Privacy policy of Founderhood

Last updated: 23rd of August, 2024

What information we collect and why

This policy applies to the site/service/forum ("platform") owned and operated by us, Founderhood by GROUPNOW SINGLEPERSON PC.

Under GDPR, there is a distinction between a “controller” and “processor” of personal data. Depending on the situation and the type of data involved, Founderhood may act as a data controller or a data processor.

Where you are using our platform and making decisions about the personal data that is being processed on our platform, you are acting as a data controller and Founderhood is acting as data processor.

In other cases, Founderhood will be the controller of some personal data (such as contact information for marketing purposes, or when monitoring usage information on our platform).

The lawful bases under which Founderhood collects personal data under the GDPR are contractual necessity, legitimate interests and consent, as described in this policy.

This policy explains what information we collect when you access our platform, how the information is used, and how you can control the processing, correction and/or deletion of your information.

1. What data we collect

Founderhood collects personal data about you when you provide it directly to us, or when personal data about you is automatically collected in connection with your use of our platform. We collect the following personal data from you in connection with the platform:

  • Contact Information: information we collect to identify or contact you such as your name and email address.
  • Financial Account Information: financial information you provide, in order to process transactions when you purchase a plan (your card information is not held by us, it is collected by our third-party payment service providers Stripe, who are PCI-compliant and specialize in the secure online capture and processing of credit/debit card transactions).
  • Usage Information: information related to transactions you conduct on the platform, for example the functionality you use and the links clicked on our platform.
  • User Account Information: information that identifies you to the platform, such as your name, email address, password, and IP address. For example, we use this information to authenticate you when you log in to the platform, and use the IP address to help maintain your web session security while using the platform.
  • User Content: to the extent that you choose to input personal data as part of such content, images, comments, and other content, information, and materials that you post to or through the service. Please do not provide us with any sensitive personal data whilst using the platform.
  • Log Data: information automatically recorded by the platform about how a person uses our platform, such as IP addresses, device and browser type, operating system, the pages or features of our platform to which a user browsed, the time spent on those pages or features, the frequency with which the platform is used by a user, search terms used by a user, the links on the platform that a user clicked on or used, and other statistics.
  • Marketing Preference: information we collect to identify or contact you such as your name, email address and marketing preferences.

2. How we collect data

We collect personal data when a user (i) creates an account (a “User Account”); (ii) logs into the platform; (iii) interacts with the platform; (iv) uploads or generates User Content; (v) communicates with us; and (vi) responds to a communication or interaction from us. Some of the methods and tools we use to collect personal data are:

Unique Identifiers: We use unique identifiers such as cookies, e-mail or your pseudonymised customer ID to track individual usage behavior on our platform, such as the length of time spent on a particular page and the pages viewed during a particular log-in period. Unique identifiers collect information about a user’s use of our platform on an individual basis.

Cookies, Web Beacons, and Other Tracking Tools: We and our third-party service providers collect information about you, your device, and your use of the platform through cookies, clear gifs (a.k.a. web beacons/web bugs) ("Web Beacons"), and other tracking tools and technological methods (collectively, "Tracking Tools").

Tracking Tools collect information such as:

  • computer or device operating system type;
  • IP address;
  • browser type;
  • browser language;
  • mobile device ID;
  • device hardware type;
  • the website or application visited or used before or after accessing our service;
  • the parts of the service accessed;
  • the length of time spent on a page or using a feature; and
  • access times for a webpage or feature.

These Tracking Tools help us learn more about our users and analyze how users use the service, such as how often users visit our service, what features they use, what pages they visit, what emails they open, and what other sites or applications they used prior to and after visiting the service.

Cookies: Like many websites and mobile application operators, we collect certain information through the use of "cookies" - small text files that are saved by your browser when you access our service. Cookies can either be "session cookies" or "persistent cookies".

Session cookies are temporary cookies that are stored on your device while you are visiting our website or using our service, whereas persistent cookies are stored on your device for a period of time after you leave our website or service.

We use persistent cookies to store your preferences so that they are available for the next visit, and to keep a more accurate account of how often you visit our service, and how your use of the service varies over time. We also use persistent cookies to measure the effectiveness of advertising efforts. Through these cookies, we may collect information about your online activity after you leave our service. For more information on cookies, including how to control your cookie settings and preferences, visit https://commission.europa.eu/resources-partners/europa-web-guide/design-content-and-development/privacy-security-and-legal-notices/cookies-and-similar-technologies_en, and https://allaboutcookies.org//

Cookies that we use on our platform:

