Privacy policy

Who the controller is

Nueve Labs, S.L. (“quetrastero”), tax ID B23977804, registered office at Calle Blas Valero, 74, 03201 Elche (Alicante). For anything about your data, write to us at equipo@quetrastero.com.

If you search and browse centres

You can search without signing up and without giving us any data. We do not use analytics or advertising cookies: see the cookie policy.

If you tap “Near me”, your browser gives us your location for that search. We do not store it.

We serve the maps ourselves, with OpenStreetMap data: when you view them, your browser sends nothing to anyone else.

To keep the portal working and secure, our servers record some technical data about what happens on them, and delete it after a month.

If you create an account

We store your email address, whether you are an individual or a company, your first name and surname (for a company, also its registered name and its CIF), your phone number if you give it to us, your language, the centres you save to your favourites and when you accepted the terms of use.

You sign in with your email address and a password, which we store as a summary that cannot be reversed. When you choose it, we check with Have I Been Pwned that it does not appear in known data breaches, without sending them the password or your email address: only the beginning of its summary. The code we send you to confirm your email or change your password is also stored as a summary, and to protect you we record wrong passwords typed with your email address: both are deleted the next day.

If you sign in with Google or Apple, they give us your email address, an identifier of yours and your name (Apple, only the first time and if you share it). We never see your Google or Apple password. Apple lets you hide your email address: it then gives us one of its own, which forwards to yours. Google and Apple know that you sign in to quetrastero, and handle that under their own privacy policies.

If you tick “Save my details for next time” when you rent, we also store your ID document, your phone number, your address and, for a company, who signs on its behalf, so that they are filled in for your next rental. You can delete them in “My account”.

If you tick that you would like news and offers, we email them to you because you give us your consent, and you can withdraw it whenever you like in “My account”.

Everything else is to give you what you ask for when you create the account, and we keep it for as long as you have it. In “My account” you can download your data and delete the account. If you do not sign in for 24 months, we delete it; if you start creating it and do not finish, after a month. Your contracts are not deleted with it: they belong to the centre’s operator.

If you request information or join a waiting list

We store your email address and, if you give them to us, your name, your phone number and your question, together with the centre, the size you are looking for, your language and when you agreed to be contacted.

This is so we can pass your request on to the centre’s operator, who replies to you directly. If the centre does not have an operator on quetrastero yet, we reply to you ourselves or pass it on.

We do this because you give us your consent by ticking the box, and you can withdraw it whenever you like. The operator receives your request by email and keeps it under its own privacy policy. We delete it after 12 months.

If you sign up to be told when a centre opens

We store your email address and, if you give them to us, your name and your phone number, together with the centre, the size you are interested in, your language, the opening month we gave you and when you agreed that we could write to you.

This is so we can write to you on the day the centre opens and, if its opening is delayed, tell you the new date. The centre’s operator also receives your request, in case it wants to tell you something before then.

We do this because you give us your consent by ticking the box, and you can withdraw it whenever you like. We delete it 12 months after telling you about the opening or, if the centre never opens, 24 months after you signed up.

If you rent online or sign your contract

When you rent a storage unit online on the portal, or sign online the contract your centre sends you, the controller of your data is the centre’s operator, which is who you sign with: the contract tells you. quetrastero processes it on the operator’s behalf, to handle the rental, the contract and the payments with its software, quetrastero Gestión.

This means your name or your company’s name, your ID document, your email address, your phone number, your address, the contract you accept (with the date, time, IP address and browser you accept it with) and your payments. When you start an online rental we also record your IP address, so that nobody can hold many storage units at once.

You pay with Stripe, into the operator’s account: your card details go directly to Stripe, and neither quetrastero nor the centre can see them.

If you start an online rental and do not finish it, we delete your data after 30 days; if you did pay and the money was refunded to you, after six months, in case the payment needs clarifying. The operator keeps your contract details for as long as the law requires.

If you work for an operator: quetrastero Centros and Gestión

For your account we store your name, your email address, your language and your password, hashed so that it cannot be reversed, and, if you turn them on, your two-factor authentication and your passkeys. When you choose a password, we check with Have I Been Pwned that it does not appear in known breaches, without sending them your password or your email address: only the start of its hash.

When you sign up your operator, we store your company’s details (its registered name or, if you are self-employed, your name, its CIF or NIF, its registered address and its website), the contact details (your name, your position, your phone number and your email address), how many centres you have and what you manage them with. The quetrastero team reviews them before accepting the sign-up and checks, for example, that the CIF is valid and that the email address belongs to the website’s domain.

We also store what you do in your operator account: its centres, the people you invite to your team (their email address, role and centres) and, if you claim a listing, the phone number to verify it and the email address where you want the requests.

To place the pin when you add a centre, we look up its address on OpenStreetMap (Nominatim). If you use the map’s aerial view, your browser requests the aerial photos from Spain’s National Geographic Institute (IGN), which sees your IP address.

This is to provide the service you ask us for, and we keep it while you have your account. We delete a listing claim, with its phone number, after 12 months.

An artificial intelligence agent (Claude, by Anthropic) translates the descriptions of your centres and reviews their listings and photos. That is all it receives: nothing about your customers.

In quetrastero Gestión, your tenants’ data is yours: quetrastero processes it on behalf of your operator.

Who else processes your data

Only the providers we need to give you the service, on our behalf:

• Amazon Web Services, in Paris (European Union): the servers, the database, the files, the maps and the emails we send you;
• Stripe: payments;
• Anthropic: the agent that translates and reviews the centres;
• the provider of our email inbox, in Spain.

We do not sell your data or use it for advertising.

Outside the European Union

Stripe and Anthropic belong to US groups. When your data leaves the European Union, it does so with the safeguards of the GDPR: the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can ask us to see your data, correct it, delete it, take it with you, object to our processing it or restrict what we do with it. Write to us at equipo@quetrastero.com. If it concerns a rental or a contract, the decision lies with the centre’s operator, and we will help you reach them.

If you believe we are not handling it properly, you can complain to the Spanish Data Protection Agency: https://www.aepd.es.

Security

Everything travels encrypted. Passwords are stored hashed, and two-factor secrets encrypted. Only those who need the data for their work can access it.

If we change this policy, you will see it here, with the date of the latest version.