Privacy policy
Last updated: 29 June 2026
This policy explains what personal data we process when you use the Mad Tech Campus platform, why, on what legal basis, and what rights you have. The platform is an internal tool for managing the Mad Tech Campus coworking space and community, at Matadero (Madrid, Spain).
Data controller
Under article 10 of Spanish Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), the details of the owner of this website are:
- Name: MAD TECH DISTRICT SL
- Tax ID: B25942749
- Address: Paseo de la Chopera, 14, 28045 Madrid, Spain
- Email: hola at madtechcampus.com
What data we process
We process only the data needed to manage your account, your organization, and use of the space:
- Identity and profile: name, email address, preferred language, and a profile photo if you upload one.
- Contact: phone number, if you provide it.
- Organization fiscal data: tax ID (NIF/CIF), billing email, and billing address. For self-employed individuals, the tax ID may identify a natural person.
- Membership and plan: which organization you belong to, your role, your membership status, and your assigned plan.
- Reservations and use of the space: your desk and room booking history (including the title and description you write on a room booking). This history reflects your presence in the space.
- Physical access: your access card identifier and its status.
- Consent records: which version of these documents you accepted, when, and the IP address you accepted from, as the proof of consent required by law.
- Activity (audit) logs: a record of relevant actions taken on the platform (for example, sign-ups, plan changes, card issuance), for security and traceability.
We do not process special categories of data (health, biometrics, beliefs, etc.) or data about minors. The platform contains no analytics or advertising tracking of any kind.
How we obtain your data
Most data you provide directly:
- When the admin of your organization or of the campus sets up your account.
- When you complete onboarding (your organization's fiscal data and your profile).
- When you upload a profile photo or an organization logo.
- When you book a desk or a room.
Other data is generated by use itself: consent records, audit logs, and booking history.
Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Manage your account and give access to the platform | Performance of a contract |
| Manage your organization's membership and access to the space | Performance of a contract |
| Issue invoices and keep accounting records (once billing is active) | Legal obligation |
| Keep proof of acceptance of the legal documents | Legal obligation |
| Security, fraud prevention, and audit logging | Legitimate interest |
| Send you operational emails (invitations, password resets, booking confirmations) | Performance of a contract |
| Show your profile in the member directory | Consent (optional, and you can turn it off) |
Recipients and processors
We do not sell your data or share it for commercial purposes. We share it only with providers that process it on our behalf:
- Supabase: database hosting, authentication, and file storage (photos and logos). Hosting region: AWS eu-west-1 (Ireland, EU).
- AhaSend: transactional email delivery (invitations, resets, confirmations). It receives the recipient address and the email content. Open and click tracking is disabled. Hosted in the EU (Iceland).
Your data is processed within the European Economic Area (Supabase in Ireland, AhaSend in Iceland), so no international transfers to third countries take place.
Retention
We keep your data while your account and your organization's membership are active. Once the relationship ends, we keep it for a default period of 5 years, unless the law requires a different period (for example, tax rules for billing data). Consent and audit records are kept as evidence for that same period.
Your rights
You have the right to:
- Access your personal data.
- Rectify inaccurate or incomplete data.
- Erase your data, under the conditions provided by law.
- Restrict or object to processing, under the conditions provided.
- Request the portability of your data.
- Withdraw your consent at any time, where processing is based on it (for example, the member directory).
To exercise any of these rights, write to us at hola at madtechcampus.com. We will respond within one month.
Cookies
We use only strictly necessary cookies to keep you securely signed in. We do not use analytics or advertising cookies.
Changes to this policy
We may update this policy. When the legal documents change, we will ask you to accept them again the next time you sign in. The date of the last update appears at the top of this page.
Complaints
If you believe we have not handled your data properly, you may complain to the Spanish Data Protection Agency (AEPD), www.aepd.es. We would appreciate it if you contacted us first at hola at madtechcampus.com so we can try to resolve it.