BATEA

Privacy policy

Last updated: 2026-06-25

Data controller

Batea Techno Club, Cultural Association (registration in progress). Address: «pending». Tax ID: «pending». Email: legal@bateatechnoclub.com.

What data we process

While the association completes its registration we collect: (a) on the waiting list, email and name; (b) if you buy a ticket and join as a member, also: surname, ID number (DNI/NIE — the number only, never an image), date of birth and the IP address and device from which you accept. Once regular sign-up opens, also: address, phone, IBAN (optional) and payment data through Stripe.

Purposes and legal basis

  • Notify you when sign-up opens (consent — GDPR art. 6.1.a).
  • Manage your membership and fee collection (contract — art. 6.1.b).
  • Issue and check your ticket and record your attendance at association events (performance of the membership relationship — art. 6.1.b).
  • Comply with accounting and tax obligations (legal obligation — art. 6.1.c).
  • Communicate association activities to members (legitimate interest — art. 6.1.f).

Retention periods

  • Waiting list: until you join or request removal (max 2 years).
  • Active member data: throughout your membership.
  • After leaving: 5 years to handle possible claims.
  • Fees and accounting: 6 years (Spanish tax law obligation).
  • Issued invoices: kept permanently as the legal invoicing series (not purged).
  • Minute book (general assemblies and boards): kept permanently — it is a mandatory legal record (Spanish Organic Law 1/2002).
  • Tickets and attendance records: 5 years after the event (together with the rest of your member data); records with accounting relevance, 6 years.
  • IP address and device linked to a ticket purchase: 1 year.
  • Application logs: 1 year.
  • Internal audit trail: 3 years.

Recipients and processors

Your data is processed by the following providers on our behalf (under GDPR art. 28 data processing agreements): Stripe Payments Europe (payments), Resend (email), Supabase (database and storage — EU/Ireland), Railway (hosting), Cloudflare (DNS and network), Discord (community and role management, only for members who link their account) and Sentry (error monitoring — we apply automatic filtering so it receives no identifying data).

International transfers

Stripe, Resend, Railway, Cloudflare, Discord and Sentry (Functional Software, Inc.) are US-based. Transfers are made under the European Commission's Standard Contractual Clauses (SCC) or, in Sentry's case, its certification under the EU–US Data Privacy Framework (DPF). Supabase hosts the data within the EU.

Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time. Members can exercise these directly from the portal (my account section). Others, by writing to legal@bateatechnoclub.com. Erasure does not reach the data we are legally required to keep (GDPR art. 17.3.b): accounting and fees (6 years), issued invoices and the minute book; in those cases we anonymise everything we can and keep only what is strictly required by law. You can also lodge a complaint with the Spanish Data Protection Agency.

Automated decisions

We do not make individual automated decisions with legal effects. Automated processes (recurring billing, receipt generation) only execute what was previously agreed.

Changes to this policy

If we modify this policy, we will notify members by email and post a notice on the site. The current version is always available here, with the last update date at the top.

For any questions about these terms, write to legal@bateatechnoclub.com.