By getting involved in our activities (eg. applying to the acceleration program, purchasing one of our products, signing up to our newsletter, participating in the program as a judge/mentor/expert/startup or a partner, or taking part in our events, contacting us on matters related to the functioning of the website using the available contact methods), you provide us with your personal data.
Our privacy policy explains how we gather your data, who and why processes it and what are your rights in that matter. Please, find the key information, that will allow you to understand how it works.
What data do we process?
We process data that you provide us, when using the forms on our website or recruitment platform, when you register for an event or when you start cooperating with us within our activities. The data are indispensable to execute the program, provide you with the latest news through our newsletter, organise the event or respond your inquiries. The scope of data we process differs depending on the purpose – when you register for an event you provide us with your name, surname, email address and phone number, but when you apply to the program you inform us also about your professional experience and education.
Who is the data controller?
We – the Foundation for Technology Entrepreneurship, are your data controller. We are established in Warsaw, Poland at HubHub, al. Jerozolimskie 93, 02-001 Warsaw. You can contact us by email: gdpr-rodo@fpt.org.pl or info@fpt.org.pl.
Furthermore, according to current regulations, other entities might be considered the data controller including our trusted partners (organisations with which we cooperate, as official program partners and partner organisations).
Who are the data recipients?
We will use due diligence in the selection of entities to which we will transfer your data and in the case of such selected entities we will require that they protect your data by appropriate technical and organizational measures. Your personal data may only be disclosed:
- to third parties providing services to us that are needed to achieve the purposes in relation to which we process your data (e.g. IT services, electronic communication, hosting, marketing, administration),
- to recipients to whom the disclosure is required by applicable law or order of a court or other authority,
- to other recipients, if you give us your consent to disclose data to them or if the transfer of data to them is necessary to protect your vital interests or vital interests of other individuals or for the common good.
What are the purposes and legal basis for the data processing ?
| Purpose | Legal basis |
| Providing response to inquiries sent via email or online forms, available on the website | Article 6.1.f) – legitimate interest as a personal data controller |
| Event organisation for startup and innovation ecosystem | Article 6.1.a) – consent – if we are just going to establish a business relationship Article 6.1.f) – legitimate interest as a personal data controller – if we have an existing business relationship with you |
| Informational campaigns, in particular sending out monthly newsletters, event invitations and updates about the startup ecosystem, our programs and multiple initiatives. | Article 6.1.a) – consent- if we are just going to establish a business relationship Article 6.1.f) – legitimate interest as a personal data controller – if we have an existing business relationship with you |
| Acceleration program execution, in particular evaluation and selection phase | Article 6.1.a) – consent – if we are just going to establish a business relationship Article 6.1.f) – legitimate interest as a personal data controller if we have an existing business relationship with you |
| International scaling program execution in particular Berlin, London or Boston Bootcamps. | Article 6.1.a) – consent- if we are just going to establish a business relationship Article 6.1.f) – legitimate interest as a personal data controller if we have an existing business relationship with you |
| Acceleration program execution, in particular participation in the workshops, cooperation with the partners and working with the mentors | Article 6.1.b) – contract provisions |
| Contracts with partners and partner organisations | Article 6.1.b) – contract provisions |
| Execution of orders placed via the website | Article 6.1.b) – contract provisions |
| Defence against claims, before courts and administrative authorities and outside them | Article 6.1.f) – legitimate interest as a personal data controller |
| Analyzing the use of the website, as well as to improve its functioning and security | Article 6.1.f) – legitimate interest as a personal data controller |
Is it obligatory to provide data?
Providing data is voluntary, however failure to submit data marked as necessary to provide the service, will prevent us from providing the service.
Is it possible to withdraw a consent?
You have the right to withdraw your consent any time – this will not influence the legal compliance of the processing conducted prior to the consent withdrawal.
Who will have access to the data?
According to the law, we can pass your data to entities, that process the data only for the purposes indicated by us. Such entities include our subcontractors – e.g. IT providers, marketing agency. Second group that might have access to it, are people with whom we cooperate within our acceleration programs or different initiatives – judges, mentors, experts. Third group are our trusted partners – part of them will only process your data, e.g. in order to conduct the workshops. We may also pass you data to entities eligible to have access to it, based on law, for example courts.
