byFounders VC Management ApS
DK-1437 Copenhagen K
byFounders is the data controller of the personal data we process about you, and as such, we provide the following information on our processing of personal data and your rights as the data subjects, pur-suant to the General Data Protection Regulation (“GDPR”).
1. How we collect personal data
If you sign up for our newsletter, we will process information about your e-mail address.
If you are, or if you represent, one of our suppliers, we process your contact information in order to manage our contractual relationship with you or the service provider that you represent.
Submitting your personal data to us is voluntary, but the consequence of not submitting your personal data may be that we cannot consider your pitchdeck for funding or enter into any agreement with you.
2. The purpose of our processing of personal data
Regarding the personal data we receive from you when you submit your pitchdeck, we process (study and evaluate) this data based on GDPR article 6, para 1 (f). The legitimate interest pursued by us is to create investment prospects and discern the prospects in which to invest, to reach out to external stakeholders, and to consult our partners and the pitchers in general and ultimately assess whether you are a qualified candidate for any investments.
Regarding our e-mail newsletter, we process your personal data based on your informed consent, pur-suant to GDPR article 6, para. 1 (a). Remember that you can retract your consent at any time by either pressing the Unsubscribe link at the bottom of the newsletter or by contacting us at email@example.com.
If you are, or if you represent, one of our suppliers, we process your contact information based on GDPR article 6, para. 1 (b), because the processing is necessary for entering into and performing our obligations in accordance with the service supplier contract.
3. Transfer of your personal data
We may transfer personal data to third parties, such as tax authorities or other public institutions, if it is necessary for us to comply with a legal obligation to which we are subject, pursuant to GDPR article 6, para. 1 (c).
Further, based on a legitimate interest, pursuant to GDPR article 6, para. 1 (f), we may transfer your personal data to our technical service providers and system suppliers under processor agreements in order to secure, access, and back-up your personal data. We might also share your pitchdeck with oth-er potential investors or members of our byFounders Collective in order to optimise the funding op-portunity for your pitch.
We only transfer your personal data to data importers outside the EU in compliance with the standard data protection clauses adopted by the European Commission providing the appropriate safeguards. You can obtain a copy of the provided safeguards by contacting us at firstname.lastname@example.org.
We have taken appropriate technical and organizational measures to protect against unauthorized access to, loss or destruction of data for which we are responsible. We develop our security policies and pro-cedures on a regular basis to ensure that our systems are secure and protected. Only persons with a legitimate need for processing personal data for the above-mentioned purposes have access to such data.
4. Retention Period
We retain your personal data as long as we have a relevant legal interest therein.
If we have decided to invest in your company, we will retain your personal information for 5 years after the end of the retention period in which the company no longer exists in our start-up management system, if it is necessary for us to comply with a legal obligation to which we are subject, pursuant to GDPR article 6, para. 1 (c) - unless we asses that it is necessary to keep the data for longer.
However, if we have decided not to invest in your company, we will retain your pitch deck and contact information in our CRM system until the end of the active investment period in which that decision has been made. We retain this information as supporting material because it is necessary for the legitimate interest pursued by us to follow the positive developments of your company during a potential later round of fundraising, pursuant to GDPR article 6, para. 1 (f). If you find that this legitimate interest of ours is overridden by your interests not to have this information retained by us, you are free to exer-cise your right to have your personal data deleted or the processing thereof limited.
If you are, or if you represent, one of our suppliers, we will retain your contact information for 5 years after the end of the retention period in which the contractual relationship is terminated.
5. Your rights
According to the GDPR, you are entitled
- to gain insight into the personal data about you processed by us;
- to have incorrect personal data about you deleted or corrected;
- in special cases, to have personal data about you deleted before theend of our general retention period ends;
- to limit the processing of personal data about you so thatprocessing - except for storage - may only take place in the future subject toconsent or for the purpose of establishing, exercising, or defending a legalclaim or to protect a person or important public interests;
- in certain situations, to object to our processing of the personaldata about you;
- in certain situations, to receive the registered personal data aboutyou in a structured, commonly used, and machine-readable format and to have thedata transferred to another data controller.
In connection with the exercise of the above-mentioned rights, we may demand that you produce rele-vant personal identification.
You may file a complaint with the Danish Data Protection Agency if you are dissatisfied with our pro-cessing of your personal data. You can find the contact details of the Danish Data Protection Agency on www.datatilsynet.dk.