Privacy Policy

---

Last updated: 15 September 2025

Altspace Coworking (“we,” “our,” or “us”) values your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you interact with us, in line with the EU General Data Protection Regulation (GDPR).

By using our website, booking a membership or pass, or engaging with our community, you consent to the practices described in this policy.

1. Who We Are

Altspace Coworking is a coworking and community hub located in Bansko, Bulgaria.
If you have questions about this policy, contact us at:

📧 yourfriends@altspacecoworking.com
📍 Bansko, Bulgaria

2. Information We Collect

We may collect the following categories of personal data:

• Identity Data: Name, surname, date of birth (if required for membership).
   
• Contact Data: Email address, phone number, billing address.
   
• Transaction Data: Payment details (processed securely via third-party payment providers).
   
• Usage Data: IP address, browser type, time zone, device information.
   
• Cookies & Tracking Data: Information about your interaction with our website (see Section 10).
   
• Community Data: Your participation in events, membership groups (e.g., WhatsApp), and use of facilities.
   

3. How We Use Your Data

We use your personal data for the following purposes:

• To process bookings, memberships, and payments.
   
• To provide access to coworking spaces, events, and community activities.
   
• To manage your account and provide customer support.
   
• To communicate with you about updates, events, and offers (if you opt in).
   
• To improve our services, facilities, and website.
   
• To comply with legal and regulatory obligations.
   

4. Legal Basis for Processing

We process your personal data under the following GDPR legal bases:

• Consent: When you opt in to receive newsletters or marketing.
   
• Contract: When processing memberships, bookings, or event registrations.
   
• Legal Obligation: When required by Bulgarian or EU law (e.g., accounting records).
   
• Legitimate Interest: To improve our services, ensure network security, and build community engagement (balanced against your rights).
   

5. Data Sharing and Third Parties

We may share your data with trusted third-party service providers, such as:

• Payment processors (to handle transactions securely).
   
• Email marketing platforms (if you’ve opted into communications).
   
• IT service providers (for website hosting and data storage).
   

We do not sell or rent your personal data.

Data may be transferred outside the European Economic Area (EEA) when using third-party providers (e.g., email or cloud services). In such cases, we ensure appropriate safeguards, such as EU Standard Contractual Clauses.

6. Data Retention

We retain personal data only for as long as necessary:

• Membership and booking records: up to 7 years (for legal/tax purposes).
   
• Marketing data: until you unsubscribe or withdraw consent.
   
• Website and usage data: typically 12 months.
   

After this period, data is securely deleted or anonymised.

7. Your GDPR Rights

As an EU data subject, you have the right to:

• Access your personal data (receive a copy of the data we hold).
   
• Rectify inaccurate or incomplete data.
   
• Erase your data (“right to be forgotten”) where applicable.
   
• Restrict processing in certain circumstances.
   
• Object to processing based on legitimate interests or marketing.
   
• Data portability (transfer your data to another provider).
   
• Withdraw consent at any time (for marketing or non-essential processing).
   
• Complain to the Bulgarian Commission for Personal Data Protection if you believe we are misusing your data.
   

To exercise these rights, contact: yourfriends@altspacecoworking.com

8. Security Measures

We use appropriate technical and organisational measures to protect your personal data, including:

• Encrypted data transmission (SSL).
   
• Secure password-protected systems.
   
• Access limited to authorised staff only.
   

While we do our best to protect your data, no internet transmission is 100% secure. You share information with us at your own risk.

9. No Walk-ins Policy

As part of our commitment to security and community quality, all memberships and passes must be booked in advance. This ensures we collect only the necessary data to manage member access and provide services effectively.

10. Cookies and Tracking

Our website uses cookies and similar technologies.

• Essential cookies are required for site functionality.
   
• Analytics cookies (if enabled) help us improve performance.
   
• Marketing cookies may be used only with your consent.
   

You can manage cookie settings through your browser or via our cookie banner when you first visit our site.

11. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be posted on our website with the updated date shown at the top.