Privacy policy

The controller of the personal data collected through this form is Startup Grind, Inc., 265 Cambridge Ave #60808, Palo Alto, CA 94306, United States. Email: privacy@startupgrind.com.

Local contact point: Startup Grind Madrid — madrid@startupgrind.com.

Startup Grind Madrid is the local Startup Grind chapter in Madrid.

This local policy complements the general Startup Grind Privacy Policy and explains specifically how data collected through forms, pages, activities and tools managed for Startup Grind Madrid is used.

EU representative, where applicable: Startup Grind, Inc. Data Protection Officer, where applicable: Startup Grind, Inc.

This policy applies to data collected when a person:

• Joins the Startup Grind Madrid community.
• Subscribes to its communications.
• Completes a form managed by Startup Grind Madrid.
• Takes part in a survey, call, programme or activity.
• Registers for an initiative organised or co-organised by Startup Grind Madrid.
• Interacts with Startup Grind Madrid via email, phone, messaging, social media or other professional channels.

Depending on the information provided and the interaction, we may process the following categories of data:

• Identification data, such as first name and surname.
• Contact data, such as email or phone number.
• Professional data and profiles provided by the user, such as their LinkedIn profile.
• Data related to participation in the community, events, programmes, initiatives or communications.
• Information about the origin of the sign-up, including form, page, campaign, event or partner.
• Technical information needed to manage and evidence the sign-up and the consent.
• Preferences, interactions and responses to our communications.
• Information derived from event participation, including photographs or recordings where applicable.

We do not intentionally request special categories of personal data.

4.1. Community management

We use the data to manage onboarding into Startup Grind Madrid, maintain and develop the relationship with community members, handle enquiries, requests, activities and participation, provide access to content, events, programmes and opportunities, and send administrative information needed to deliver a requested activity.

4.2. Startup Grind communications

Where consent has been given, we may send information about:

• Events and meet-ups.
• Founder stories and editorial content.
• Programmes, calls and opportunities.
• Resources, tools and discounts.
• Startup Grind Madrid and global Startup Grind initiatives.
• Activities related to entrepreneurship, technology, investment, innovation and startup building.
• Surveys and feedback requests.
• Promotions and communications related to selected partners.

These communications may include information about products, services, activities or opportunities offered by Startup Grind partners, but they are managed by Startup Grind or by providers acting on its instructions. Receiving partner-related content does not in itself mean personal data has been handed over to that partner.

4.3. Communication channels

We may use the contact channels the person has provided, including email, phone, WhatsApp or SMS, and LinkedIn. A channel is only used when the person has voluntarily provided the data required for it.

4.4. Personalisation and segmentation

We may use the information provided and interactions with Startup Grind to tailor content, select relevant events and opportunities, avoid unnecessary communications, create internal community segments and analyse how our campaigns and activities perform. This personalisation is not used for automated decisions producing legal or similarly significant effects.

4.5. Startup Grind advertising audiences

Where the consent stated in the form has been given, Startup Grind may use certain identifiers, such as email or phone, to create, exclude, segment or measure its own advertising audiences on platforms such as Meta and LinkedIn. This may include matching the identifiers provided against users of those platforms.

The purpose is to show Startup Grind's own campaigns to relevant audiences, exclude already registered people from certain campaigns, build lookalike audiences, measure campaign effectiveness and reach, and promote Startup Grind events, content, programmes and activities.

Partners may not use the data for their own independent campaigns solely on the basis of this consent. Installing pixels, cookies or similar technologies on a website is subject, where necessary, to the corresponding cookie policy and management tool.

This website uses Google Tag Manager to manage analytics and measurement tags. These tools may set analytics or advertising cookies on your device.

4.6. Security, compliance and legal defence

We may process certain information to protect systems and databases, prevent fraudulent access, sign-ups or activity, manage unsubscribes and suppression lists, handle rights requests, comply with legal obligations, and manage or defend potential claims.

The main legal basis for communications, personalisation and advertising audiences is the consent given by the individual.

Ticking the form checkbox is an affirmative action through which the person asks to join the community and authorises the processing described in that checkbox and in this policy.

Certain processing may also rely on performing a service requested by the person, compliance with legal obligations, or Startup Grind's legitimate interest in security, fraud prevention, improving its operations or defending claims, provided individual rights and freedoms do not override it.

