Privacy Policy

PRIVACY POLICY

1. Purpose and definitions

This Privacy Policy (the "Privacy Policy") governs how CUATRECASAS PROPIEDAD INDUSTRIAL, S.R.L. processes personal data on its website https://www.cuatrecasascpi.com/ (the "Website").

For the purposes of this Privacy Policy, the term "Users" refers to any individuals accessing, browsing or interacting with the Website, including using the links and functionalities available on it.


2. Who is the data controller?

The controller of the personal data processed on the Website is CUATRECASAS PROPIEDAD INDUSTRIAL, S.R.L. ("CPI"), with tax identification number B64290638 and registered office at Avenida Diagonal 191, 08018 Barcelona (Spain).

Users can contact CPI at: cpi@cuatrecasas.com.


3. What data do we process?

Depending on the Users’ use of the Website, CPI can process the following categories of data:


A) Navigation (cookies and technical data)

IP address, online identifiers, browser/device information, pages visited, access dates/times, and data derived from the use of cookies and similar technologies.

Users can consult the details in the Cookie Policy.


B) Email contact (if Users write to CPI)

Identification and contact data (e.g., first name, last name, email, company/position if provided by the User), as well as the content of the message and metadata associated with the communication (e.g., date/time, subject).


C) Third-party data

If Users include third-party data in communications, they declare that they have previously informed the third parties and that they have a legitimate basis for sharing them.

4. For what purposes does CPI process the Users’ data and what is the legal basis?

CPI will process the personal data provided for the following purposes:


4.1. To manage use of the Website (cookies) and its security

Purpose: to allow navigation, ensure the operation of the Website, manage its security and, where appropriate, obtain metrics and usage statistics in line with the applicable cookie settings.

Legal basis: (i) technical need to enable the connection and use of the Website in the case of technical cookies, and (ii) Users’ consent when required for non-technical cookies, as established in the Cookie Policy.


4.2. To manage inquiries and requests received by email

Purpose: to manage and respond to queries, requests for information and communications sent by Users to the contact addresses published on the Website.

Legal basis: the Users’ consent when sending the communication and, where appropriate, the application of pre-contractual measures at the Users’ request, or both.


5. How long do we keep Users’ data?

CPI will keep the data only for the time necessary to meet the purpose for which we collected it, and then the data will be blocked while legal and contractual liabilities could arise.

In particular:

  • Cookies and browsing data: according to the deadlines in the Cookie Policy.
  • Email inquiries: for the time necessary to process and close the request and, if applicable, during the applicable statute of limitations or as long as necessary to address any liabilities.

6. To whom do we disclose the Users’ data?

In general, CPI will not disclose the data to third parties unless it is necessary to provide the service or manage the relationship, there is a legal obligation, or the Users have authorized it.


6.1. Cuatrecasas group entities

As a company integrated in the Cuatrecasas group, CPI can disclose Users’ data to other companies in the group when necessary for purposes of internal administration, technological support, maintenance and security of the Website, or for the centralized management of corporate services, always for purposes compatible with those described in this Privacy Policy.

Updated list of Cuatrecasas group companies:
https://www.cuatrecasas.com/media_repository/docs/GCA.pdf


7. International data transfers

If the disclosure of data to Cuatrecasas group entities or suppliers involves an international transfer outside the European Economic Area, CPI will apply appropriate safeguards, such as standard contractual clauses or other valid mechanisms under applicable law, to ensure an equivalent level of protection.


8. Automated decisions

Data will not be subject to decisions based solely on automated processing that produce legal effects or significantly affect the Users in a similar way.


9. Rights and how to exercise them

Users can exercise the rights of access, rectification, erasure, objection, restriction and portability, and can withdraw consent at any time.

Users can exercise these rights by sending a request, indicating the right they wish to exercise and providing the necessary information for CPI to verify their identity, if applicable, to:

If Users consider that their request has not been adequately addressed, they can file a complaint with the Spanish Data Protection Agency or with the competent authority.


10. Changes in the Privacy Policy

CPI can update this Privacy Policy to reflect legal, technical and operational changes. The current version will be published on this page.


Last update: February 2026