Privacy policy

byFounders VC Management ApS
Kanonbådsvej 2
DK-1437 Copenhagen K

GDPR@byfounders.vc

byFounders is the data controller of the personal data we process about you, and as such, we provide the following information on our processing of personal data and your rights as the data subjects, pursuant to the General Data Protection Regulation (“GDPR”).

1. How we collect personal data

When you submit your pitch deck or other investment opportunity related documents either through the byFounders website or by e-mail at GDPR@byfounders.vc, we receive various information about you and possibly about your associates or employees. If your pitch deck contains personal information concerning others than yourself, you guarantee that these persons have agreed to the transfer of their personal data and that they have received the information submitted in this Privacy Policy.    

If you sign up for our newsletter, we will process information about your e-mail address.

If you are, or if you represent, one of our suppliers, we process your contact information in order to manage our contractual relationship with you or the service provider that you represent.

Submitting your personal data to us is voluntary, but the consequence of not submitting your personal data may be that we cannot consider your pitchdeck for funding or enter into any agreement with you.

2. The purpose of our processing of personal data

Regarding the personal data we receive from you when you submit your pitch deck, we process (study and evaluate) this data based on GDPR article 6, para 1 (f). The legitimate interest pursued by us is to create investment prospects and discern the prospects in which to invest, to reach out to external stakeholders, and to consult our partners and the pitchers in general and ultimately assess whether you are a qualified candidate for any investments.

Regarding our e-mail newsletter, we process your personal data based on your informed consent, pursuant to GDPR article 6, para. 1 (a). Remember that you can retract your consent at any time by either pressing the Unsubscribe link at the bottom of the newsletter or by contacting us at GDPR@byfounders.vc.

If you are, or if you represent, one of our suppliers, we process your contact information based on GDPR article 6, para. 1 (b), because the processing is necessary for entering into and performing our obligations in accordance with the service supplier contract.

3. Transfer of your personal data

We may transfer personal data to third parties, such as tax authorities or other public institutions, if it is necessary for us to comply with a legal obligation to which we are subject, pursuant to GDPR article 6, para. 1 (c).

Further, based on a legitimate interest, pursuant to GDPR article 6, para. 1 (f), we may transfer your personal data to our technical service providers and system suppliers under processor agreements in order to secure, access, and back-up your personal data. We might also share your pitch deck with other potential investors or members of our byFounders Collective in order to optimise the funding opportunity for your pitch.  

We only transfer your personal data to data importers outside the EU in compliance with the standard data protection clauses adopted by the European Commission providing the appropriate safeguards. You can obtain a copy of the provided safeguards by contacting us at GDPR@byfounders.vc.

We have taken appropriate technical and organizational measures to protect against unauthorized access to, loss or destruction of data for which we are responsible. We develop our security policies and procedures on a regular basis to ensure that our systems are secure and protected. Only persons with a legitimate need for processing personal data for the above-mentioned purposes have access to such data.

4. Retention Period

We retain your personal data as long as we have a relevant legal interest therein.

If we have decided to invest in your company, we will retain your personal information for 5 years after the end of the retention period in which the company no longer exists in our start-up management system, if it is necessary for us to comply with a legal obligation to which we are subject, pursuant to GDPR article 6, para. 1 (c) - unless we asses that it is necessary to keep the data for longer.

However, if we have decided not to invest in your company, we will retain your pitch deck and contact information in our CRM system until the end of the active investment period in which that decision has been made. We retain this information as supporting material because it is necessary for the legitimate interest pursued by us to follow the positive developments of your company during a potential later round of fundraising, pursuant to GDPR article 6, para. 1 (f). If you find that this legitimate interest of ours is overridden by your interests not to have this information retained by us, you are free to exercise your right to have your personal data deleted or the processing thereof limited.

If you are, or if you represent, one of our suppliers, we will retain your contact information for 5 years after the end of the retention period in which the contractual relationship is terminated.

5. Your rights

According to the GDPR, you are entitled

• to gain insight into the personal data about you processed by us;
• to have incorrect personal data about you deleted or corrected;
• in special cases, to have personal data about you deleted before the end of our general retention period ends;
• to limit the processing of personal data about you so that processing - except for storage - may only take place in the future subject to consent or for the purpose of establishing, exercising, or defending a legal claim or to protect a person or important public interests;
• in certain situations, to object to our processing of the personal data about you;
• in certain situations, to receive the registered personal data about you in a structured, commonly used, and machine-readable format and to have the data transferred to another data controller.

In connection with the exercise of the above-mentioned rights, we may demand that you produce relevant personal identification.

You may file a complaint with the Danish Data Protection Agency if you are dissatisfied with our processing of your personal data. You can find the contact details of the Danish Data Protection Agency on www.datatilsynet.dk.