Herdit S.L. (“Herdit”, “we”, “us”, “our” or “our”) appreciates your visit to our website and your interest in our products and services. Protecting your personal data and ensuring your privacy is a priority. This Privacy Policy explains how we collect, process, store and protect personal data provided by users (“User” or "you") when using our website, applications or online forms. It is designed to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable data protection laws. Likewise, the processing is carried out in accordance with Law 34/2002, on Information Society Services and Electronic Commerce (LSSI-CE).
For the purposes of this Privacy Policy, “User” means any natural person interested in the products and services offered by Herdit through its website. This policy describes who is responsible for your data, what data is collected, for what purposes and on what legal basis it is processed, how long it is kept, who has access to it, your rights, the security measures implemented, the use of cookies, external links and how we update this policy.
The data controller of the personal data collected through this website is:
Herdit S.L.
CIF: ESB01380856
Registered Office: Carretera de Altube Km 5.2, 01196 Aranguiz (Álava), Spain
Registered in the Mercantile Registry of Alava, Volume 1192, Folio 92, Page 10676.
E-mail: herdit@herdit.com
You can contact us at any time regarding data protection issues.
Herdit may collect and process the following types of personal data when using our website, applications or online forms:
3.1 Identification and contact information
They include first name, last name, company, title, e-mail address and telephone number, as well as any information included in messages sent to us.
3.2 Data collected through the forms
When a User completes and submits our contact or application/offer submission forms, Herdit collects the following data:
Name and surname
E-mail address
Telephone number
Company and position (if applicable)
Message sent or CV/documents attached
Purpose: respond to inquiries, handle job applications and maintain an internal communications log.
3.3 Technical and operating data
They include IP address, browser type, operating system, device identifiers and browsing behavior on the website. Cookies and similar technologies are used to enhance the user experience and ensure the functionality of the website, as described in our Cookie Policy.
3.4 Data related to security and translation tools
Wordfence is used to protect the website and prevent unauthorized access.
TranslatePress processes technical data to display the website in various languages according to the user's preferences.
The personal data we collect is processed to respond to inquiries, handle requests, provide information about our products and services, maintain professional relationships, as well as to improve the performance, functionality and security of the website. The data may also be processed to fulfill legal obligations and enforce contractual rights, as well as communicated to affiliated companies within the Herdit group where consent is given or legally required.
The processing of personal data collected by Herdit is carried out on the basis of one or more of the following GDPR legal bases, depending on the specific purpose:
User Consent
For sending inquiries through our contact forms or sending applications and job offers, the data is processed only after obtaining your explicit consent.
The User may withdraw his/her consent at any time, without affecting the legality of the processing carried out prior to the withdrawal.
Legitimate Interest
To ensure the security of the website and the systems that support it (e.g., through Wordfence), and to analyze the use of the website for content, performance and design optimization purposes, data is processed in anonymized or pseudonymized form.
This processing is carried out provided that the fundamental rights and freedoms of the Users are not affected.
Compliance with Legal Obligations
If it is necessary to retain certain data in order to comply with legal or regulatory obligations (e.g. in recruitment or employment management processes), the processing is carried out in accordance with the applicable legal obligation.
For any other processing of personal data, Herdit will request the User's prior consent or indicate the corresponding legal basis.
In addition, the use of certain third-party services, in particular web analytics tools such as Google Analytics, may involve international transfers of personal data outside the European Economic Area. Such transfers are carried out in accordance with the appropriate safeguards required by the General Data Protection Regulation, including the application of Standard Contractual Clauses approved by the European Commission and, where appropriate, additional protection measures.
Personal data provided by users will be kept only for the time necessary to fulfill the purposes for which they were collected and, where appropriate, while legal or contractual liabilities may arise in connection with their treatment.
In particular:
The data sent through the contact forms or application forms will be kept as long as necessary to fulfill the request, manage the corresponding process or maintain related professional communications.
Data processed for statistical analysis and website improvement purposes will be retained in accordance with the terms and settings established by the service providers used.
Data processed for security purposes will be retained for the time strictly necessary to ensure the protection of the website and prevent unauthorized access or malicious activity.
Once the data is no longer required for the stated purposes, it will be securely deleted or anonymized, except when its retention is necessary to comply with a legal obligation.
Herdit may share your personal data with affiliated companies within the Herdit group, with service providers who assist us with hosting, technical support, analysis and other business operations under GDPR-compliant data processing contracts, and with legal advisors, auditors or regulatory authorities where required by law. No personal data is sold or transferred for unrelated business purposes. Any transfers outside the European Economic Area are done in accordance with GDPR-compliant data protection mechanisms, such as Standard Contractual Clauses.
You have the right to access your personal data, request rectification of inaccurate or incomplete data, request erasure, restrict processing, exercise data portability, object to processing for legitimate interests or commercial purposes, withdraw consent at any time and lodge a complaint with the competent supervisory authority such as the Spanish Data Protection Agency (www.aepd.es).
These rights can be exercised free of charge by sending an e-mail to herdit@herdit.com or by written request addressed to Herdit S.L., Carretera de Altube Km 5.2, 01196 Aranguiz (Álava), Spain, including your full name, contact details, copy of your identity document and description of the request. In case of representation, proof of authorization must be provided.
Herdit implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, loss or disclosure. These measures include ongoing monitoring, risk assessment, staff training and compliance with industry best practices to ensure the confidentiality, integrity and security of your data.
Our website uses cookies and similar technologies to distinguish users, improve site functionality and analyze performance. Non-essential cookies require prior consent. For more information, please see our Cookie Policy.
Our website may contain links to external websites not operated by Herdit. We are not responsible for the privacy practices or the content of these websites. Before providing personal information on third party sites, we recommend that you review their privacy policies.
Herdit reserves the right to update this Privacy Policy from time to time. The current version will be posted on this website, and users are encouraged to review it periodically to stay informed about the type of information collected and how it is processed.
Last Update: January 26, 2026