Privacy policy

Last updated: 28 October 2026

This policy explains how Cuatro Digital Technology S.L.U. (“Cuatro Digital”) processes the personal data collected through this website and how you can exercise your rights, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

  • Controller: Cuatro Digital Technology S.L.U.
  • Tax ID (NIF): B88383872
  • Registered office: Rúa das Pontes, 4, Porto do Molle, Nigrán, 36350, Pontevedra - Spain
  • Telephone: +34 986 116 260
  • Email: hola@cuatrodigital.com

We only process the data you give us, the data strictly necessary for the website to work securely and, if you accept it, usage statistics. You do not need to give us any personal data to browse the website.

  • Data: full name, job title and company, work email address and the information you include in your message. If you write to us or call us directly, the contact details you use.
  • Purpose: to answer your enquiry, study your project, prepare the assessment or proposal you request and keep the related communications.
  • Legal basis: your consent, which you give by ticking the box and sending the form (Article 6(1)(a) GDPR), and, where the enquiry concerns hiring our services, taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Retention: for as long as necessary to deal with the enquiry and, if it leads to a business relationship, for as long as that relationship lasts. After that, the data is kept blocked only for the periods during which legal claims may arise.
  • Data: full name, email address, technical specialism, a link to your professional profile (for example, LinkedIn or GitHub), your CV in PDF format and the information it contains (contact details, education and experience). Please do not include special categories of data, such as health data, or any other information that is not needed to assess your application.
  • Purpose: to assess your profile and, where appropriate, contact you for Cuatro Digital’s recruitment processes. Your application may be used for a specific vacancy, an ongoing process or future recruitment processes.
  • Legal basis: your consent, which you give by ticking the box and sending your application (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to hola@cuatrodigital.com, without affecting the lawfulness of processing carried out before its withdrawal.
  • Retention: 18 months. After that period, or earlier if you ask us to, your CV is deleted. If you join Cuatro Digital, your data will then be processed to manage the employment relationship, about which you will be informed separately.
  • Who has access: only the Cuatro Digital staff involved in the recruitment process. The data is not disclosed to other companies.
  • Data: the IP address and technical data of requests to the website (date and time, page requested and browser), and attempts to log in to the administration panel.
  • Purpose: to protect the website against attacks and unauthorised access, by means of a firewall and a record of login attempts.
  • Form protection: the forms use Google reCAPTCHA to tell people apart from automated submissions. To do so, Google receives technical data about your browser and your visit (including your IP address) and uses the _GRECAPTCHA cookie. Google’s privacy policy and terms of service apply.
  • Legal basis: Cuatro Digital’s legitimate interest in ensuring the security of its network and information (Article 6(1)(f) and Recital 49 GDPR).
  • Retention: 18 months

Only if you accept statistics cookies in the cookie notice does the website use Google Analytics to understand in aggregate how it is used. If you do not accept them, Google Analytics is not loaded.

  • Data: a random identifier stored in a cookie, the pages visited, the date, time and length of the visit, the referring page, the type of device and browser and the approximate location (country and city). The IP address is only used to derive that location: Google Analytics 4 does not store it.
  • Purpose: to obtain aggregate usage statistics in order to improve the website. They are not used for advertising or profiling.
  • Legal basis: your consent (Article 6(1)(a) GDPR and Article 22(2) LSSI-CE), which you give in the cookie notice and can withdraw at any time from the cookie policy.
  • Configuration: no Google Signals, no ad personalisation and no sharing of data with other Google products.
  • Retention: 14 months
  • Recipient: Google, as data processor (see sections 3 and 4).

In addition to statistics cookies, which are only set if you accept them, the website uses technical cookies, needed to remember your language and your cookie choice. It does not use advertising cookies. You will find the details in the cookie policy.

We do not disclose your data to third parties, except where required by law (for example, at the request of the authorities or the courts).

To provide the service, some suppliers access the data on behalf of Cuatro Digital, as data processors and under the contract required by Article 28 GDPR:

  • Website hosting: IONOS Cloud S.L.U.
  • Email (receipt of the forms and the hola@cuatrodigital.com mailbox): Google Ireland Limited (Google Workspace).
  • Website security: Defiant, Inc. (Wordfence), based in the United States. With the current configuration, the firewall shares with Wordfence the IP address and technical data of the requests it blocks as attacks, in order to improve protection against them.
  • Web analytics: Google Ireland Limited (Google Analytics), only if you accept statistics cookies.

With the current configuration, the following may involve a transfer of data to the United States: the Wordfence security service (Defiant, Inc.), limited to the technical data of blocked requests, and Google Analytics, only if you accept statistics cookies. These transfers are made with the safeguards required by the GDPR.

You may exercise the following rights over your data at any time:

  • Access: to find out whether we process your data and obtain a copy.
  • Rectification: to correct inaccurate data or complete incomplete data.
  • Erasure: to ask us to delete your data, among other cases when it is no longer needed for the purpose for which it was collected.
  • Objection: to object to processing based on our legitimate interest.
  • Restriction: to ask us to suspend processing in the cases provided for in the GDPR.
  • Portability: to receive the data you have given us in a structured, commonly used format, or to ask us to transmit it to another controller, where processing is based on your consent or on a contract.
  • Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before its withdrawal.

We do not take decisions based solely on the automated processing of your data, nor do we use it for profiling.

How to exercise them: write to hola@cuatrodigital.com or send a letter to the controller’s address, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for the additional information needed to confirm it. We will reply within one month, which may be extended by two further months for complex requests, as provided for in the GDPR.

If you consider that we have not dealt with your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

This website is aimed at companies, public administrations and professionals. We do not knowingly collect data from children under 14: if you are under 14, please do not send us your data. If we find that we have received data from a child under 14 without the consent of their parents or guardians, we will delete it.

We apply technical and organisational measures appropriate to the risk to protect your data against loss, misuse or unauthorised access, such as the encrypted connection to the website, the firewall and access control to the administration panel.

We may update this policy to reflect changes in the law or in the website itself. The current version will always be published on this page, with the date of its last update. The website owner’s details are also set out in the legal notice.