1. Data controller
The Online Gurus S.L. is the data controller for the personal data we receive about you.
- Address: Carrer Doctor Vivas, 5, 08370 Calella, Barcelona, Spain
- VAT: ESB21665948
- Email: info@theonlinegurus.com
- Phone: +45 36 99 06 08
2. What data do we collect?
When you fill in a form on the website (e.g. “free audit” or “contact us”), we receive the information you enter yourself: name, email, phone number, website and your message. We also record which page you sent the form from and when.
How you found the website. If you have consented to statistics or marketing cookies, we remember for up to 90 days how you found the website: campaign parameters in the link (so-called UTM parameters, e.g. the campaign name), a click ID from an ad on e.g. Google, Meta, Microsoft, LinkedIn or TikTok, the domain of the site that referred you (e.g. google.com – not the full address) and the first page you visited. If you fill in a form, this information is sent with your enquiry so we can see which channels and campaigns lead to enquiries. If you have not consented, nothing is stored in your browser – but if you fill in the form on the page you landed on, the campaign parameters from that page’s address are included.
Ad measurement (advanced matching). If you have consented to marketing cookies and fill in a form, we send your name, email and phone number to Google (Google Ads) and Meta – from your browser and, for Meta, also directly from our server – so they can see whether the enquiry came from one of our ads. The information is encrypted (hashed) before it is sent and is only used to measure and improve our ads. Without marketing consent, it is not sent.
When you become a client, we also process contact and billing details and the information needed to deliver our services – for example access to your ad accounts and their data.
When you click our email or phone link, we anonymously record that a click happened, which link and from which page – without cookies, IP address or any other information that can identify you. We use this to see which pages lead to enquiries. If you have consented to statistics or marketing cookies, Google Analytics, Google Ads, Meta and OpenAI are also told about the click to measure our ads.
When you visit the website, our hosting provider records technical information such as IP address, browser type and time in server logs for security and operational purposes.
3. Purpose and legal basis
We process your data in order to:
- reply to your enquiry and prepare an audit or quote (GDPR Art. 6(1)(b) – steps prior to entering into a contract),
- deliver and invoice our services (Art. 6(1)(b) and (c) – performance of a contract and accounting obligations),
- run and secure the website (Art. 6(1)(f) – our legitimate interest in a secure, well-functioning website),
- see which channels and campaigns lead to enquiries when you send a form (Art. 6(1)(f) – our legitimate interest in measuring the effect of our marketing; the information is only stored in your browser if you have given consent),
- measure and improve our marketing, if you have consented to statistics and marketing cookies (Art. 6(1)(a)).
We never sell your data and do not use it for automated decision-making.
4. Who do we share data with?
We only share data with suppliers who help us run our business and process it on our behalf:
- website hosting (Vercel), database (Neon) and email,
- Google (Analytics and Ads), Meta (Facebook/Instagram) and OpenAI (ChatGPT ads) to measure our own advertising – only with your consent,
- Stripe for invoicing and payment,
- Google and Meta, when we manage advertising for you as a client,
- our accountant and public authorities, when required by law.
Some suppliers may be located outside the EU/EEA (e.g. in the USA). In that case we make sure the transfer has a lawful basis, such as the European Commission’s standard contractual clauses or the EU-U.S. Data Privacy Framework.
5. How long do we keep the data?
- Enquiries that do not lead to a collaboration are deleted no later than 12 months after the last contact.
- Client data is kept for as long as we work together and then for as long as necessary to document the agreement.
- Accounting records are kept for the period required by accounting rules.
6. Cookies
Cookies are small text files stored in your browser. We divide them into three categories:
- Necessary cookies make the website work and do not require consent.
- Statistics cookies (e.g. Google Analytics) help us understand how the website is used.
- Marketing cookies (e.g. Google Ads, Meta Pixel and the OpenAI pixel for ChatGPT ads) are used to measure and target advertising.
Statistics and marketing cookies are only set if you have given consent in our cookie banner. We use Google Consent Mode, so Google services respect your choice: if you say no, no statistics or marketing cookies are stored. Google may still receive anonymous signals without cookies (e.g. that a page was visited), which are used to model statistics and ad results in aggregate.
Meta receives the Meta Pixel measurements both from your browser and via Meta’s own server (Conversions API), which makes them more accurate. This only happens if you have consented to marketing.
Besides cookies, we use local storage in your browser (localStorage and sessionStorage) – not cookies – to store your cookie choice and, if you have consented, to remember for 90 days how you found the website (see section 2) and to briefly keep your contact details from the form until they have been sent for ad measurement. Google, Meta and OpenAI also use local storage when you have consented. Everything is listed in the cookie declaration below. If you withdraw your consent, the information about how you found the website is deleted.
Your choice is stored locally in your browser for 12 months so we don’t ask again on every visit – after that we ask again. As documentation of your consent we also store an anonymous consent ID together with your choice and the time (no IP address or name). You can see your consent ID and the full list of cookies in the cookie declaration below. You can change or withdraw your consent at any time via Cookie settings at the bottom of the page, and you can always delete cookies in your browser settings.
7. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
- access the data we process about you,
- have inaccurate data corrected,
- have your data erased,
- restrict processing,
- object to processing,
- receive your data in a commonly used, machine-readable format (data portability),
- withdraw your consent – without affecting the lawfulness of processing before the withdrawal.
Write to info@theonlinegurus.com if you want to exercise your rights.
8. Complaints
If you are unhappy with how we process your personal data, you can complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos, or to the supervisory authority in the country where you live.
9. Changes
We update this policy when there are changes in how we process personal data. The date at the top shows when it was last updated.