics, which collects aggregate visitor data (page views, browser type, device type, country of origin) without cookies and without tracking individual users across sessions. We do not use third-party advertising or social media tracking. If we introduce additional analytics or advertising technologies in the future that require your consent, we will update this notice and, where required, request that consent.
11. Security
We implement appropriate technical and organizational measures to protect your data against unauthorized access, disclosure, alteration, or destruction. These include TLS encryption for data in transit, HTTP security headers on every response, strict Content Security Policy, secure infrastructure through Vercel and our email provider Resend, access controls over internal systems, and the requirement that all data processors we engage maintain equivalent standards.
12. Changes to this notice
We may update this notice from time to time to reflect changes in our practices or legal obligations. Material changes will be communicated by updating the “Last updated” date at the top of this page. Where the change materially affects your rights, we will notify you by other appropriate means.
13. Contact
For all data protection and privacy questions: gdpr-ask@aurazglobal.com.