Privacy policy

Last updated: [PENDIENTE: fecha de publicación]

This policy explains how Cuatro Digital Technology S.L. (“Cuatro Digital”) processes the personal data collected through this website and how you can exercise your rights, in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018 of 5 December on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD).

  • Controller: Cuatro Digital Technology S.L.
  • Tax ID (NIF): B88383872
  • Address: Porto do Molle, Rúa das Pontes 4, 36350 Nigrán (Pontevedra), Spain
  • Telephone: +34 986 116 260
  • Email: hola@cuatrodigital.com
  • Data protection officer: [PENDIENTE: indicar si la empresa ha designado un delegado de protección de datos y su contacto; si no lo ha designado, suprimir esta línea]

We only process the data you give us, the data strictly necessary for the website to work securely and, if you accept it, usage statistics. You do not need to give us any personal data to browse the website.

  • Data: full name, job title and company, work email address and the information you include in your message. If you write to us or call us directly, the contact details you use.
  • Purpose: to answer your enquiry, study your project, prepare the assessment or proposal you request and keep the related communications.
  • Legal basis: your consent, which you give by ticking the box and sending the form (Article 6(1)(a) GDPR), and, where the enquiry concerns hiring our services, taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Retention: for as long as necessary to deal with the enquiry and, if it leads to a business relationship, for as long as that relationship lasts. After that, the data is kept blocked only for the periods during which legal claims may arise. [PENDIENTE: plazo de conservación de las consultas que no dan lugar a contratación]
  • Data: full name, technical specialism, a link to your professional profile (for example, LinkedIn or GitHub), your CV in PDF format and the information it contains (contact details, education and experience). Please do not include special categories of data, such as health data, or any other information that is not needed to assess your application.
  • Purpose: to assess your profile and, where appropriate, contact you for Cuatro Digital’s recruitment processes. [PENDIENTE: indicar si la candidatura se usa solo para la vacante o el proceso en curso o también para futuros procesos de selección]
  • Legal basis: your consent, which you give by ticking the box and sending your application (Article 6(1)(a) GDPR). You can withdraw it at any time by writing to hola@cuatrodigital.com, without affecting the lawfulness of processing carried out before its withdrawal.
  • Retention: [PENDIENTE: plazo de conservación del currículum que decida la empresa]. After that period, or earlier if you ask us to, your CV is deleted. If you join Cuatro Digital, your data will then be processed to manage the employment relationship, about which you will be informed separately.
  • Who has access: only the Cuatro Digital staff involved in the recruitment process. The data is not disclosed to other companies.
  • Data: the IP address and technical data of requests to the website (date and time, page requested and browser), and attempts to log in to the administration panel.
  • Purpose: to protect the website against attacks and unauthorised access, by means of a firewall and a record of login attempts.
  • Legal basis: Cuatro Digital’s legitimate interest in ensuring the security of its network and information (Article 6(1)(f) and Recital 49 GDPR).
  • Retention: [PENDIENTE: plazo de conservación de los registros de seguridad y del servidor]

Only if you accept statistics cookies in the cookie notice does the website use Google Analytics to understand in aggregate how it is used. If you do not accept them, nothing from Google is loaded. [PENDIENTE: Google Analytics está preparado pero todavía no activado: indicar la fecha de activación]

  • Data: a random identifier stored in a cookie, the pages visited, the date, time and length of the visit, the referring page, the type of device and browser and the approximate location (country and city). The IP address is only used to derive that location: Google Analytics 4 does not store it.
  • Purpose: to obtain aggregate usage statistics in order to improve the website. They are not used for advertising or profiling.
  • Legal basis: your consent (Article 6(1)(a) GDPR and Article 22(2) LSSI-CE), which you give in the cookie notice and can withdraw at any time from the cookie policy.
  • Configuration: no Google Signals, no ad personalisation and no sharing of data with other Google products.
  • Retention: [PENDIENTE: plazo de conservación de los datos en Google Analytics: 2 o 14 meses, según se configure en la propiedad]
  • Recipient: Google, as data processor (see sections 3 and 4).

In addition to statistics cookies, which are only set if you accept them, the website uses technical cookies, needed to remember your language and your cookie choice. It does not use advertising cookies. You will find the details in the cookie policy.

We do not disclose your data to third parties, except where required by law (for example, at the request of the authorities or the courts).

To provide the service, some suppliers access the data on behalf of Cuatro Digital, as data processors and under the contract required by Article 28 GDPR:

  • Website hosting: [PENDIENTE: nombre del proveedor de alojamiento (hosting) y país donde están sus servidores]
  • Email (receipt of the forms and the hola@cuatrodigital.com mailbox): [PENDIENTE: nombre del proveedor de correo]
  • Website security: Defiant, Inc. (Wordfence), based in the United States. With the current configuration, the firewall shares with Wordfence the IP address and technical data of the requests it blocks as attacks, in order to improve protection against them. [PENDIENTE: confirmar que la empresa mantiene esta opción de Wordfence; si se desactiva, suprimir esta línea]
  • Web analytics: Google (Google Analytics), only if you accept statistics cookies. [PENDIENTE: confirmar la entidad de Google con la que se contrata (para el Espacio Económico Europeo suele ser Google Ireland Limited) y que se han aceptado sus condiciones de tratamiento de datos en la cuenta de Analytics]
  • [PENDIENTE: otros proveedores con acceso a datos personales, por ejemplo de mantenimiento informático o asesoría]

With the current configuration, the following may involve a transfer of data to the United States: the Wordfence security service (Defiant, Inc.), limited to the technical data of blocked requests, and Google Analytics, only if you accept statistics cookies. [PENDIENTE: confirmar la garantía que ampara cada transferencia (por ejemplo, la adhesión del proveedor al Marco de Privacidad de Datos UE-EE. UU. o cláusulas contractuales tipo) y si los proveedores de alojamiento y de correo tratan datos fuera del Espacio Económico Europeo]

You may exercise the following rights over your data at any time:

  • Access: to find out whether we process your data and obtain a copy.
  • Rectification: to correct inaccurate data or complete incomplete data.
  • Erasure: to ask us to delete your data, among other cases when it is no longer needed for the purpose for which it was collected.
  • Objection: to object to processing based on our legitimate interest.
  • Restriction: to ask us to suspend processing in the cases provided for in the GDPR.
  • Portability: to receive the data you have given us in a structured, commonly used format, or to ask us to transmit it to another controller, where processing is based on your consent or on a contract.
  • Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before its withdrawal.

We do not take decisions based solely on the automated processing of your data, nor do we use it for profiling. [PENDIENTE: confirmar que no se utilizan herramientas automáticas para filtrar candidaturas]

How to exercise them: write to hola@cuatrodigital.com or send a letter to the controller’s address, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for the additional information needed to confirm it. We will reply within one month, which may be extended by two further months for complex requests, as provided for in the GDPR.

If you consider that we have not dealt with your rights properly, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

This website is aimed at companies, public administrations and professionals. We do not knowingly collect data from children under 14: if you are under 14, please do not send us your data. If we find that we have received data from a child under 14 without the consent of their parents or guardians, we will delete it.

We apply technical and organisational measures appropriate to the risk to protect your data against loss, misuse or unauthorised access, such as the encrypted connection to the website, the firewall and access control to the administration panel.

We may update this policy to reflect changes in the law or in the website itself. The current version will always be published on this page, with the date of its last update. The website owner’s details are also set out in the legal notice.