GDPR Compliance

Our commitment to data protection and privacy rights

Last updated: October 2025

1. Introduction

At Founder as a Service, we are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR). This document outlines our data protection practices and your rights as a data subject.

2. Data Controller

Controller Information

Company:

Founder as a Service

Contact:

3. Data We Collect

We collect only the data necessary to provide our services:

Personal Data

  • Name and contact information
  • Email address and phone number
  • Business information and startup details

Technical Data

  • IP address and browser information
  • Website usage and analytics data
  • Transaction and payment information

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

1

Consent

When you explicitly consent to data processing for specific purposes like marketing communications.

2

Contract Performance

To fulfill our contractual obligations in providing Founder as a Service.

3

Legitimate Interest

For business operations, security, and service improvement purposes.

4

Legal Obligation

To comply with applicable laws and regulations.

5. Your Rights Under GDPR

You have the following rights regarding your personal data:

Right to Access

Request a copy of all personal data we hold about you.

Right to Rectification

Correct any inaccurate or incomplete personal data.

Right to Erasure

Request deletion of your personal data in certain circumstances.

Right to Restrict Processing

Limit how we process your personal data.

Right to Data Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on legitimate interests or for marketing.

6. Data Security Measures

We implement comprehensive security measures to protect your data:

Encryption

All data encrypted in transit and at rest using industry-standard protocols

Access Control

Strict access controls and multi-factor authentication for all systems

Monitoring

Continuous security monitoring and regular security assessments

7. Data Retention

We retain your personal data only as long as necessary:

Retention Periods

  • Project data: 3 years after completion
  • Marketing data: Until consent withdrawn
  • Legal compliance: As required by law

Deletion Process

  • Secure deletion from all systems
  • Backup data removal
  • Third-party data deletion

8. International Data Transfers

We may transfer your data outside the EU with appropriate safeguards:

Transfer Mechanisms

Adequacy Decisions

Transfers to countries with adequate data protection

Standard Contractual Clauses

EU-approved contractual safeguards for transfers

Certification Schemes

Third-party certifications ensuring data protection

Consent

Explicit consent for specific transfers

9. Contact Information

To exercise your rights or for any GDPR-related inquiries:

Email:

We will respond to all GDPR requests within 30 days.

Ready to Start Your
AI Startup Journey?

We carefully select projects with real potential. Apply now to see if we're a good fit.

GDPR compliant
Free consultation
Data protection first