👂 Test udito

👂 Hörtest

👂 Hearing check

Privacy policy

Last updated: 12 October 2026

This privacy policy explains which personal data the website www.gpreo.com processes, why, and what rights you have. It applies to the whole website, the online Hearing check and the apps Hearing Diary (Diario dell’udito) and TinniAPP. It is based on the Swiss Federal Act on Data Protection (FADP) and, for visitors from the European Union, on the General Data Protection Regulation (GDPR).

1. Who is responsible

The controller is Gian Paolo Reo, Switzerland, operator of gpreo.com. The website is a personal, informational project.

2. When you visit the website

Like every website, gpreo.com automatically receives some technical data from your browser: IP address, date and time, page visited, browser and device type. This data is recorded by the hosting provider Aruba S.p.A. (Italy) in the server log files. It is used only to run the website and protect it from abuse, and it is deleted after a limited period. I do not use it to identify you.

Legal basis: my legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

3. When you write to me or subscribe to the newsletter

If you use the contact form or send me an email, I receive the data you enter: name, email address, possibly your phone number, and the text of your message.

  • The form sends the message by email to info@gpreo.com (Aruba email service). Messages are not stored in a database on the website.
  • I use the data only to answer your request and, if you ask for it, for advice. I do not use it for advertising and I do not sell it to anyone.
  • Health data: if you describe hearing or health problems in your message, this is sensitive personal data. I use it only to answer you and only with your explicit consent, which you give by ticking the box in the form or by writing to me on your own initiative.
  • I keep messages for as long as needed to handle your request, at most 2 years after the last contact, unless the law requires longer (e.g. for invoices).

Legal basis: your consent (Art. 6(1)(a) and Art. 9(2)(a) GDPR) and answering your request (Art. 6(1)(b) GDPR). You can withdraw your consent at any time.

If you write to me on WhatsApp, the message goes through WhatsApp (Meta) and their privacy policy also applies.

Newsletter: if you subscribe to the newsletter, I store your email address, your first name (if you provide it), the language and the list you chose (e.g. “professionals”), as well as the date, time and IP address of the sign-up and of the confirmation, so that I can prove your consent.

  • Sign-up uses double opt-in: you receive an email and the subscription only becomes active after you click the link.
  • I send you at most one email per week with the new articles and occasional news about the website. No third-party advertising.
  • Subscribers are managed with the MailPoet plugin on my website; emails are sent through MailPoet’s sending service (Automattic Inc.). To see which emails work best, MailPoet may record opens and clicks linked to the subscription.
  • You can unsubscribe at any time with the link at the bottom of every email. Your data is then deleted, except for the proof of consent, which I keep for at most 3 years.

Legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

4. The online Hearing check

  • The check (questions and headphone test) runs entirely in your browser. Your answers and the result are not sent to me or stored on the website.
  • The result is only a rough indication calculated automatically from your answers: it is not a diagnosis and no decision about you is based on it. For a proper assessment you need a hearing test with a professional.
  • If you click “Write to me”, a summary of the result is filled into the contact form: I only receive it if you send the form (see section 3). If you share the result via WhatsApp, you send it yourself to the people you choose.
  • If you accepted statistics, Google Analytics only counts that a check was completed, without your answers or the result.

5. Visitor statistics (Google Analytics)

Only if you accept it in the cookie banner, the website uses Google Analytics 4 to understand how many people visit it and which articles are most interesting. Without your consent Google Analytics is not loaded.

  • Provider: Google Ireland Limited (Ireland) and Google LLC (USA).
  • Data collected: pages visited, length of visit, approximate location (country, city), device and browser type, where you came from, and some anonymous actions (e.g. use of the share buttons or completing the hearing check). Google Analytics 4 does not store the full IP address.
  • Cookies: _ga and _ga_*, lifetime up to 2 years. Statistics data is kept for 14 months.
  • Data may be transferred to the USA (see section 9).

Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time via “Cookie settings” at the bottom of every page.

6. Cookies and data in your browser

The website uses only a few cookies:

  • pll_language: remembers your language (Italian, German, English). Necessary, lifetime 1 year.
  • Consent cookies (cmplz_*): remember your choice in the cookie banner. Necessary, lifetime 1 year.
  • _ga, _ga_*: Google Analytics statistics, only with your consent (see section 5).
  • Login cookies: only for the site administrator, not for visitors.

Some features store small pieces of information only in your browser (local storage), without sending them to me: the text size you chose in articles, your “Was this helpful?” vote and the app data (see section 7). The “Copy link” button copies the article’s address to your device’s clipboard without sending anything.

For the “Was this helpful?” button the website only counts the number of votes. To prevent double votes it stores an anonymous code for 24 hours, calculated so that your IP address cannot be derived from it. The IP address is not stored.

I do not use advertising or profiling cookies. Legal basis for necessary cookies: my legitimate interest in running the website (Art. 6(1)(f) GDPR).

7. The Hearing Diary and TinniAPP apps

  • The apps work without registration and without an account.
  • Diary entries, notes, settings and sounds you upload stay only on your device (browser storage). They are not sent to me or to any other server.
  • If you create a PDF and email it, you do so yourself with your email app, only to the people you choose.
  • To work offline, the apps store their own files on the device. TinniAPP loads the list of the latest blog articles from gpreo.com.
  • If you clear your browser data or uninstall the app, the diary is deleted too.

8. Videos, external links and share buttons

The website contains links to WhatsApp (including the WhatsApp channel), Instagram, TikTok, Facebook, X, YouTube (my channel @gpreovideo), PayPal, TWINT and Gmail, and below the articles buttons to share them via WhatsApp, email or your phone’s share menu. These are plain links: until you click, nothing is sent to these services. After you click, their privacy policies apply.

YouTube videos: some articles contain YouTube videos, including from my own channel (Google Ireland Limited / Google LLC). The video is only loaded if you accept marketing cookies in the banner, or if you click on the video. Only then can YouTube receive data such as your IP address and set cookies. Legal basis: your consent (Art. 6(1)(a) GDPR).

If you donate via PayPal or TWINT, the payment is handled by them; I only receive the data they pass on to me (e.g. name and amount).

9. Recipients and transfers abroad

I do not sell or pass on your data. It is received only by the providers needed to run the website, who process it on my behalf:

  • Aruba S.p.A., Italy: website hosting and email service. Italy (EU) provides adequate data protection according to the Swiss Federal Council.
  • Google Ireland Limited (Ireland) and Google LLC (USA): statistics, only with your consent. For transfers to the USA, Google is certified under the Swiss-U.S. Data Privacy Framework and the EU-U.S. Data Privacy Framework, recognised as adequate by Switzerland and the EU.
  • Automattic Inc. (MailPoet), USA: sending the newsletter, only if you subscribe. Transfers to the USA take place with the safeguards required by law (e.g. Data Privacy Framework or standard contractual clauses).
  • If you use WhatsApp, Instagram, PayPal or other services via a link, those services process the data (also in the USA) under their own privacy policies.

10. Automated decisions

I do not make decisions based solely on automated processing that have legal or similarly significant effects on you, and I do not do profiling.

11. Your rights

You can ask me at any time which data I hold about you, and have it corrected or deleted, restrict or object to its use, or receive it in a common format. You can also withdraw any consent you gave, without affecting the past. Just write to info@gpreo.com. I usually reply within 30 days.

If you believe your data is not handled correctly, you can contact the data protection authority: in Switzerland the Federal Data Protection and Information Commissioner (FDPIC), in the EU the authority of your country.

12. Security

The website uses an encrypted connection (HTTPS), admin access is protected, and the website is updated regularly.

13. Changes

I may update this policy when the website changes. The date of the last update is shown at the top.