Privacy Policy

This Privacy Policy describes how 4BlueTech Ventures SL ("4BlueTech", "we", "us", "our") collects, uses, stores, and protects personal data when you visit our website at www.4bluetech.com, use our services, or contact us. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Spanish data protection legislation (Ley Orgánica 3/2018, LOPDGDD).

1. Data Controller

If you have any questions about this policy or our data practices, you may contact us at the email address above.

2. What We Collect

2.1 Information you provide directly

We collect personal data you voluntarily provide when you:

• Contact us via the contact form or by emailing hello@4bluetech.com — we collect your name, email address, organisation, and the content of your message.
• Subscribe to our Compensate programme — we collect your name, email address, and organisation details to confirm your interest and progress your enrolment.
• Request partnership information — we collect contact details and project context you share.

2.2 Information collected automatically

When you visit our website, our hosting infrastructure may automatically log standard server data including your IP address, browser type, referring page, and the time of access. This data is used solely for security monitoring and diagnostic purposes and is not linked to your identity unless required for the investigation of a security incident.

We do not use tracking cookies, advertising pixels, or behavioural analytics services (such as Google Analytics) on this website.

2.3 Information we do not collect

We do not collect sensitive personal data (as defined under GDPR Article 9), payment card data, or personal data from individuals under the age of 16.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to enquiries — to reply to messages you send us via the contact form or by email.
• Programme administration — to manage your participation in the Compensate carbon offset programme, including issuing confirmation emails and tracking subscription status.
• Partnership development — to follow up on potential B2B or institutional collaborations you have expressed interest in.
• Compliance and security — to maintain the security and integrity of our systems, and to comply with legal obligations.

We will not use your personal data for automated profiling, re-sell it to third parties, or send you unsolicited commercial communications.

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Performance of a contract or pre-contractual steps (Art. 6(1)(b)) — when you enquire about or subscribe to the Compensate programme.
• Legitimate interests (Art. 6(1)(f)) — for responding to general enquiries, maintaining security, and conducting business development discussions. Our legitimate interest is to operate a functioning business and respond to parties who have proactively contacted us. We have assessed this interest against potential impact on your rights and found it proportionate.
• Legal obligation (Art. 6(1)(c)) — where processing is required by applicable law (e.g., financial record-keeping for subscriptions).

5. Data Retention

We retain personal data for as long as is necessary for the purpose for which it was collected:

• Contact and enquiry data — retained for up to 2 years from last contact, or until you request deletion.
• Compensate programme data — retained for the duration of your subscription plus 5 years, in line with Spanish commercial record-keeping requirements.
• Server access logs — typically retained for 90 days, deleted automatically thereafter.

6. Third-Party Processors

We may share your personal data with the following categories of trusted third-party service providers who assist us in operating our website and services:

• Hosting infrastructure — servers operated within the EU/EEA on which our website is hosted. Governed by appropriate data processing agreements.
• Email service — for the purpose of sending confirmation and communication emails. All providers are GDPR-compliant and bound by data processing agreements.
• Google Fonts — our website loads fonts via Google Fonts (fonts.googleapis.com). This causes your browser to make a request to Google's servers, which may log your IP address. For more information see Google's Privacy Policy.

We do not transfer personal data outside of the European Economic Area (EEA) except to processors that have implemented appropriate safeguards (such as Standard Contractual Clauses).

We do not sell, lease, or trade your personal data to any third party for marketing purposes.

7. Your Rights

Under the GDPR, you have the following rights with respect to your personal data:

• Right of access (Art. 15) — request a copy of the personal data we hold about you.
• Right to rectification (Art. 16) — request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten"), where no overriding legal obligation requires us to retain it.
• Right to restriction (Art. 18) — request that we restrict processing of your data in certain circumstances.
• Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.
• Right to object (Art. 21) — object to processing based on our legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@4bluetech.com. We will respond within 30 days. If you are not satisfied with our response, you have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

8. Cookies and Tracking

Our website uses only technically necessary cookies required for core website functionality (such as session state). We do not use advertising, tracking, or analytics cookies.

Google Fonts is loaded from an external CDN, which may result in Google logging your IP address when fonts are fetched. This is outside our control; if you prefer to avoid this, you may use browser extensions that block third-party font requests.

We do not set any cookies that require your consent under EU cookie legislation, as we do not use tracking or non-essential cookies.

9. Contact Us & Supervisory Authority

For any questions, requests, or concerns about this Privacy Policy or your data, please contact:

You have the right to file a complaint with the Spanish data protection authority:

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the website after changes constitutes acceptance of the updated policy.