Privacy and GDPR
This policy explains how Droidtech 42 AI Labs AB collects, uses, and protects personal data in connection with Stockholm Robot Club Space, Master Robot Lab and our website robotclub.droidtech.ai. We process data under the EU General Data Protection Regulation (GDPR).
1. Data controller
The data controller is Droidtech 42 AI Labs AB. Send questions about your rights or this policy to lee@droidtech.ai. We normally reply within 14 days.
2. Data we collect
We collect (a) contact details you provide (name, email, phone, company), (b) data tied to your membership or booking (selected plan, billing details, attendance at events, key-tag/access log), (c) payment data via Stripe (we do not store card numbers), (d) technical site logs (IP address, browser, page view), and (e) imagery from events if you appear in it — you can always request removal.
3. Purposes and legal basis
We process data to (i) operate memberships, tickets and bookings (contract), (ii) handle payments and accounting (legal obligation), (iii) inform you about events and changes (legitimate interest / consent for marketing), (iv) protect the space, robots and equipment (legitimate interest), and (v) improve the website through aggregate analytics (legitimate interest).
4. Recipients and processors
We share data with vendors required for operations: Stripe (payments, US/EU), Google (analytics/Workspace), Hetzner/cloud providers (hosting), an accounting firm, and authorities when required by law. We sign Data Processing Agreements where required and ensure adequate safeguards when data is transferred outside the EEA.
5. Retention
Member data is kept for the duration of membership plus 12 months. Invoicing and accounting records are kept for 7 years per Swedish bookkeeping law. Site analytics is anonymised or deleted within 26 months. Imagery is deleted on request.
6. Your rights
You have the right to access, rectification, erasure, restriction, portability, and objection. You may withdraw consent at any time. Complaints can be filed with the Swedish Authority for Privacy Protection (IMY). Send requests to lee@droidtech.ai.
7. Cookies
We use strictly necessary cookies so the site works and, with your consent, Google Analytics 4 with IP anonymisation to understand site usage. You can decline non-essential cookies via the cookie banner or block them in your browser.
8. Security and CCTV
The space may have cameras at the entrance and in common areas to protect people, robots and equipment. Recordings are kept up to 30 days and only released to police during an investigation. Workshop areas where robots run sensors may capture imagery for development — that data does not leave the space without separate consent.
9. Minors
Robot Club membership for minors requires a guardian's consent. We collect only what is necessary for safety and contact.
10. Changes
We may update this policy. For material changes we notify members by email. The current version and date are always shown at the top.