1. Data controller
Tcatik is the trading name of RED FOX ENGINEERING SL, the controller for the processing described in this policy.
Tax identification number (NIF): B76349158.
Tax address: Calle Antonio Martín Lopez, 35100, San Bartolomé de Tirajana.
2. Enquiries and service requests
We process the name, email address, company and telephone number you provide, your selected service, message and attachments to handle your request, communicate with you and, when requested, prepare a service proposal. Do not send information that is unnecessary for your enquiry.
For enquiries about entering into a contract, the legal basis is taking steps at your request before a contract (GDPR Article 6(1)(b)). For general enquiries unrelated to a contract, it is Tcatik’s legitimate interest in answering communications (Article 6(1)(f)); you may object where applicable. Submission does not constitute consent to advertising.
Required fields are marked with an asterisk. Company and telephone are optional. Without the required information, we cannot process the form.
3. Job applications and CVs
The “Work with us” option lets you send contact details, a message and your CV for Tcatik to assess your application and contact you about it. An attachment is required; company and telephone are optional. Avoid including health information or other unnecessary sensitive data.
The legal basis for assessing the application you submit is taking steps at your request before a contract (GDPR Article 6(1)(b)). This form does not provide for sharing CVs with other companies or keeping a talent pool for future vacancies.
CVs are received in the team’s mailbox. Retention must be limited to assessing the application and the relevant recruitment process. Once that purpose ends, they must be deleted, except for data that must be retained with processing restricted to address legally enforceable liabilities.
4. Email delivery and retention
Your request and attachments are emailed to hola@tcatik.com. You receive an acknowledgement in the form’s language without attachments or a copy of your message. The application does not keep an archive of enquiries or CVs in its database; files are processed in private temporary storage and memory during delivery. Mailboxes and their providers may retain messages and copies.
Enquiries are retained while the request is being handled and followed up. Once concluded, only data needed to meet legal obligations or address potential liabilities should be retained for the applicable periods, with use restricted accordingly. Information needed for a subsequent contract is processed under that relationship and the relevant obligations.
These criteria also apply to mailbox messages, attachments and copies: the absence of website storage does not remove the obligations to limit retention and delete data.
5. Browsing, security and private access
Website use may involve processing IP addresses, browser and device information and data needed to provide the service and prevent abuse. Such data are not considered anonymous by default. The legal basis is the legitimate interest in protecting the website and its users (GDPR Article 6(1)(f)).
Contact and login use Cloudflare Turnstile to verify requests and prevent automated abuse. Cloudflare processes technical connection, browser and device signals for this purpose. Its privacy information is linked below.
Private access is restricted to authorised people. Account and session data are used for authentication, permissions and panel security, based on the relationship authorising access and the legitimate interest in keeping it secure.
The application uses access controls and technical safeguards. No system can guarantee the complete absence of incidents.
7. Recipients and international transfers
Authorised Tcatik staff process your data. Email, hosting, maintenance and security providers may access the data needed to provide their services. We do not sell data or share CVs with partner companies through this form. Data may be disclosed to authorities where legally required.
Cloudflare and, if activated with your consent, Google and Meta may process data outside the European Economic Area. Safeguards must match each provider and operation under GDPR Chapter V; the same safeguard cannot be assumed for all providers. You can request information about the providers used and applicable safeguards at hola@tcatik.com. Optional technologies are described in the cookie notice.
8. Rights and complaints
You may request access, rectification, erasure, restriction and portability, and object to processing where applicable. Where processing is based on consent, you may withdraw it at any time without affecting previous lawful processing.
Send requests to hola@tcatik.com, specifying the right you wish to exercise and enough information to locate your data. An identity document is not routinely required: proportionate additional information will only be requested if there are reasonable doubts about your identity. Representatives must demonstrate their authority.
A response must be provided within one month of receipt. This may be extended by two further months for complex or numerous requests; you will be informed of the extension and reasons within the first month.
You may complain to the Spanish Data Protection Agency if you believe your rights have been infringed.
9. Automated decisions and third-party data
This form does not make hiring decisions or assess applications solely through automated decision-making.
Provide only your own data or third-party information you are entitled to disclose. The website is aimed at businesses and professionals and does not request children’s personal data for browsing.
10. Updates
This policy will be updated when processing or website functions change. Last updated: 31 October 2026.