This website uses its own and third-party cookies (including Google and LinkedIn) to ensure the proper functioning of the site, analyze user navigation, and improve the services offered. You can obtain more information about the use of cookies or configure your preferences by accessing our Cookie Policy.

More information about the use of cookies can be found in our Cookie Policy.

C4B
sign instart 7-day free trial

Legal

Privacy Policy

How C4B and Embrace Ideas handle personal data, platform usage information, and rights requests.

Last updated23 September 2026

1. Who is responsible for processing your data?

The controller of the personal data collected through the websites embraceideas.es and climate4buildings.com and the associated C4B platform is EMBRACE IDEAS, SL (hereinafter, the “Controller”). The identifying details of the Data Controller are as follows: Owner: EMBRACE IDEAS, SL ​ NIF: B22609408 ​ Address: Passatge de Martras 9, 01, 08004 Barcelona, Spain For any questions related to the processing of your personal data, users can contact the Data Controller via email at [email protected] . Likewise, for queries specifically related to the protection of personal data or for the exercise of rights recognized by applicable regulations, interested parties may contact the Data Protection Officer at [email protected]

2. Recommendations

Users are advised to carefully read this Privacy Policy in order to understand how their personal data is collected, used and protected in the context of using the Website. Additionally, the following safety recommendations should be taken into account while navigating:

  • Keep your computer equipment properly protected by using up-to-date antivirus software and other security tools that allow you to detect and prevent the presence of malicious programs, such as viruses, malware or spyware, that may compromise the security of internet browsing or the information stored on the device.
  • Use updated versions of internet browsers, as well as keeping device operating systems properly updated, in order to reduce potential security vulnerabilities.
  • Read and periodically review this Privacy Policy , as well as the other legal texts available on the EMBRACE IDEAS, SL Website , in order to know the conditions applicable at any given time.

3. Information on the data that EMBRACE IDEAS, SL collects through the Website

For the proper functioning of the websites embraceideas.es and climate4buildings.com and the associated C4B platform, EMBRACE IDEAS, SL may process certain personal data provided by users through forms, registration processes, communications or through the use of the platform itself. In particular, the following categories of personal data may be processed:

  1. Identifying information: user's name and surname.
  2. Contact details: email address and, where applicable, telephone number or business address.
  3. Account and platform usage data: information necessary for the creation and management of the user account, as well as data related to the use of the platform and its functionalities.
  4. Data related to projects entered into the platform: information relating to the location or characteristics of architectural projects that the user enters for the generation of climate or energy analyses and reports.
  5. Technical and browsing data: IP address, device identifiers, activity logs, the approximate location (country, region and city) derived from the IP address or the browser's time zone and language, and other technical data necessary to ensure the security, operation and improvement of the service. IP-based locations use IP Geolocation by DB-IP (https://db-ip.com), licensed under CC BY 4.0.
  6. Analytics and advertising data: if you accept analytical or advertising cookies, the campaign or ad-click identifier that brought you to the Website and Google Analytics identifiers, as described in section 5 and in the Cookies Policy; and, whatever you choose, a record of your cookie choice and when you made it, kept with your account so that we can show what you agreed to.

EMBRACE IDEAS, SL will only process personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is collected, in accordance with the principle of data minimization established in Regulation (EU) 2016/679 (GDPR).

4. Why is EMBRACE IDEAS, SL authorized to process your data?

The processing of users' personal data by EMBRACE IDEAS, SL is carried out in accordance with the legal bases provided for in Regulation (EU) 2016/679, General Data Protection Regulation (GDPR).

In particular, the treatment may be based on:

  1. The execution of a contractual relationship or the application of pre- contractual measures , when the processing is necessary to create an account, provide access to the platform, manage the subscription, respond to user requests or allow the use of the functionalities offered.
  1. The user's consent , when they voluntarily provide their data through forms, request information, accept the sending of communications or authorize processing that requires a specific basis of consent.
  1. Compliance with legal obligations , when the processing is necessary to comply with obligations imposed by applicable regulations.
  1. The legitimate interest of EMBRACE IDEAS, SL , when necessary to guarantee the security of the platform, prevent misuse, improve the service, perform technical support tasks or ensure the correct functioning of the website and the platform.
  1. Your consent (art. 6.1.a GDPR) for analytical and advertising cookies, and for telling Google about sign-ups and subscriptions that came from our ads.

