OnePass

Privacy Policy

getonepass.eu & getonepass.eu

Wallet - is one of the functionalities of FundingBox OnePass. The Wallet is a private space where you can safely store documents containing data about your organisation. It is the storage where documents once placed (e.g. for the purposes of applying to a given Opportunity) are kept and remain at your disposal.Applying to Opportunities becomes much easier and less time-consuming since you have access and control over the data you need to share with Opportunity owners. All you need to do is select the data you wish to share. You have control over what documents and data you store in your wallet. Moreover, it is up to you what you add and use in your Wallet.

FundingBox OnePass - FundingBox OnePass is a service that will allow you to consume your full business potential. It brings together a number of functionalities that, depending on your needs, will allow you to obtain funding or provide the opportunity to invest. In other words, it supports you on your way to develop your business. All the faces of FundingBox OnePass are described below. To understand the idea that stands behind it, it is worth looking at it as if it is an actual OnePass. It enables you to introduce yourself at the investors’ market. Moreover, it proves your digital identity. The purpose of the OnePass is to provide services to third parties.

While using OnePass you share with us your personal data, information about you and your business activity, and other content that is valuable to you. You have the right to know how we treat your data and how we process it.

In this Privacy Policy we want to provide you with a detailed guide on the details of data processing. We give you the insight to why we process the data, how we do it and what happens when you decide to remove your data from the OnePass.

FundingBox acts with respect for the right of any person to protect its privacy. We respect your right to choose what you want to share. We don’t use small print. We believe you deserve full transparency. If you want to know more about our Privacy Policy – we are ready for your questions, just drop us an e-mail at privacy@fundingbox.com .

What is covered by this Privacy Policy and when it applies

This Privacy Policy is the integral part of the Terms of Service provided by FundingBox Accelerator Sp. z o.o. and applies every time you use the OnePass. These two documents supplement each other and form a whole. If you don’t agree with this Privacy Policy, please refrain from using the OnePass.

In the matters not covered by this Policy, Terms of Services apply.

Definitions

For the definitions please check FundingBox OnePass Terms of Service.

Who controls the data?

You as the User of the FundingBox OnePass – are the data subject, we – FundingBox – are the data controller, and each operation on your data is data processing.

Your rights

As the data controller, we respect your rights to:

• object to the processing of your data – it means that in some cases you can say
• stop processing my data; a detailed procedure on how to do it is available below
• access your data and obtain a copy of your data – it means that you can ask us what information about you FundingBox has and request a copy of your data
• data portability – it means that you have right to receive your personal data in a machine-readable format and you can ask us to send it to another controller
• correct your data – it means that if we process your inaccurate or incomplete personal data, we have to correct them upon your request
• erase your data, it means that you can request to delete your data when it’s no longer needed or if processing is unlawful
• restrict processing of your data, it means that in some cases you can ask us to limit processing your data only to store it and not processing it for other purposes
• obtain human intervention on the part of the controller, to express your point of view and to contest the solely automated decision – it means that you have the right in this case to express your point of view and to contest automated decisions (operations that are performed automatically by our system)
• submit a complaint with your local Data Protection Authority. Full list is available here: https://edpb.europa.eu/about-edpb/about-edpb/members_en

We process all claims and requests with regard to the applicable provisions of the law and this Policy. You must be aware that in some cases we may still process your data even if you have requested to delete them, for example to determine, pursue or defend claims (for the time necessary to fulfil these purposes).

You can easily get a copy of all data related to your Personal Account using the User Panel.

See more about your rights here

How you can exercise your rights and contact us

To exercise your rights please contact us via e-mail privacy@fundingbox.com. In the email, please specify your request and provide information that will allow us to identify you. Providing contact data is voluntary but it is not possible to manage your request without that.

We will deal with your request without undue delay and in any event within one month of receipt of the request. In exceptional circumstances, that period may be extended by two further months (for example in case of the complexity of your request or great number of requests).

What kind of data we collect and how we process it

Depending on which OnePass functionality you use, we may process some of your data. Below you will find a brief description of how we process personal data, having a separate look at specific features.

Registration – data necessary to set up the Contract

The first step is the conclusion of the Contract with FundingBox. It happens when you register on OnePass. To make a Contract, we must collect some basic information about you. When you register on the OnePass and set up an Account, we ask for your name and surname, username and e-mail address. In addition, we will ask you to create a safe password.