Set by Cookie(s) Purpose Type Notes
Google Analytics _ga, _ga_ID 1 - Marketing In app, website More information here: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage#gtagjs_google_analytics_4_-_cookie_usage
Drift driftt_aid, drift_aid, drift_campaign_refresh 2 - Customer Support Website More information here: https://gethelp.drift.com/s/article/Drift-s-Cookie-Security-and-Privacy-Policy
Hotjar _hjAbsoluteSessionInProgress, _hjSessionUser_ID, _hjSession_ID, _hjIncludedInSessionSample_ID, _hjid 1 - Marketing In app, website More information here: https://help.hotjar.com/hc/en-us/articles/6952777582999
Founderhood founderhood_session, XSRF-TOKEN 3 - Authorisation In app, website
Founderhood jdc_consent 4 - Session Website Cookies consent
Stripe __stripe_sid, __stripe_orig_props, __stripe_mid 4 - Session In app More information here: https://stripe.com/en-gr/legal/cookies-policy

Web Beacons: Web Beacons help us better manage content on our platform by informing us what content is effective. Web Beacons are embedded in, or otherwise associated with, certain emails or other communications that you may receive from us. Web Beacons help us track your responses and interests and deliver relevant content and services to you. For example, they may let us know when you take actions based on the emails that we send.

Data received from third parties:

  • When you connect other apps to our Services (such as Slack and Google Calendar), we receive data which may include your username, email address, Slack channels and Google Calendars.
  • Data from platforms our Services relies on, such as for transaction information and payment verification.

3. How we use data

Founderhood uses personal data to: (i) provide, administer, and improve our service; (ii) better understand your needs and interests; (iii) fulfill requests you make (including customer support queries); (iv) personalize your experience; (v) provide service announcements; (vi) protect, investigate, and deter against fraudulent, harmful, unauthorized, or illegal activity and (vii) comply with legal obligations.

For example, we use personal data to:

  • Operate and improve the platform;
  • Learn more about our users and their internet behaviors;
  • Target offers to users;
  • Facilitate communications among and between users and the public in general;
  • Evaluate eligibility of customers for certain offers, products, or services;
  • Evaluate the types of offers, products, or services that may be of interest to users;
  • Communicate with users regarding support, security, technical issues, commerce, marketing, and transactions;
  • Facilitate marketing, advertising, surveys, events and promotions;
  • Administer the service;
  • Administer and carry out our legal and contractual obligations; and
  • Publish aggregated data about usage trends, which may be derived from personal data.

We may collect, use, and share statistical data that is derived from personal data, but this is not considered personal data in law as it does not directly or indirectly reveal the identity of an individual. We may, for example, aggregate Usage Data to calculate the percentage of users accessing a specific feature on our platform.

If an individual applies for a role with us at Founderhood, we will use the personal information you provide us, during the recruitment process.

4. Lawful basis for processing data

We will only use your personal data if we have a lawful basis for doing so. Lawful bases for processing include consent, contractual necessity, and our “legitimate interests” or the legitimate interest of others, as further described below.

  • Contractual Necessity: We process the following categories of personal data because we need to process the data in order to provide our service to you. When we process data due to contractual necessity, failure to provide such personal data will result in your inability to use some or all portions of the service that require such data:
  • Contact Information;
  • User Account Information;
  • Financial Account Information;
  • Usage Information;
  • User Content.
  • Legitimate Interest: We process the following categories of personal data when we believe doing so furthers our legitimate interest or that of third parties:
  • Contact Information;
  • User Account Information;
  • Financial Account Information;
  • Usage Information;
  • User Content;
  • Log Data.

Examples of these legitimate interests include:

  • Operation and improvement of our business, products, and services;
  • Marketing of our products and services;
  • Provision of customer support;
  • Protection from fraud or security threats;
  • Compliance with legal obligations;
  • Completion of corporate transactions.
  • Consent: In some cases, we process personal data based on the consent you expressly grant to us at the time we collect such data. When we process personal data based on your consent, it will be expressly indicated to you at the point and time of collection.
  • Other Processing Grounds: From time to time we may also need to process personal data to comply with a legal obligation, if it is necessary to protect the vital interests of you or other data subjects, or if it is necessary for a task carried out in the public interest.

5. Opting out

  • Web Browser Controls: You can prevent the use of certain Tracking Tools, such as cookies, on a device-by-device basis using the controls in your web browser. These controls can be found in the Tools > Internet Options (or similar) menu for your browser, or as otherwise directed by your browser’s support feature.

Through your web browser, you may be able to:

  • Delete existing Tracking Tools;
  • Disable future Tracking Tools;
  • Set your browser to provide you with a warning each time a cookie or certain other Tracking Tools are being set.
  • Regarding Do Not Track (“DNT”): DNT is a privacy preference that users can set in certain web browsers. DNT is a way for users to inform websites and services that they do not want certain information about their webpage visits collected over time and across websites or online services. Please note that we do not respond to or honor DNT signals or similar mechanisms transmitted by web browsers at this time.
  • Emails: You can opt-out of non-essential emails such as marketing emails by clicking on the unsubscribe link at the bottom of each such email. Note that you cannot opt-out of emails that are essential to providing Founderhood services such as customer service, security, billing, legal and contractual obligations.
  • Withdrawing consent: Where you have consented to Founderhood’s processing of your personal data, you may withdraw that consent at any time and opt out of further processing by contacting support@thefounderhood.com.