When the processing is based on consent, the user may withdraw it at any time, without this affecting the lawfulness of the processing carried out prior to such withdrawal.

EMBRACE IDEAS, SL undertakes to process personal data lawfully, fairly and transparently, adopting the appropriate technical and organizational measures to guarantee its security and confidentiality, in accordance with applicable regulations.

5. What are the purposes of processing your personal data?

Personal data that may be collected through the websites embraceideas.es or climate4buildings.com or through the use of the platform will be processed by EMBRACE IDEAS, SL for the following purposes:

  1. Manage user registration and account , allowing access to and use of the technological platform and its functionalities.
  2. To provide the services offered through the platform , including the generation of climate and energy analyses, the management of projects introduced by users, and the preparation of automated reports.
  3. To handle requests, inquiries or communications made by users through contact forms, email or other enabled channels.
  4. To ensure the proper functioning, maintenance and improvement of the platform , as well as the security of the systems and the prevention of misuse.
  5. Comply with applicable legal obligations , as well as attend to requirements from public or administrative authorities when necessary.
  6. Understanding how the website and the platform are used (Google Analytics), if you accept analytical cookies. When you are signed in, we also send Google Analytics a random account identifier (never your name or email) so that visits from your devices are counted once.
  7. Measuring the results of our advertising (Google Ads, LinkedIn), if you accept advertising cookies. We keep the campaign and the ad-click identifier that brought you with your account. If you then create an account or start a paid subscription, we tell Google about that result together with the ad-click identifier and a hashed (SHA-256) copy of your email address. Google uses this only to measure our ads.
  8. Measurement without cookies: until you make a choice, and if you reject analytical or advertising cookies, our pages still send Google limited signals that do not use cookies — the time, your browser type, the address of the page you are on (without personal details such as search terms or email addresses), the page that referred you, what you do on our site (for example viewing a page, signing up, signing in, starting a checkout, creating a project or running your first search, never what you type), whether you arrived from an ad, and your consent choice — so that Google can estimate results in aggregate. No cookies are stored or read for this.

Once the user has given their consent, EMBRACE IDEAS, SL may send informative communications related to its services or news through the contact means provided.

6. Truthfulness of the data provided by the Users

The User guarantees that the personal data provided to EMBRACE IDEAS, SL is truthful, accurate, complete and up-to-date. The User will be responsible for notifying EMBRACE IDEAS, SL of any changes to the personal data provided so that it can be kept up to date at all times. If the User provides personal data of third parties, they guarantee that they have previously informed these persons about the content of this Privacy Policy and that they have the necessary legitimacy to provide said data to EMBRACE IDEAS, SL for the purposes indicated. EMBRACE IDEAS, SL reserves the right to exclude from its services any User who has provided false, inaccurate or incomplete data, without prejudice to any other legal actions that may be taken.

7. Data retention

The personal data provided by users will be kept by EMBRACE IDEAS, SL only for the time necessary to fulfill the purposes for which they were collected, including the management of the user account, the provision of the services offered through the platform and the handling of requests or queries.

In particular, the data associated with the user account and the projects entered on the platform may be retained while the account remains active or for the time necessary for the provision of the service.

Once personal data is no longer needed for these purposes, it will be blocked for the legally established periods for addressing potential liabilities and will subsequently be securely deleted.

In those cases where the processing is based on the user's consent, the data will be kept until such consent is withdrawn.

Ad-click and analytics identifiers stored with your account are deleted 100 days after they were collected; the campaign source is kept while your account exists. Activity logs are deleted after 13 months. The IP address, the browser details and the city are removed from them after 90 days, keeping only the country and region; records of failed sign-in attempts are deleted after 90 days. Your browser keeps the campaign and ad-click record for 90 days. Google Analytics keeps event-level data for 14 months.

EMBRACE IDEAS, SL will adopt the appropriate technical and organizational measures to guarantee the security and confidentiality of personal data throughout the entire retention period.