Of course, you don’t have to provide that data, but without an account you won’t be able to experience the OnePass’s variety. The FundingBox OnePass is accessible only by registered Users.

You can use OnePass as an individual or on behalf of your company. In both cases you need to create a Personal Account. Once you have it, you can create your Organisation Account. Your Personal Account will automatically be attached to the Organisation Account. Then, you can invite other users to your Organisation Account.

Account

You have already registered. We have your basic data and the Contract. You have the Account. Now it is time to personalise it. As an individual you can include information about your professional experience.

Along with creating your personal account, you have the option to create and administer an Organisation Account. You will then be able to create its business profile. Moreover, you could create an organisation's digital Wallet in which you will be able to store data that you will have at hand and you will be able to use any time, e.g. to apply for an Opportunity.

You are free to choose if and what information you want to include on your profile or keep in the Wallet, and which of them you would like to share with others. We never ask for sensitive information, but we give you the freedom to choose if you want to keep them in the OnePass.

Anyway, you can always remove specific data without removing your entire Account. Of course, you are free to delete your Account too. We give you the options. It is up to you whether you take advantage of the chances we create for you.

Wallet

Wallet is one of the functionalities of FundingBox OnePass. The Wallet is a space where you can safely store documents containing data about your organisation. It is the storage where documents once placed, e.g. for the purposes of applying for a given Opportunity, are kept and remain at your disposal. Thanks to the fact that you have them at hand all the time, applying to the next Opportunities becomes much easier and less time-consuming. All you need to do is choose the data you need to use at the moment. You have control over what documents and data you keep there. Moreover, it is only up to you which ones you take out from the Wallet.

Authentication through other platforms

To make your life easier, we enable you to set up an Account and gain access to the OnePass using an authentication mechanism through the external authentication service like the LinkedIn, Google Account and FundingBox Platform.

In such a case, we will gather data necessary for registration from your account on the abovementioned platforms. And only this data, unless you decide otherwise yourself. Then, you may allow us to access the data that might be useful when using the Account’s functionality on the OnePass. You can do it by individually changing the plug-in settings.

While using authentication via third party services, we will use cookies following our Cookie Policy.

Your activity within the OnePass

FundingBox processes data concerning your OnePass activity. It is recorded in system logs (a chronological record containing information about events and activities regarding the IT system used to provide services by FundingBox). We keep it for several reasons. Firstly, we do it to enable you to use the OnePass smoothly, to improve your experience and to develop our Services. Secondly, it’s our obligation to ensure the security of the system. Moreover, we use that for analytical and statistical purposes. Last but not least, we store this data to ensure the accountability, non-repudiation of your activity and indisputability of the digital identity of your organisation.

Operational data – what it is and how we use it

As part of the implementation of the above-mentioned analytical purposes, the website also uses the so-called operational data. Operational data are data characterising the way the website is used that the administrator might get, even if cookies are not installed. These are:

• ID number assigned to your device
• markings identifying the end of the telecommunications network
• ICT system (type of device, operational, internet browser) that you use
• information about the start, end and extent of each use of the site.

These data are not associated with specific people browsing the pages. To ensure the highest quality of OnePass, we occasionally analyse log files to determine which pages are visited most often, which web browsers are used, whether the structure of the page does not contain errors, etc.

The data indicated above obtained through the installation of cookies and other operational data are not combined with such information as name and surname, e-mail address and other data enabling easy identification of the person visiting the website.

Communication

The idea behind the OnePass is to enable you to consume your business potential. In practice, this means enabling you to find a business partner that will invest in your organisation, or a partner in whose organisation you may invest. We will enable you to find and contact each other. Our job is to make it possible for you.

Marketing and newsletter

We send newsletters. We won’t send you information about promotion in the nearest supermarket or release of the latest model of your favourite smartphone. What we can send you is information about upcoming or ongoing opportunities for your business. We will send you updates on FundingBox OnePass functionalities. We might send you information about FundingBox projects. We can also send you information about third parties’ projects and their activities that might be in the field of your professional preferences. To provide you with the content as relevant to your interest as possible, we may put you in a particular segment that focuses on a certain field of business.

We send newsletters only if you agree to them while setting up your Account or by choosing such an option in the notification settings tab.

To provide you with even wider possibilities to develop your business, we will cooperate with external entities. These may be service providers that can help you on your way to the top. OnePass in this case will be a platform on which you will be able to meet. The list of those entities and the spectrum of possibilities will change, but you can be sure that all the offers you will receive will be carefully verified by us.

