Privacy Policy
Cuatrecasas Innova Website
1. Purpose and definitions
This Privacy Policy (the “Privacy Policy”) governs how Cuatrecasas Legal, S.L.P. processes personal data on its website
innova.cuatrecasas.com (the “Website”).
For the purposes of this Privacy Policy, the term “Users” refers to any individuals accessing, browsing or interacting with the Website,
including using the links, forms and functionalities available on it.
2. Who is the data controller?
The controller of the personal data processed on the Website is Cuatrecasas Legal, S.L.P. (“Cuatrecasas” or the “Firm”),
with tax identification number B59942110 and address at Avenida Diagonal 191, 08018 Barcelona (Spain).
Users can contact Cuatrecasas’s data protection officer at
data.protection.officer@cuatrecasas.com.
3. What data do we process?
Depending on the Users’ use of the Website, Cuatrecasas can process the following categories of data:
A) Participation in programs/initiatives
Identification and contact data, professional data and project/company data provided by Users in the application forms for participation or collaboration,
e.g., programs such as Cuatrecasas Acelera and Cuatrecasas Fast Track, as well as additional information requested in each call for applications.
Where a particular form or process has a specific notice or policy, the terms of that notice or policy will govern for that particular processing,
e.g., there is a specific policy for “Applicant” linked to the program.
B) Contact
Identification and contact data, as well as the content of the message, when Users contact Cuatrecasas through the channels provided on the Website,
e.g., contact form or published email addresses.
C) Navigation (cookies and technical data).
IP address, online identifiers, browser/device information, pages visited, access dates/times, and data derived from the use of cookies and similar technologies.
Users can consult the details in the Cookie Policy.
D) Third-party data
If Users include third-party data, they declare that they have previously informed the third parties and that they have a legitimate basis for sharing them.
4. For what purposes does Cuatrecasas process the Users’ data and what is the legal basis?
Cuatrecasas will process the personal data for the following purposes:
4.1. To manage requests for participation in programs/initiatives
Purpose: to process, manage and evaluate Users’ (or the project’s or the company’s, or all) applications for participation in programs and initiatives
(e.g., Accelerate and Fast Track), as well as to manage the necessary communications associated with the process.
Legal basis: implementation of pre-contractual measures at the Users’ request or execution of the relationship derived from the request, or both; and,
where applicable, the Users’ consent for ancillary purposes as indicated in the applicable form or notice.
Where a process-specific notice or policy exists (e.g., “Applicant”), it will prevail for that particular processing.
4.2. Managing inquiries and contact requests
Purpose: to manage and respond to queries, requests for information and communications sent by Users through the channels provided on the Website.
Legal basis: the Users’ consent when sending the communication and, where appropriate, the application of pre-contractual measures at the Users’ request, or both.
4.3. To manage use of the Website (cookies) and its security
Purpose: to allow navigation, ensure the operation of the Website, manage its security and, where appropriate, obtain metrics and usage statistics in accordance with
the applicable cookie settings.
Legal basis: (i) technical need to enable the connection and use of the Website in the case of technical cookies, and (ii) Users’ consent when required for non-technical cookies,
as established in the Cookie Policy.
5. How long do we keep Users’ data?
Cuatrecasas will keep the data only for the time necessary to meet the purpose for which we collected it, and then the data will be blocked while legal and contractual liabilities could arise.
In particular:
Requests for participation (programs/initiatives): during processing and for a reasonable period after for follow-up, incident handling and fulfillment of obligations; and, if applicable,
during the applicable statute of limitations.
Contact: for the time necessary to process and close the request and, if applicable, during the applicable statute of limitations.
Cookies and browsing data: according to the deadlines in the Cookie Policy.
6. To whom do we disclose the Users’ data?
In general, Cuatrecasas will not disclose the data to third parties unless it is necessary to provide the service or manage the relationship, there is a legal obligation, or the Users have authorized it.
6.1. Cuatrecasas group entities
As parent company of the Cuatrecasas group, Cuatrecasas can disclose Users’ data to other companies in the group when necessary for purposes of internal administration, technological support, maintenance
and security of the Website, or for the centralized management of corporate services, always for purposes compatible with those described in this Privacy Policy. In such cases, these companies will process
the data as independent controllers or processors, as appropriate.
List of Cuatrecasas group companies:
https://www.cuatrecasas.com/media_repository/docs/GCA.pdf
7. International data transfers
If the use of suppliers or the disclosure of data to Cuatrecasas group entities involves an international transfer outside the European Economic Area, Cuatrecasas will apply appropriate safeguards, such as standard
contractual clauses or other valid mechanisms under applicable law, to ensure an equivalent level of protection.
8. Automated decisions
Data will not be subject to decisions based solely on automated processing that produce legal effects or significantly affect the Users in a similar way.
9. Rights and how to exercise them
Users can exercise the rights of access, rectification, erasure, objection, restriction and portability, and can withdraw consent at any time.
Users can exercise these rights by sending a request, indicating the right they wish to exercise and providing the necessary information for Cuatrecasas to verify their identity, if applicable, to:
- data.protection.officer@cuatrecasas.com, or
- in writing to Avenida Diagonal, 191, 08018 Barcelona (Spain)
If Users consider that their request has not been adequately addressed, they can file a complaint with the Spanish Data Protection Agency or with the competent authority.
10. Changes in the Privacy Policy
Cuatrecasas can update this Privacy Policy to reflect legal, technical and operational changes. The current version will be published on this page.
Last update: February 2026
© Cuatrecasas Legal S.L.P. 2026. Total and partial reproduction is prohibited. All rights reserved.
