top of page

theHUB. PRIVACY POLICY - Eng

Effective date: 20.11.2025

This Privacy Policy describes how The Hub Co Working S.L. (“the Company”, “we”, “us”, “our”) collects, uses, and protects your personal data when you use our website https://www.thehubibiza.com (“the Website”).

We are committed to complying with Regulation (EU) 2016/679 (GDPR) and Ley Orgánica 3/2018, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD).

By using our Website and Services, you agree to this Privacy Policy.

1. Identity of the Data Controller

The Hub Co Working S.L.
Calle Pedrer 4, Ca Na Palava
07840 Santa Eulalia del Río, Illes Balears, Spain
Email: accounts@thehubibiza.com

For GDPR and LOPDGDD, we are the Data Controller.

2. Definitions

Personal Data: Any information relating to an identified or identifiable natural person.
User / Data Subject: The individual using the Website.
Service: Our Website and related coworking or booking services.
Data Processor: Third parties processing data on behalf of the Company (e.g., Zoho, Wix, Google, Meta).
Cookies: Small files stored on your device to improve website functionality and analytics.

3. Types of Data We Collect

Personal Data You Provide

  • Name
     

  • Email address
     

  • Phone number
     

  • Address (if needed for contracting)
     

  • Any information voluntarily submitted by forms, enquiries, or bookings.

Automatically Collected Data (Usage Data)

  • IP address
     

  • Browser type and version
     

  • Pages visited
     

  • Time and date of visit
     

  • Device identifiers
     

  • Interaction data
     

  • Referrer URLs
     

  • UTM parameters (for marketing attribution)

​​
 

Cookies & Tracking

We use:
 

  • Essential cookies
     

  • Functional cookies
     

  • Performance & analytics cookies
     

  • Advertising cookies
     

  • Third-party cookies (e.g., Meta Pixel, Google Analytics)
     

See our Cookies Policy for more information.

4. Purposes of Processing & Legal Basis

In compliance with Articles 6 and 13 of the GDPR and Articles 11–14 of LOPDGDD:

Purpose
Description
Legal Basis

Website operation

To operate and maintain the Website

Legitimate interest

Responding to enquiries

Contact form responses, bookings, membership enquiries

Pre-contractual steps (Art. 6(1)(b))

Managing accounts, membership contracts

Creating and managing coworking agreements

Contract performance

Sending newsletters & marketing emails

Promotional content, updates, events

Explicit consent (Art. 6(1)(a))

Analytics & website improvement

Understanding usage, improving functionality

Legitimate interest

Advertising & remarketing

Showing relevant ads on Meta/Google

Consent + legitimate interest

Legal obligations

Tax, regulatory or legal compliance

Legal obligation (Art. 6(1)(c))

You may withdraw consent at any time by email: accounts@thehubibiza.com.

5. Marketing Communications (Consent Required)

We will send newsletters or promotional information only if you have given explicit consent, such as by:

  • Ticking an opt-in box
     

  • Subscribing via form
     

  • Confirming via double opt-in email (if used)
     

You may unsubscribe at any time.

6. How We Use Your Personal Data

We may use your data to:

  • Provide and improve our website
     

  • Respond to enquiries or booking requests
     

  • Send relevant information about our coworking services
     

  • Administer contracts and billing
     

  • Contact you about updates or changes
     

  • Display targeted ads (with your consent)
     

  • Analyse website performance
     

  • Ensure security, fraud prevention, and compliance

7. Sharing of Personal Data

We may share your data with:

Service Providers (Data Processors)

Including but not limited to:

  • Wix (website hosting)
     

  • Zoho CRM
     

  • Google Analytics
     

  • Meta (Facebook/Instagram)
     

  • Email marketing providers
     

All processors act under Data Processing Agreements as required by GDPR.

Legal Obligations

We may disclose data to authorities if required by law.

Business Transfers

If we undergo a merger or acquisition, your data may be transferred to the new entity.

We never sell personal data.

8. International Data Transfers

As part of our operations, your data may be transferred outside the European Economic Area (EEA), particularly when using:

  • Wix (servers may be in US/Israel)
     

  • Zoho (global storage)
     

  • Google/Meta (US processing)


 

All transfers are protected by:

  • Standard Contractual Clauses (SCCs)
     

  • Adequacy decisions (where applicable)
     

  • Data Processing Agreements

9. Data Retention

We retain data only as long as necessary:

  • Enquiries: up to 12 months
     

  • Contracts: duration of contract + 5 years (legal requirement)
     

  • Marketing data: until consent is withdrawn
     

Analytics data: typically 26 months

10. Your Rights (GDPR + LOPDGDD)

You have the right to:

  • Access your data
     

  • Rectify incorrect or incomplete data
     

  • Erase your data (“right to be forgotten”)
     

  • Object to processing
     

  • Restrict processing
     

  • Data portability
     

  • Withdraw consent (for marketing)
     

  • Not be subject to automated decisions
     

Exercise your rights at: accounts@thehubibiza.com

Right to File a Complaint

You may file a complaint with the Spanish Data Protection Agency (AEPD):

www.aepd.es

11. Security of Your Data

We apply technical and organisational measures to protect your data.


However, no system is 100% secure.

12. Changes to This Policy

We may update this Privacy Policy periodically.


Updates will be posted on https://www.thehubibiza.com.

bottom of page