Startup Grind works with companies, startups, universities, innovation spaces, investors, accelerators, communities, providers and other ecosystem participants.

Startup Grind may include information and opportunities from selected partners in its own communications when they relate to the community's purpose.

Startup Grind will not sell, rent or hand over the general database to partners so that they can run their own independent communications on the basis of the general consent collected in this form.

When a partner wants to contact a person directly for its own purposes, specific authorisation is requested or a mechanism is provided for the person to expressly ask to be contacted.

When an activity is organised jointly with another entity, Startup Grind may share the data strictly necessary to run that activity.

Before or at the time of registration we will inform, where applicable, of the co-organiser's identity, the purpose of the disclosure, the data it will receive and each organisation's role.

The co-organiser may not use the data for its own purposes incompatible with the activity without its own legal basis.

We may rely on technology and service providers, such as productivity platforms like Google Workspace, email marketing platforms, CRM tools, automation services, event management platforms, hosting and infrastructure services, communication agencies and analytics providers.

These providers may only use the data following Startup Grind's instructions and to deliver the contracted services. Where applicable, the necessary processing and confidentiality agreements are put in place.

To manage its own audiences and campaigns, certain data may be shared with platforms such as Meta Platforms Ireland Limited, LinkedIn Ireland Unlimited Company, X.com and WhatsApp.

These platforms process the information under their own terms and the allocation of responsibilities applicable to each service. Startup Grind limits the information sent to what is necessary for the relevant advertising activity.

Startup Grind, Inc. is established in the United States and some technology providers may process or store information outside the European Economic Area.

Where an international transfer takes place, a mechanism recognised by applicable law is used, such as an adequacy decision, standard contractual clauses, binding corporate rules, additional contractual, technical or organisational measures, or other mechanisms recognised in Chapter V of the GDPR.

Further information can be requested at privacy@startupgrind.com.

Data is kept while the person is part of the community and the consent remains valid. Inactive contacts may be reviewed periodically to decide whether they still need to be kept or whether reconfirmation should be requested.

When a person withdraws consent, use of their data for consent-based communications and campaigns stops, connected platforms are updated, and minimal information may be kept on a suppression list to avoid future unwanted communications.

Limited evidence of the consent and its withdrawal may be retained for as long as needed to comply with legal obligations or defend potential claims.

Consent can be withdrawn at any time: through the unsubscribe link in our communications, through the unsubscribe form on this website, by writing to privacy@startupgrind.com or madrid@startupgrind.com, or through the mechanisms enabled by Startup Grind Madrid.

Withdrawal is free of charge and does not affect the lawfulness of processing carried out beforehand. The unsubscribe applies to all systems and channels linked to the consent, unless the person expressly asks to keep one.

Individuals may exercise the rights of access, rectification, erasure, objection, restriction of processing, portability where applicable, and withdrawal of consent.

They may also request information about the recipients of their data. Requests can be sent to privacy@startupgrind.com, optionally copying madrid@startupgrind.com.

Individuals also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Startup Grind Madrid's general forms are not intentionally aimed at children under fourteen.

When an activity is aimed at minors or may involve them, specific procedures are applied to verify age and obtain, where necessary, authorisation from parents, guardians or legal representatives.

Photographs or recordings may be taken at certain events for informational, promotional, documentary or archival purposes related to Startup Grind.

These images may appear on Startup Grind pages and channels, social media, digital or printed publications, press releases, promotional materials and communications about future events. Where applicable, this is announced at registration, at the entrance or in the event space.

People who prefer not to appear can tell the organising team beforehand or during the event, or write to privacy@startupgrind.com or madrid@startupgrind.com.

Startup Grind applies technical and organisational measures designed to prevent unauthorised access, loss or destruction of information, improper alteration and unauthorised disclosure.

Access to the databases is limited to the people and providers who need the information for the purposes described.

This policy may be updated when activities, providers, processing or applicable requirements change. Each version is identified by a number and a date.

When a new purpose is introduced that is not reasonably compatible with the consent initially given, new authorisation is requested before that processing starts.

For any question about this policy or the use of personal data:

Startup Grind, Inc. — privacy@startupgrind.com

Startup Grind Madrid — madrid@startupgrind.com