Will we send your data outside the EEA?
Your data might be, only in certain cases, sent to entities from third countries – countries located outside the European Economic Area (EEA). It might happen for example when a foreign judge evaluates your application or you participate in any of our international programs located outside EEA. Whenever your personal data is transferred outside the EEA or to countries that do not provide the same or an adequate level of protection for personal data, we will ensure that this is done on the basis of a valid legal basis and using the safeguards required by law. What are your legal rights towards your data?
Any time you can exercise your:
- right to access your data: you have the right to request us for copies of your personal data that we has collected. At your request, a copy of your personal data that is subject to processing will be presented to you free of charge. For sending each subsequent copy of data we have the right to request a fee that will cover the reasonable costs of handling such a request.
- right of rectification of personal data: we take reasonable steps to ensure that your personal data is correct, complete and up to date. If it is necessary to change these data, please let us know.
- right to withdraw the consent: you have the right to withdraw this consent on the conditions indicated above.
- right to delete data and to limit processing of personal data: in the cases indicated in the provisions of law on the protection of personal data, you have the right to request the deletion of your personal data. However, this right is not absolute – there may be occasions when we are still entitled to process your personal data. You can also request a restriction on the further processing of your data.
- right of restriction or objection of processing of personal data: you have the right to restrict or object to the data controller’s processing of your personal data, under certain conditions.
- right to object to processing: in the cases indicated in the provisions of law, you have the right to object to the further processing of your data when the legal basis for the processing of personal data is our legitimate interest.
- right to data portability: you have the right to request that we transfer the personal data that it has collected to another organization, or directly to you, under certain conditions.
If you wish to exercise your rights, please contact us at the gdpr-rodo@fpt.org.pl or info@fpt.org.pl.
Can you lodge a complaint?
Any time you have the right to lodge a complaint with a supervisory authority (President of the Office for Personal Data Protection – in polish: Prezes Urzędu Ochrony Danych Osobowych).
How long we process personal data?
Your personal data will be processed:
- to contact you – from the day they were collected and as long as we are holding the conversation in the matter in which you made contact,
- for marketing purposes – for the duration of our legitimate interest, i.e. the duration of the relationship that connects us or until consent is withdrawn, if it was given to us,
- for the purposes of pursuing and defending against claims – for a period not exceeding the limitation period for claims,
- for the purpose of improving the functioning and security of the website www.startsmartcee.org – for the time for which these data is necessary to achieve this purpose, but no longer than until you express an effective objection to their processing,
- for the purpose of sending newsletters – from the date of signing up until you effectively object to the processing (unsubscribing from the newsletter),
- for archiving and backup purposes – for the period determined in accordance with the backup and archiving policy at the Foundation for Technology Entrepreneurship.
Will your data be processed in automated way?
Your data will not be processed in an automated way and will not undergo profiling.
Links to third party-websites
The website also includes links to third-party websites. When you visit these pages different rules apply than those described here in the field of personal data processing, as well as someone else is the data controller of data processed there. We recommend that you read the rules applicable to the processing of personal data published by the administrators of these websites.
Social media plug-ins
On Our website we have included social media plugins (Facebook, LinkedIn and Twitter). Activating the buttons establishes a direct connection to the server of the respective social network which may gather data from your device.
Please note that we do not have influence on the scope of data gathered by the social networks through their plug-ins. More details of the purpose and scope of the data gathered and how the respective social networks process and use this data as well as details of your rights and the relevant setting options to protect your privacy can be found on the following websites:
Facebook Ireland Ltd. Ireland: https://pl-pl.facebook.com/privacy/explanation. We point out that together with Facebook Ireland Limited (hereinafter “Facebook”) the Foundation for Technology Entrepreneurship acts as a joint-controller in the field of data processing for the purposes of statistics. Information on the principles of joint-controllership of data by the Foundation for Technology Entrepreneurship and Facebook can be found on this page https://www.facebook.com/legal/terms/page_controller_addendum. Information on how Facebook processes personal data for the purposes of statistics is available here https://www.facebook.com/legal/terms/information_about_page_insights_data.
Twitter, Inc., USA: https://twitter.com/en/privacy.LinkedIn Corporation, USA: https://www.linkedin.com/legal/privacy-policy?_l=pl_PL.