Privacy Policy

Last update: February 04, 2026

1 – Introduction

This Privacy Policy informs, in accordance with the applicable regulations, about the processing of personal data collected through http://www.taraforwomen.org/ and/or its subdomains. Access to and use of the site grants the status of User and implies knowledge and acceptance of this Privacy Policy.

2 – Who is the data controller?

Identity: Tara Mujeres Emprendedoras Foundation (“Tara For Women”)
CIF: G06928824
Address: C/ Montesa 35, Esc. Izq., 4 Dcha., 28006, Madrid (Spain)
Telephone: +34 633 23 42 94
General e‑mail: info@taraforwomen.org
Corporate e‑mail (own domain): Microsoft Exchange
Privacy/DPO contact: privacidad@taraforwomen.org

3 – How do we collect your data?

We process personal data when you voluntarily provide it through:
Contact forms (name, surname, e‑mail, telephone number and message).
Newsletter/activities form (name, surname, date of birth, postcode, e‑mail, telephone number).
Registration and participation in programmes/mentoring/training (name, surname, date of birth, postcode, e‑mail, telephone number, CV, photograph and other profile information).
Event registration (name, surname, e‑mail, telephone number).
Donations via Squarespace (main processor on the website), and where applicable Stripe and PayPal for webinars and others (identification and contact details; full payment details are processed by those providers).
Sending e‑mails to info@taraforwomen.org or privacidad@taraforwomen.org.
Microsoft forms (Microsoft Forms) linked to activities.
E‑mail marketing tools (HubSpot) for newsletters/communications, only if you have consented.

Use of forms is voluntary; certain fields are necessary to process your request. Refusal to provide them may prevent its management.

4 – For what purposes do we process your data?

To handle and respond to your requests, queries or incidents.
To manage your participation in programmes, mentoring, training and events.
To manage the mentoring platform and its monitoring (mentor/mentee relationship, schedule and communications).
To send you information about activities, news and events of Tara For Women if you have authorised it.
To manage donations and comply with associated accounting and tax obligations.
Statistical and impact analysis of our activities (we do not create profiles with legal effects).
To improve the website experience and audience measurement through analytics with prior cookie consent (see Cookie Policy).

5 – Who are the data recipients?

We do not disclose your data to third parties unless there is a legal obligation. To provide our services, we use processors (they process data on behalf of Tara For Women), including:
Website/infrastructure and forms: Squarespace, Microsoft Forms.
E‑mail and productivity: Microsoft Exchange (own domain).
Google accounts for specific services: Gmail (account used for Google Analytics and YouTube).
Meetings and webinars: Microsoft Teams (daily use), Zoom (webinars).
Analytics and measurement: Google Analytics (with prior consent).
Social networks and channels: Meta (Facebook/Instagram), LinkedIn, YouTube (interactions through official profiles).
E‑mail marketing/CRM: HubSpot.
Donation/payment processors: Squareup (main on the website), and Stripe and PayPal (webinars/others; acting as controllers/processors within their scope).

We enter into data processing agreements with all of them where appropriate and require adequate safeguards.

6 – What is the legal basis for processing?

Handling queries and requests: consent of the user and/or legitimate interest in addressing them.
Programmes, mentoring, training and events: performance of pre‑contractual/contractual measures requested by the data subject.
Newsletter and communications about activities: consent (opt‑in).
Donations: performance of the donation relationship and compliance with legal obligations (accounting/tax).
Web analytics/cookies: consent granted via the cookie panel.
You may withdraw your consent at any time without affecting prior lawful processing.

7 – How long do we retain the data?

We will retain your data for the time necessary to manage your request, relationship or participation and, thereafter, for the statutory limitation periods to address potential liabilities. Once such periods have elapsed, the data will be deleted; until then, they may remain blocked (inaccessible except to authorities) in accordance with Article 32 LOPDGDD.

Indicative (non‑limiting):
General enquiries: during their management and, thereafter, for the applicable limitation period.
Newsletter/activities: until you withdraw consent and, thereafter, for the applicable limitation period.
Programmes/mentoring/training: duration of the process/project and, thereafter, for the applicable limitation period.
Events: duration of the event management and, thereafter, for the applicable limitation period.
Donations: statutory accounting and tax periods. (Art. 13.2 GDPR)

8 – What are your rights?

You may exercise the rights of access, rectification, erasure, objection, restriction and portability, as well as withdraw consent at any time.
Channels for exercising rights (attach a copy of an identification document):
In writing: C/ Montesa 35, Esc. Izq., 4 Dcha., 28006, Madrid (Spain)
By e‑mail: privacidad@taraforwomen.org
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

9 – Origin of the data

As a general rule, the data come directly from the data subject. On social networks, we process the public information linked to your profile when you interact with our official accounts. (Art. 14 GDPR where applicable)

10 – International data transfers

Some providers may process data outside the European Economic Area (EEA) (e.g., Google —Analytics, YouTube—, Meta, LinkedIn, Zoom, HubSpot, Stripe, PayPal, Canva). In such cases, transfers are based on:
Adequacy decisions of the European Commission (e.g., EU‑US Data Privacy Framework for certified US entities); and/or
Standard Contractual Clauses (Decision (EU) 2021/914) with supplementary measures where appropriate.
You may request additional information about the safeguards applied at privacidad@taraforwomen.org.

11 – Automated decisions and profiling

Tara For Women does not adopt automated decisions nor create profiles with legal effects or similarly significant effects for the user.

12 – Commercial communications (LSSI)

We will only send electronic communications for informational or promotional purposes if you have requested or expressly authorised them beforehand or, where applicable, when there is a prior relationship and they refer to services similar to those initially contracted/donated. You may object free of charge at any time via the unsubscribe link included in each message or by writing to privacidad@taraforwomen.org.

13 – Social networks

We have profiles on Facebook/Instagram (Meta), LinkedIn and YouTube for informational and promotional purposes. When you interact with our profiles, your information is processed in accordance with this Policy and the privacy policy of each platform. We only access the public information on your profile and use it within the social network itself. We recommend that you properly configure your account privacy.

14 – Minors

Our activities are not specifically aimed at minors under 14 years of age. If we exceptionally collect data from minors under 14, we will require the consent of the person holding parental responsibility or guardianship.

15 – Security

We implement appropriate technical and organisational measures to protect your data, considering the nature of the processing and the state of the art.

16 – Cookies

Information about the use of cookies and similar technologies, as well as options for setting and withdrawing consent, is available in our Cookie Policy: https://www.taraforwomen.org/cookies-policy.

17 – Updates to the Privacy Policy

We may update this Policy to reflect regulatory changes or changes in processing. We will notify relevant changes via notices on the website and, where appropriate, by e‑mail.