8. User Rights

Users may exercise at any time the rights granted to them by current legislation on the protection of personal data.

In particular, interested parties may exercise the following rights:

  • Right of access: the right to obtain confirmation as to whether EMBRACE IDEAS, SL is processing personal data concerning you and, if so, to access such personal data.
  • Right of rectification: the right to request the modification or correction of personal data that is inaccurate or incomplete.
  • Right to erasure: the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected.
  • Right to object: the right to object to the processing of your personal data when there are reasons related to your particular situation.
  • Right to restriction of processing: the right to request the restriction of the processing of your personal data in certain circumstances provided for in the applicable regulations.
  • Right to data portability: the right to receive the personal data you have provided to EMBRACE IDEAS, SL in a structured, commonly used and machine- readable format, and to transmit it to another data controller where technically feasible.

To exercise any of these rights, interested parties may contact EMBRACE IDEAS, SL through the contact channels indicated on the Website or via the email address enabled for issues related to data protection.

Likewise, if you believe that the processing of your personal data does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency ( www.aepd.es ).

9. Data Security

EMBRACE IDEAS, SL will treat the personal data of Users in an absolutely confidential manner and will maintain the due duty of secrecy with respect to them , in accordance with the provisions of the applicable regulations on data protection.

Likewise, EMBRACE IDEAS, SL has adopted the necessary technical and organizational measures to guarantee a level of security appropriate to the risk, in order to prevent alteration, loss, unauthorized processing or access to personal data, taking into account the state of the art, the nature of the data processed and the risks to which they are exposed.

These measures are reviewed and updated periodically with the aim of ensuring the security and integrity of the information processed.

However, the User should be aware that security measures on the Internet are not impenetrable and that, therefore, the absolute security of information transmitted through the network cannot be guaranteed.

10. Transfers and/or assignments to third parties

EMBRACE IDEAS, SL will not communicate the personal data of Users to third parties, except in those cases where such communication is necessary for the fulfillment of the purposes described in this Privacy Policy or when there is a legal obligation that requires it. In this regard, personal data may be communicated to public administrations, competent authorities or other bodies when such communication is necessary for compliance with legal obligations or for the provision of services developed by EMBRACE IDEAS, SL . Likewise, certain providers that provide services to EMBRACE IDEAS, SL (for example, technological services, web hosting, maintenance or IT support) may have access to personal data as data processors , exclusively for the provision of said services and always under the corresponding contractual guarantees in the area of data protection. Under no circumstances will these providers process the data for their own purposes or communicate it to third parties.

In addition, if you accept analytical or advertising cookies, the data described in section 5 (VI) and (VII) is shared with the following companies, and the limited signals described in section 5 (VIII) are sent to Google even if you do not:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google Analytics and Google Ads).
  • LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (LinkedIn Insight Tag, on our website and in the platform).

Depending on the service, these companies process the data on our behalf or as independent controllers, under the data protection terms they offer to businesses. Their privacy policies are available at policies.google.com/privacy and linkedin.com/legal/privacy-policy .

International transfers: Google and LinkedIn may process data outside the European Economic Area, including in the United States. Google LLC and LinkedIn Corporation are certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023, and both companies also rely on the Standard Contractual Clauses approved by the European Commission where required.

11. Questions

If you have any questions, queries or requests related to this Privacy Policy or the processing of your personal data, you can contact EMBRACE IDEAS, SL through the contact channels indicated on the Website or via the email address provided for this purpose: [email protected] .

Likewise, if you believe that the processing of your personal data does not comply with current data protection regulations, you have the right to file a complaint with the Spanish Data Protection Agency ( www.aepd.es ).

12. Acceptance and Consent

The User declares to have been informed of the conditions on the protection of personal data contained in this Privacy Policy , accepting the processing of his personal data by EMBRACE IDEAS, SL in the manner and for the purposes indicated therein. Likewise, in those cases where the processing of data is based on the User's consent, this will be understood to be given by express acceptance of this Privacy Policy and, where appropriate, by checking the boxes enabled for this purpose in the forms available on the Website.

Last updated: 1 October 2026

Back to home