Security Policy

Data center security and location

The main servers of the Company are hosted in the DigitalOcean data center in Amsterdam (EU).

Security policies

The Company has implemented various measures to ensure that your information is adequately protected against unauthorized access, use, transfer, and deletion of data. Please note that risk can never be completely eliminated, but it can be mitigated and minimized. All measures taken by the Company significantly reduce that risk. The Company will not be held liable for any third party, including yourself, in the event of unauthorized access, use, and/or disclosure of information, unless due to gross negligence, willful misconduct, fraud, or bad faith by the Company.

The security measures adopted by the Company include:

1. Access to information stored on the Company's servers is restricted to a limited number of Company employees and third parties who can only access the information under very specific and limited circumstances, and are subject to our strict confidentiality rules.
2. The Company's servers are protected by:
   • Firewalls that establish a barrier between our trusted and secure internal network and the Internet.
   • IP restrictions, limiting access to an authorized list of IP addresses.
3. Each user can only access information belonging to their Company account.
4. We use HTTPS in the Company's services to ensure secure data transfer and prevent eavesdropping and third-party attacks.
5. The Company periodically reviews its information collection and processing practices to revise and correct this privacy policy accordingly.
6. All Company personnel have received privacy training and are aware of the security implications of handling information.
7. The Company follows a secure password allocation and retention procedure, ensuring that our staff can only access the information necessary to perform their tasks.

Access and transfers

The Company does not rent or sell your personal information, but may transfer your data to a limited set of trusted third parties in the following situations, which you explicitly agree to by using our services:

1. We will transfer your personal information when required by law or through a court order, as well as to comply with any legal or regulatory requirement or obligation. We will use all our efforts to ensure that such requirements or obligations are in accordance with applicable law.
2. We reserve the right to transfer your data to any third party if we have reasonable information to believe that the transfer is necessary for the purpose of an investigation and/or to enforce any breach of the terms of use (if applicable), to detect, prevent or address fraud, security, technical issues, or other irregularities or illegalities, and to protect the rights and interests, as well as the property, of the Company.

The Company also works with third-party providers and other partners who provide functions necessary for us to offer you better service.

We will only share information with the third parties necessary to provide our services, contractually binding them to maintain the confidentiality of the information we share with them, which can only be used for specific purposes. For example, among others, we use the services of third-party providers to host application data, a detail we analyze below.

Policy updates

This privacy policy may be updated to reflect changes and improvements affecting information security. You can always find the updated version of the policy at https://experience.cuatroiberica.es/privacy-policy.

We will notify you in advance of any modifications through the email associated with your account. By doing so, you agree that this form of notification constitutes adequate notice. All changes to our privacy policy will take effect either from the moment you access our website and/or use our services, or 30 calendar days after their publication on this site. Your use of the website and/or our services after the effective date of any modifications to this agreement will constitute your full acceptance of the agreement as modified.