Legal

Privacy policy

1. Data controller

Catà Germans S.L. ("Catà Germans"), tax ID (NIF) B43370550, with its address at Carrer Priorat de Banyeres, Zona Industrial Can Catà, 43711 Banyeres del Penedès (Tarragona), Spain, telephone +34 977 67 73 92 and +34 977 67 85 20, and email cata@catagermans.com, is the controller of the personal data you provide through this website.

2. What data we collect

We only process the data you give us yourself through the forms on this website:

  • Quote requests: name, company, telephone, email, project description and any file or technical drawing you attach.
  • Visit requests: name, company, telephone, email and an optional description of the visit.
  • Job applications (Work with us): name, email, telephone and the CV in PDF format that you attach.
  • Technical security data: your IP address is turned into a temporary hashed identifier to limit mass submissions; the server may also generate technical access and error logs.

In addition, if you give your consent, we process website usage data (pages visited, clicks, scrolling and cursor movements, device type and browser) through the analytics tools described in section 7. This data does not include your name or any contact details and is linked to a pseudonymous identifier. Without your consent, no analytics data is collected and no analytics cookies are set.

3. Purposes and legal basis

  • Quotes and visits: to answer your request and take the pre-contractual steps you have asked for (Art. 6(1)(b) GDPR). We do not rely on consent as the legal basis for these forms.
  • Job applications: to assess and manage your application in recruitment processes, based on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Security and abuse prevention: to protect the website and limit automated submissions, based on the legitimate interest of Catà Germans and of its users in the security of the service (Art. 6(1)(f) GDPR).
  • Website analytics: to understand how the website is used so we can improve it, based on your consent (Art. 6(1)(a) GDPR), which you can give or withdraw at any time from the "Cookie preferences" link in the footer.

Fields marked with an asterisk are required for us to answer your request. We do not make automated decisions or build profiles with this data.

4. Data retention

Quote requests are deleted automatically after 24 months, and visit requests and CVs after 12 months. If a request leads to a contractual relationship, a claim or a legal obligation, the record may be blocked and kept for the period strictly necessary. The per-IP rate limit expires after 10 minutes. Technical server logs are kept for the security period configured by the hosting provider.

As for analytics: Microsoft keeps Clarity data for up to 30 days from the time it is recorded. The cookie that remembers your cookie choice expires after 6 months, and analytics cookies expire within the periods set by each provider.

Deletion covers the WordPress record and the associated private file. Any copies that remain in email systems or backups will be deleted according to their retention cycles and will be blocked for any other use.

5. Recipients

We do not sell or share your data for third parties' own purposes. Hosting, maintenance, backup and email providers may access it as data processors under the corresponding contract. If any provider processes data outside the European Economic Area, an adequacy decision, standard contractual clauses or another safeguard provided for by the GDPR will apply. You can ask us for information about these safeguards by writing to us.

If you enable analytics, website usage data is shared with Microsoft (Microsoft Ireland Operations Limited, Ireland) and Google. In the case of Microsoft Clarity, Microsoft acts as an independent controller, not as our processor: its processing of the data is governed by its own privacy statement. Microsoft stores the data in Azure and has standard contractual clauses in place for transfers to the United States.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent for a job application, by writing to cata@catagermans.com and stating the right you wish to exercise. We will only ask for additional information to verify your identity if we have reasonable doubts about who is making the request. If you believe the processing does not comply with the law, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies and third-party services

This website does not set any analytics cookies until you accept them. The first time you visit, a bar appears at the bottom of the page where you can accept or reject them; both options take a single click. You can change your mind at any time from the "Cookie preferences" link in the footer.

Cookies we use

  • catger_consent (first-party, 6 months): remembers whether you accepted or rejected analytics. It is strictly necessary so we do not ask you again on every page, and it does not require consent.
  • wp_consent_statistics and wp_consent_marketing (first-party): record your choice so that the rest of the website's components respect it.
  • _clck and _clsk (first-party, from Microsoft Clarity): only set if you accept. They store a pseudonymous identifier and link the pages of a single visit.

The website also stores the language you have chosen (CA/ES/EN) in your browser. This is technical storage, not a tracking cookie, and does not require consent.

Microsoft Clarity

With your consent we use Microsoft Clarity to understand how the website is used. Clarity records interactions (clicks, scrolling, cursor movements and how the page is rendered) and produces heatmaps and anonymous session replays. It does not collect your name or contact details, and masked content is never sent to Microsoft. If you reject cookies, Clarity is not loaded and sets nothing.

We have configured Clarity so that it never enables advertising storage: even if you accept, Microsoft's third-party advertising cookies are not set. You can read how Microsoft processes data in its privacy statement.

Google

The website loads Google Tag Manager, the component that would allow Google Analytics to be enabled. It works with Google's consent mode: until you accept, no Google cookies are set and no analytics data is sent to Google. Advertising storage remains disabled in all cases, whether you accept or not. Please note that simply loading this component involves a connection to Google's servers, which receive your IP address. You can read how Google processes data in the Google privacy policy.

The map on the "Contact" page is from Google Maps and only loads if you click "Show the map"; when you do, Google may set its own cookies. The website's fonts are hosted on our own server and do not create connections to Google Fonts.

8. Security

We apply technical and organisational measures to protect your data, including encrypted transmission (HTTPS), access restricted to authorised users, validation of attachment type and size, storage of CVs and drawings outside the website's public root, and automatic deletion within the periods stated.

Last updated: 31 August 2026