Privacy Policy
How we collect, use and protect your personal data, and how to exercise your rights under the GDPR.
1. Data controller
Fundación General de la Universidad Politécnica de Madrid (FGUPM) · Tax ID: G-28826055 (VAT ESG28826055) · Registered address: C/ Pastor 3, 28003 Madrid, Spain.
Privacy contact: info@miaws.com. Data Protection Officer: the FGUPM Data Protection Officer, C/ Pastor 3, 28003 Madrid, Spain — info@fgupm.es.
MIAWS (Master In Intelligent Artificial Worlds) is a permanent-training master's programme (título propio) of the Universidad Politécnica de Madrid / ETSAM, delivered through miaws.com.
2. What data we collect
- Contact and lead forms, including the native lead forms served inside LinkedIn, Google and Meta: first name, last name, email address, current role and country.
- Admissions: CV, portfolio, cover letter, academic background, and the conversation you hold with the MIAWS assistant during the application.
- Website usage: pages viewed, referrer, device and browser type, and the cookies listed in section 11.
3. How we collect it
- Forms on miaws.com — waitlist, contact and application.
- Native lead forms inside LinkedIn, Google and Meta. Those platforms pre-fill the fields from your profile and pass us only what you confirm before submitting.
- Email, when you write to us directly.
4. Why we use it
- To answer your information requests.
- To assess and manage applications to the programme.
- To send you information and communications about the programme that you have asked for.
- To measure and improve our campaigns and the website.
- To comply with our legal obligations.
5. Legal basis
- Consent — lead and contact forms, marketing communications, and every non-essential cookie. You can withdraw it at any time, and withdrawing it does not affect processing already carried out.
- Pre-contractual measures and performance of a contract — admissions and enrolment.
- Legitimate interest — managing and improving our communications, and site security and abuse prevention.
- Legal obligation — accounting and academic record keeping.
6. Who receives your data
We use the following processors, each bound by a data-processing agreement:
- Advertising platforms — LinkedIn, Google and Meta: lead forms and campaign measurement.
- Google Workspace — the email and spreadsheets where leads and applications are managed.
- Cloudflare — hosting and delivery of miaws.com.
- Anthropic — powers the MIAWS assistant; your conversation is processed to produce its replies.
- PostHog (product analytics), Resend (transactional email), Airtable (admissions backup) and Stripe (payments).
7. What we never do
We do not sell personal data. We do not use it to train AI models. We do not share it with anyone other than the processors listed above, except where we are legally required to.
8. International transfers
Some of those providers are established in the United States. Those transfers rely on the safeguards the GDPR allows — Standard Contractual Clauses and/or the EU–US Data Privacy Framework adequacy decision. You can request a copy of the safeguards in place at info@miaws.com.
9. How long we keep it
| Data | Retention |
|---|---|
| Leads and waitlist | 24 months from submission, or until you withdraw consent |
| Applications not admitted | 12 months from the decision |
| Enrolled students | Duration of the programme plus 5 years (academic records, for the period required by law) |
| AI assistant session memory | 72 hours |
| Live session recordings | 12 months from the session date |
After those periods the data is deleted or anonymised.
10. Your rights
You can request access, rectification, erasure, restriction, portability and objection, and withdraw your consent at any time, by writing to info@miaws.com with proof of identity.
If you believe your rights have not been respected, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid — www.aepd.es.
11. Cookies and tracking
On your first visit miaws.com shows a consent banner. Google Tag Manager and Google Analytics load with Google Consent Mode v2 set to denied by default, so no analytics or advertising cookies are stored until you accept. The LinkedIn Insight Tag and PostHog do not load at all until you accept.
| Cookie / technology | Provider | Purpose | Consent |
|---|---|---|---|
| connect.sid, lms_refresh | MIAWS | Session and login — the site cannot work without them | Not required |
| _ga, _gid, _ga_* (Google Analytics 4, G-LYS5ZP9W11) | Audience analytics, with IP anonymisation | Required | |
| Google Tag Manager (GTM-52D77HCM) | Tag container for the scripts above | Required | |
| li_*, LinkedIn Insight Tag | Advertising and conversion measurement | Required | |
| PostHog | PostHog | Product analytics | Required |
You can change your mind at any time by clearing this site's data in your browser: the banner will appear again on your next visit.
12. Security
We apply appropriate technical and organisational measures: encrypted transport (HTTPS), access control on the systems that hold personal data, and data-processing agreements with every provider listed above.
13. Changes to this policy
We may update this policy. Every change is published on this page with its date, and the version in force is always the one published here.