Privacy Policy

Privacy Statement Stichting Makerspace Delft

Last updated: 14 October 2026

Stichting Makerspace Delft (Dutch Chamber of Commerce/KVK number 80796451), located at Schieweg 15D, Hal X2, Delft, the Netherlands, hereinafter "we", "us" or "the Makerspace", respects the privacy of its members. This statement explains which personal data we collect through your account on our website, why we do so, and what rights you have.

Who is responsible for your data

Stichting Makerspace Delft is the data controller for the personal data described in this statement.

Questions about privacy? Contact us at contact@makerspacedelft.nl.

What data we collect and why

Name, address, email address, phone number, and Discord username. We use this data to enter into and manage your membership, and to contact you (for example about bookings, changes to opening hours, or your account). Legal basis: performance of the membership agreement.

Emergency contact information We ask for this data so that we can respond appropriately in the event of an accident or emergency during your visit. Because emergency contact information is a special category of personal data, we ask for your explicit consent for this when you create your account. You can withdraw this consent at any time; please note that if you do, we may not be able to respond adequately to an emergency related to your health.

Discord username. We use this to give you access to our community environment on Discord and to communicate with members. Legal basis: legitimate interest (maintaining an active member community).

Phone number. We use this to give you access to our community environment on WhatsApp and to communicate with members. Legal basis: legitimate interest (maintaining an active member community).

IP Address. We use this to send alongside the Cloudflare Turnstile CAPTCHA token. Cloudflare can verify the challenge with your IP address was solved by a real browser,as part of bot/spam protection on our pages containing forms.

We do not collect more data than is necessary for these purposes.

Who processes your data

We only share personal data, or have it processed on our behalf, where necessary:

• Stripe, our payment provider, to process payments. Stripe receives your saved email address from us.
• Hetzner, our hosting provider, to operate the website and booking system. Your data is stored on Hetzner's servers in the EU.
• Discord, for communication within the community.
• WhatsApp, for communication within the community.
• Google Workspace, to manage and store records of participation in activities, and for financial administration and tax filing. We use a business account for this.
• Cloudflare, for CAPTCHA protection.

We enter into a data processing agreement with parties that act as a processor on our behalf.

Some of these parties (such as Discord and possibly our payment provider) are based outside the EU or process data partly outside the EU. In such cases, they must provide appropriate safeguards, such as Standard Contractual Clauses or participation in a recognised framework such as the EU-US Data Privacy Framework.

We never sell your data to third parties.

How long we keep data

• Membership data in our database (name, address, phone number, Discord username): up to 1 year after the end of membership, then deleted.
• Payment and invoice data: 7 years, due to the statutory tax record-keeping obligation.
• Emergency contact and medical information: deleted immediately when membership ends.
• Stripe Customer ID: deleted immediately when membership ends.

How we secure your data

We take appropriate technical and organisational measures to protect your data, including password protection of accounts and limiting access to personal data to board members who need this information.

Your rights

You have the right to:

• request access to the data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• have the processing of your data restricted;
• object to the processing of your data;
• receive your data in a portable format (data portability);
• withdraw previously given consent (for example, for medical information).

Want to exercise any of these rights? Contact us at contact@makerspacedelft.nl. Not satisfied with how we handle your data? You can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl.

Changes to this statement

We may update this privacy statement from time to time. We will communicate important changes via Discord, WhatsApp, or email.