Privacy Policy

1. Who is responsible for processing your data?

The controller of the personal data collected through the websites embraceideas.es and climate4buildings.es and the associated Climate4Buildings tecnológicaassociated platform is EMBRACE IDEAS, SL (hereinafter, the “ Controller ”). The identifying details of the Data Controller are as follows: Owner: EMBRACE IDEAS, SL ​ NIF: B22609408 ​ Address: Passatge de Martras 9, 01, 08004 Barcelona, Spain For any questions related to the processing of your personal data, users can contact the Data Controller via email at info@embraceideas.es . Likewise, for queries specifically related to the protection of personal data or for the exercise of rights recognized by applicable regulations, interested parties may contact the Data Protection Officer at dpo@embraceideas.es

2. Recommendations

Users are advised to carefully read this Privacy Policy in order to understand how their personal data is collected, used and protected in the context of using the Website. Additionally, the following safety recommendations should be taken into account while navigating:

• Keep your computer equipment properly protected by using up-to-date antivirus software and other security tools that allow you to detect and prevent the presence of malicious programs, such as viruses, malware or spyware, that may compromise the security of internet browsing or the information stored on the device.

• Use updated versions of internet browsers, as well as keeping device operating systems properly updated, in order to reduce potential security vulnerabilities.

• Read and periodically review this Privacy Policy , as well as the other legal texts available on the EMBRACE IDEAS, SL Website , in order to know the conditions applicable at any given time.

3. Information on the data that EMBRACE IDEAS, SL collects through the Website

For the proper functioning of the website embraceideas.es y and climate4buildings.es and the associated Climate4Buildings platform, de la plataforma tecnológica asociadaEMBRACE IDEAS, SL may process certain personal data provided by users through forms, registration processes, communications or through the use of the platform itself. In particular, the following categories of personal data may be processed:

1. Identifying information: user's name and surname.
2. Contact details: email address and, where applicable, telephone number or business address.
3. Account and platform usage data: information necessary for the creation and management of the user account, as well as data related to the use of the platform and its functionalities.
4. Data related to projects entered into the platform: information relating to the location or characteristics of architectural projects that the user enters for the generation of climate or energy analyses and reports.
5. Technical and browsing data: IP address, device identifiers, activity logs and other technical data necessary to ensure the security, operation and improvement of the service. EMBRACE IDEAS, SL will only process personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is collected, in accordance with the principle of data minimization established in Regulation (EU) 2016/679 (GDPR).

4. Why is EMBRACE IDEAS, SL authorized to process your data?

The processing of users' personal data by EMBRACE IDEAS, SL is carried out in accordance with the legal bases provided for in Regulation (EU) 2016/679, General Data Protection Regulation (GDPR).

In particular, the treatment may be based on:

1. The execution of a contractual relationship or the application of pre- contractual measures , when the processing is necessary to create an account, provide access to the platform, manage the subscription, respond to user requests or allow the use of the functionalities offered.

1. The user's consent , when they voluntarily provide their data through forms, request information, accept the sending of communications or authorize processing that requires a specific basis of consent.

1. Compliance with legal obligations , when the processing is necessary to comply with obligations imposed by applicable regulations.

1. The legitimate interest of EMBRACE IDEAS, SL , when necessary to guarantee the security of the platform, prevent misuse, improve the service, perform technical support tasks or ensure the correct functioning of the website and the platform.

When the processing is based on consent, the user may withdraw it at any time, without this affecting the lawfulness of the processing carried out prior to such withdrawal.

EMBRACE IDEAS, SL undertakes to process personal data lawfully, fairly and transparently, adopting the appropriate technical and organizational measures to guarantee its security and confidentiality, in accordance with applicable regulations.

5. What are the purposes of processing your personal data?

Personal data that may be collected through the website embraceideas.es or climate4buildings.com or through the use of the platform will be processed by EMBRACE IDEAS, SL for the following purposes:

1. Manage user registration and account , allowing access to and use of the technological platform and its functionalities.
2. To provide the services offered through the platform , including the generation of climate and energy analyses, the management of projects introduced by users, and the preparation of automated reports.
3. To handle requests, inquiries or communications made by users through contact forms, email or other enabled channels.
4. To ensure the proper functioning, maintenance and improvement of the platform , as well as the security of the systems and the prevention of misuse.
5. Comply with applicable legal obligations , as well as attend to requirements from public or administrative authorities when necessary.

Once the user has given their consent, EMBRACE IDEAS, SL may send informative communications related to its services or news through the contact means provided.

