Privacy statement

TAG (To Achieve Greatness) is a community and workspace for builders in Amsterdam, run by TAG B.V. (KvK 42189402), Jacob Bontiusplaats 9, 1018 LL Amsterdam. TAG B.V. is responsible (the “controller”) for the personal data described here. When we run an event together with a partner, such as SAAF, the event page says so.

• Join and tours: name, email and LinkedIn profile, so we can review your application or book your tour. A tour booking creates a calendar invite for you.
• Host an event: your name, email, phone number, organisation and the event details, so we can assess and plan the event.
• Summer camp: your application answers and, for teams, the names and email addresses of your teammates. Please only add teammates who know you are applying.
• Day pass: name and email for the pass, and payment details handled by Stripe. We never see your card number.
• Hackathon judging and submissions: team names, member names and the links you submit.

To stop spam, forms also store a one-way scrambled version of your IP address (not the address itself) and your browser type.

• To run what you signed up for (an event, tour, day pass or membership): we need the data to provide it.
• Legitimate interest: reviewing registrations, keeping our events and building safe, stopping spam, event photos, public member profiles, and community features built from public information. You can object to any of these at any time.
• Consent: news and partner updates, your photo on tag.space, and stylised portraits. You can withdraw consent whenever you like.
• Legal duty: keeping invoices and payment records for the tax authorities.

We never sell your data. These services process it on our behalf:

• Supabase (database and accounts, hosted in the EU) and Vercel (website hosting)
• Luma (event registration and check-in)
• Resend (sending email, including whether an email was opened or clicked)
• Stripe (payments and invoices)
• Google (calendar invites for tours)
• Anthropic, fal.ai and Tripo (AI text and images for member features), and Apify (collecting public posts)

Besides these, we share data with event partners and venues as described under Events, with the building manager for access passes, and with authorities when the law requires it. Some of these services are based outside the EU, mainly in the United States. In those cases the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

When we no longer need data for the purpose it was collected for, we take it out of use and archive it: it is no longer shown anywhere or used, and only TAG can access it. You can ask us to delete archived data at any time.

• Event registrations: archived 12 months after the event.
• Applications that don't lead to membership: archived after 12 months.
• Day-pass details: archived 90 days after the pass is used or expires.
• Member data: for as long as you are a member, then archived. Invoices and payment records are kept for 7 years, as Dutch law requires.
• News and partner updates: until you unsubscribe or withdraw consent.

tag.space uses only the cookies needed to keep you signed in. We don't use analytics, advertising or tracking cookies, so there is no cookie banner. Emails from us can record whether they were opened or a link was clicked, so we can tell whether they arrive.

You can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, or give it to you in a reusable format. You can also object to uses based on legitimate interest and withdraw any consent. Email ben@tag.space and we will reply within a month.

If you are not happy with how we handle your data, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens.

When we change this statement, we update the date at the top. For important changes we let members know by email.