If you would like to object to the further use or disclosure of your personal data for certain purposes, such as for marketing purposes, or if you would like to ask us to restrict further processing of your personal data, please contact support@thefounderhood.com.

6. Accessing, correcting and deleting your data

You have the right to request a copy of some or all of your personal data — please email support@thefounderhood.com to do so. We also want to make sure that your personal data is accurate and up-to-date, so please email us if you would like to amend or delete it.

No fee is usually required

You will not have to pay a fee to access your personal data (or to exercise any of your other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you

We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond

We try to respond to all legitimate requests within two months. Occasionally it may take us longer than two months if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.

7. International Transfers

Where we transfer personal data outside of the EEA, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
  • Where required, we will use specific contracts approved by the European Commission which give personal data the same protection as afforded under EEA data protection legislation.

8. How long we keep your data

We will only retain your personal data for as long as reasonably necessary to fulfill the purposes we collected it for, including for satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint, if we reasonably believe there is a prospect of litigation with respect to our relationship with you, or as required or permitted by applicable law.

To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal, regulatory, tax, accounting or other requirements.

9. How and when we disclose your data

Disclosure to comply with the law

We may disclose personal data or other information if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable laws or to otherwise cooperate with law enforcement or other governmental agencies.

We also reserve the right to disclose personal data or other information that we believe, in good faith, is appropriate or necessary to (i) take precautions against liability, (ii) protect ourselves or others from fraudulent, abusive, or unlawful uses or activity, (iii) investigate and defend ourselves against any third-party claims or allegations, (iv) protect the security or integrity of the services and any facilities or equipment used to make the service available, or (v) protect our property or other legal rights, enforce our contracts, or protect the rights, property, or safety of others.

Disclosure to third parties

We may share personal data with third parties (including contractors) who work on our behalf and provide us with services related to Founderhood services. These parties include:

  • Third parties who act for us or provide services for us, such as billing and credit card payment processing, maintenance, sales, marketing, administration, support, data enrichment, hosting, and database management services.
  • Third parties service Integrations. When you connect third-party apps to the Integrations page, you authorize us to share designated Information and data created and/or uploaded by you to our server with these third-party services of your choice on your behalf. Integrations’ use of information received from Google APIs for its Google Calendar integration adheres to Google API Services User Data Policy, including the Limited Use requirements.
  • Outside professional advisors (such as lawyers and accountants) for purposes related to the operation of our business such as auditing, compliance, and corporate governance.

10. How we store and protect your data

We use commercially reasonable security measures to protect against the loss, misuse and alteration of your information under our control. Notwithstanding such measures, please be aware that no security measures are perfect or impenetrable, and we cannot guarantee the security of any information transmitted to or from our services. We also are not responsible for the actions of any third-parties that may receive any such information.

If you are located outside Germany and choose to provide information to us, be advised that GROUPNOW SINGLEPERSON PC is located in Greece and processes your information in Germany. By using the service under this policy and our terms of service, you consent to the transfer of your information to Germany.

11. Visiting other websites

Our website may include links to third-party. Clicking on those links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy policy of every website you visit.

12. Applying for a role with us

If you apply for a job with us, we may collect the following categories of personal information:

  • Personal details (name, title, address, contact details and emergency contact;
  • Email address;
  • Employment history;
  • Education history;
  • Any personal information you provide in your CV, application form or other correspondence;
  • Any personal information you provide to us at interview.

If you apply for a job with us, we may also collect personal information about you from the following sources:

  • Directly from you (for example, information provided on CVs, application forms and during interviews);
  • Right to work documents (for example, passports and visas);
  • Recruitment agencies;
  • Referees and former employers;
  • Disclosure and Barring Service in respect of criminal convictions;
  • Publicly available information (for example, company websites and LinkedIn).

We use and store personal information relating to applicants to decide whether they are suitable for employment with Founderhood. This will involve using personal information to do the following:

  • Assess skills, qualifications, and suitability for a role;
  • Establish the right to work;
  • Carry out background and reference checks, where applicable;
  • Communicate with you about the recruitment process;
  • Keep records related to our hiring processes;
  • Comply with legal or regulatory requirements.

Our main legal ground for using your personal information is that it is necessary to take steps at your request to decide whether to enter into a contract of employment.

Where we use your personal information for reasons other than entering into a contract with you, we will only do so on the legal ground that doing so is necessary for the purposes of the legitimate interests of our business.

We will retain personal information collected for the recruitment process for a period of two years after we have told an applicant our decision about whether or not to appoint them to a role.

13. Changes to this Policy

Please revisit this page periodically to stay aware of any changes to this policy, which we may update from time to time. If we modify this policy, we will make it available through the service, and indicate the date of the latest revision, and will comply with applicable law. Your continued use of the service after the revised policy has become effective indicates that you have read, understood and agreed to the current version of the policy.

14. Contacting Us

If you have any questions, comments or want to raise issues about this policy, please contact:

email: support@thefounderhood.com

GROUPNOW SINGLEPERSON PC

Tzanakaki 42

Chania

Greece

73100