Privacy Policy

1. Who we are

This website is operated by the 529 Project Team, a student initiative. We are the data controller for the personal data you provide through our waitlist signup form.

If you have questions about this policy or your data, contact us at: christoph.kohrs@student.ie.edu.

2. What data we collect

We collect only the information you voluntarily provide:

• Email address — to add you to our waitlist and send launch updates.
• Consent confirmation — a record that you agreed to receive emails.
• Referral source (optional) — if you arrived via a shared link, we store the "src" parameter to understand how people find us.
• Timestamp — when you signed up.

We do not collect IP addresses, device information, or browsing behaviour through this form.

3. Why we process your data (legal basis)

Under the EU General Data Protection Regulation (GDPR), we process your data on the basis of consent (Art. 6(1)(a) GDPR). By checking the consent box and clicking "Join the waitlist", you explicitly agree that we may store your email and send you launch-related updates.

You may withdraw this consent at any time (see Section 7).

4. How we use your data

• To maintain a waitlist count and notify you before our product launch in Spain.
• To send occasional launch-related emails (early access, discount codes, availability).

We will not use your email for unrelated marketing, sell it, or share it with third-party advertisers.

5. Data recipients & hosting

Your data is stored in a secure database hosted by Lovable (lovable.dev), which provides our application hosting and database infrastructure. It is only accessible to the 529 Project Team. We do not share waitlist data with external parties except as required by law.

6. International transfers

Our infrastructure provider may process data outside the European Economic Area (EEA). Where this occurs, we rely on Standard Contractual Clauses (SCCs) and other safeguards approved under GDPR to ensure an adequate level of data protection.

7. Your rights

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — limit how we process your data in certain circumstances.
• Objection — object to processing based on legitimate interests.
• Data portability — receive your data in a structured, machine-readable format.
• Withdraw consent — unsubscribe from emails at any time.

To exercise any of these rights, email us at christoph.kohrs@student.ie.edu. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) if you believe your rights have been violated.

8. Data retention

We keep your email and signup record for as long as you remain on the waitlist, or until you ask us to delete it. If the project does not proceed to launch, we will delete all waitlist data within 12 months of the project end date.

9. Security

We use industry-standard technical and organisational measures to protect your data, including encrypted connections (HTTPS/TLS) and access-controlled databases. However, no online transmission or storage system is 100% secure.

10. Cookies & tracking

This waitlist page does not use tracking cookies, analytics scripts, or advertising pixels. We only store the strictly necessary session data required to operate the signup form.

11. Changes to this policy

We may update this Privacy Policy as the project evolves. Any material changes will be communicated to you via the email address you provided. The "Effective date" at the top of this page reflects the latest revision.