6. Truthfulness of the data provided by the Users

The User guarantees that the personal data provided to EMBRACE IDEAS, SL is truthful, accurate, complete and up-to-date. The User will be responsible for notifying EMBRACE IDEAS, SL of any changes to the personal data provided so that it can be kept up to date at all times. If the User provides personal data of third parties, they guarantee that they have previously informed these persons about the content of this Privacy Policy and that they have the necessary legitimacy to provide said data to EMBRACE IDEAS, SL for the purposes indicated. EMBRACE IDEAS, SL reserves the right to exclude from its services any User who has provided false, inaccurate or incomplete data, without prejudice to any other legal actions that may be taken.

7. Data retention

The personal data provided by users will be kept by EMBRACE IDEAS, SL only for the time necessary to fulfill the purposes for which they were collected, including the management of the user account, the provision of the services offered through the platform and the handling of requests or queries.

In particular, the data associated with the user account and the projects entered on the platform may be retained while the account remains active or for the time necessary for the provision of the service.

Once personal data is no longer needed for these purposes, it will be blocked for the legally established periods for addressing potential liabilities and will subsequently be securely deleted.

In those cases where the processing is based on the user's consent, the data will be kept until such consent is withdrawn.

EMBRACE IDEAS, SL will adopt the appropriate technical and organizational measures to guarantee the security and confidentiality of personal data throughout the entire retention period.

8. User Rights

Users may exercise at any time the rights granted to them by current legislation on the protection of personal data.

In particular, interested parties may exercise the following rights:

• Right of access: the right to obtain confirmation as to whether EMBRACE IDEAS, SL is processing personal data concerning you and, if so, to access such personal data. •
• Right of rectification: the right to request the modification or correction of personal data that is inaccurate or incomplete.
• Right to erasure: the right to request the deletion of your personal data when, among other reasons, the data is no longer necessary for the purposes for which it was collected. •
• Right to object: the right to object to the processing of your personal data when there are reasons related to your particular situation.

• Right to restriction of processing: the right to request the restriction of the processing of your personal data in certain circumstances provided for in the applicable regulations. •
• Right to data portability: the right to receive the personal data you have provided to EMBRACE IDEAS, SL in a structured, commonly used and machine- readable format, and to transmit it to another data controller where technically feasible.

To exercise any of these rights, interested parties may contact EMBRACE IDEAS, SL through the contact channels indicated on the Website or via the email address enabled for issues related to data protection.

Likewise, if you believe that the processing of your personal data does not comply with current regulations, you may file a complaint with the Spanish Data Protection Agency ( www.aepd.es ).

9. Data Security

EMBRACE IDEAS, SL will treat the personal data of Users in an absolutely confidential manner and will maintain the due duty of secrecy with respect to them , in accordance with the provisions of the applicable regulations on data protection.

Likewise, EMBRACE IDEAS, SL has adopted the necessary technical and organizational measures to guarantee a level of security appropriate to the risk, in order to prevent alteration, loss, unauthorized processing or access to personal data, taking into account the state of the art, the nature of the data processed and the risks to which they are exposed.

These measures are reviewed and updated periodically with the aim of ensuring the security and integrity of the information processed.

However, the User should be aware that security measures on the Internet are not impenetrable and that, therefore, the absolute security of information transmitted through the network cannot be guaranteed.

10. Transfers and/or assignments to third parties

EMBRACE IDEAS, SL will not communicate the personal data of Users to third parties, except in those cases where such communication is necessary for the fulfillment of the purposes described in this Privacy Policy or when there is a legal obligation that requires it. In this regard, personal data may be communicated to public administrations, competent authorities or other bodies when such communication is necessary for compliance with legal obligations or for the provision of services developed by EMBRACE IDEAS, SL . Likewise, certain providers that provide services to EMBRACE IDEAS, SL (for example, technological services, web hosting, maintenance or IT support) may have access to personal data as data processors , exclusively for the provision of said services and always under the corresponding contractual guarantees in the area of data protection. Under no circumstances will these providers process the data for their own purposes or communicate it to third parties.

11. Questions

If you have any questions, queries or requests related to this Privacy Policy or the processing of your personal data, you can contact EMBRACE IDEAS, SL through the contact channels indicated on the Website or via the email address provided for this purpose: dpo@embraceideas.es .

Likewise, if you believe that the processing of your personal data does not comply with current data protection regulations, you have the right to file a complaint with the Spanish Data Protection Agency ( www.aepd.es ).

12. Acceptance and Consent

The User declares to have been informed of the conditions on the protection of personal data contained in this Privacy Policy , accepting the processing of his personal data by EMBRACE IDEAS, SL in the manner and for the purposes indicated therein. Likewise, in those cases where the processing of data is based on the User's consent, this will be understood to be given by express acceptance of this Privacy Policy and, where appropriate, by checking the boxes enabled for this purpose in the forms available on the Website.

Last updated: March 2026