Last updated: 15 November 2026
This policy explains how personal data is processed on this website, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights (LOPDGDD).
1. Data controller
- Controller: AQUANTICA ZERO, S.L. (Sociedad Unipersonal)
- Tax ID (NIF): B22762017
- Address: Calle Francisco Silvela, 110, 28002 Madrid, Spain
- Phone and WhatsApp: +34 635 784 619
- Email: aquantica.eu@gmail.com
2. What data we process
- Signature in support of the project: name, email, postcode or district, language, date and time of the signature and of the consents given and, if you arrived through another person’s link, the code of that link.
- Location suggestion: the district and the text you write.
- Forms for businesses, investors, media and institutions: name, organisation, email, phone (if provided) and the content of your message.
- Other channels: the data you provide by email, phone or WhatsApp.
- Technical data: submission metadata (date, time, language, source page) and connection data needed for hosting and security. To limit abusive submissions, an encrypted fingerprint of the IP address is stored, not the full address.
No special categories of data are requested. Please do not include them in free-text fields.
3. Purposes and legal basis
- Recording your support, confirming it by email and including it in the public counter and in the district map (aggregated figures only, no personal data): your consent (Art. 6(1)(a) GDPR).
- Sending you project news and notifying you of the start of a funding campaign, only if you tick the relevant box: your consent (Art. 6(1)(a) GDPR).
- Handling requests from businesses, investors, media and institutions: steps taken at the data subject’s request prior to a contract (Art. 6(1)(b) GDPR) and legitimate interest in answering the enquiries received (Art. 6(1)(f) GDPR).
- Complying with applicable legal obligations (Art. 6(1)(c) GDPR).
- Ensuring the security of the site and preventing automated or fraudulent form submissions: legitimate interest (Art. 6(1)(f) GDPR).
You may withdraw your consent at any time, without affecting the lawfulness of earlier processing, using the unsubscribe link in any email or by writing to aquantica.eu@gmail.com.
4. Retention period
- Confirmed signatures: for as long as the public support initiative continues and for no more than 3 years from the signature, unless you withdraw your consent earlier.
- Signatures not confirmed by email: deleted after 30 days.
- Informative communications: until you unsubscribe.
- Enquiries from businesses, investors, media and institutions: up to 2 years from the last contact.
After these periods, data is deleted or anonymised. It may be kept blocked for the limitation periods of possible legal liabilities.
5. Recipients
Your data is not sold or passed to third parties for their own purposes. The following may access it as processors, acting on our instructions:
- Cloudflare, Inc.: website hosting, database and protection of the forms against abuse (Cloudflare Turnstile).
- Google (Gmail and Google Sheets): the company’s email mailbox and the working spreadsheet with enquiries from businesses, investors, media and institutions. Signatories’ data is not copied to this spreadsheet: only aggregated figures by district.
- WhatsApp (Meta): only if you choose to contact us through that channel.
- Brevo (Sendinblue SAS, France): sending confirmation and news emails.
Data may also be disclosed to public authorities where there is a legal obligation.
6. International transfers
Cloudflare, Google and Meta may process data outside the European Economic Area, mainly in the United States. These transfers rely on the EU-US Data Privacy Framework, for certified entities, or on the standard contractual clauses approved by the European Commission.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability, and withdraw your consent, by writing to aquantica.eu@gmail.com and stating the right you wish to exercise. We may ask you to prove your identity. We will reply within one month.
If you consider that the processing does not comply with the law, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Automated decisions
No decisions with legal effects are taken on the basis of solely automated processing of your data, and no profiles are created.
9. Security
Appropriate technical and organisational measures are applied: encrypted connection (HTTPS), restricted access to the database, confirmation of the email address and controls against automated form submissions (hidden field, verification that the submission is made by a person and a limit on submissions per connection without storing the full IP address).
10. Minors
This site is intended for people aged 14 and over. Younger minors need the consent of their parents or guardians to provide their data.
11. Cookies
Information on cookies and similar technologies can be found in the Cookie Policy.
12. Changes to this policy
This policy may be updated because of legal changes or changes in processing. The current version will always be published on this site. If the change is significant, you will be informed by email before it is applied.
The Spanish version of this policy prevails in case of discrepancy.