How we get the data

As a rule, we obtain data directly from you. Exceptionally, we can receive your data from a third party – for example if one of the Users invites you to join the OnePass, we will get your contact information, to send you an email notification.

You have the freedom to provide your data. As a rule, only obligatory data is provided during registration. Obligatory data are always marked. Giving consent for processing your data is voluntary in each case.

Legal basis for personal data processing

We process personal data only when we have grounds to do so (so called – lawful basis). Grounds for processing the data are precisely described in GDPR and we strictly follow those rules. Below you can find information on the specific legal grounds we base on:

• contract – when processing is necessary for the performance of a contract with you, to deliver the services you have requested (art. 6.1 (b) of GDPR),
• consent – if you have given consent for such processing, described in art. 6.1 (a) of GDPR,
• legitimate interests of the controller – described in art. 6.1 (f) of GDPR, and
• complying with the legal obligations e.g. concerning taxes, our obligations towards Funding Authorities, described in art. 6.1 (c) of GDPR.
• If you share in the OnePass any personal data of other people (including their name, address, telephone number or e-mail address), you may do so only if you do not violate the applicable law and personal rights of such persons.

The detailed principles and purposes of processing personal data are described below.

Performance of the contract

This happens when personal data is processed to conclude and perform the Contract (you conclude a contract for the provision of online services when you register in the OnePass, and we perform it providing the Services). Legal grounds for this is Article 6.1 (b) of GDPR.

Contract performance includes such a data processing connected with:

• registration and confirmation of the Account (conclusion of the Contract);
• using the OnePass Account (e.g. using your Wallet);
• browsing the OnePass (including searching User profiles within an organisation);
• sending direct messages between Users within the OnePass;
• making entries;
• taking part in Opportunities;
• inviting other Users;
• deleting an Account and Contract termination,
• other functionalities.

Consents

Typically, we will ask for your consent in the context of sending you marketing communications. If the processing of personal data is performed based on your consent, you may withdraw it at any time. To do so change your Account settings or contact us via privacy@fundingbox.com.

Bear in mind that the withdrawal of the consent does not affect the legitimacy of the processing performed on the basis of the consent prior to its withdrawal. The consent may be given only by an adult with full legal capacity. Remember that giving consent is always voluntary.

Legitimate interest of FundingBox

This happens when FundingBox needs to process your personal data in order to carry out tasks related to its business activities. The processing of personal data in that context may not necessarily be justified by a legal obligation or carried out to execute the terms of a contract with you. In particular, this legal basis may cover the following cases:

• ensuring safety, improving quality, removing errors, as well as monitoring the service provided electronically
• pursuing or defending against claims, when such claims arise in connection with the provision of the OnePass services
• sharing data with the entities belonging to the FundingBox capital group in connection with administrative, accounting, business development and project execution purposes
• sharing your user name with the Opportunity Owner;
• sending invitations to join the OnePass;
• sending legal information via e-mail including changes in this Policy or FundingBox OnePass Terms of Service.

We ensure that the pursuit of our legitimate interests does not seriously affect your rights and freedoms.

Who has access to your personal data

We strictly limit with whom we share your personal data and who can access them. We will make your data accessible to entities that ensure the proper functioning of the OnePass. These may be, in particular, vendors who provide us with hosting or any other IT services. The list of our trusted processors can be found here.

Either way, you can be sure that your data will only go to verified suppliers who ensure an appropriate level of security.

For the proper provision of services by FundingBox Accelerator sp. z o.o., the data will be transferred within the companies belonging to FundingBox capital group.

As has already been emphasised, if you decide to apply for a given Opportunity, we will transfer your data to the Opportunity Owner. From that moment the Opportunity Owner becomes a separate data controller and takes responsibility for processing your data.

The same happens if you want to receive commercial newsletters. We will forward your data to the entity that will send you the latest information from the business world or about new tools and chances for your business. Then they become a data controller as well.

We cannot exclude a situation in which we will be legally obliged to provide your data, e.g. to the court, other national authorities or law enforcement authorities.

Servers location and data transfer outside the EU

Our servers are located in the EU. We use only trusted service providers who are obliged to comply with the GDPR rules.

For some functionalities and processes we use the services of providers such as Amazon Web Services, Inc., Google LLC and Sendgrid. You can find more information under the link.

How long will your data be processed

General information

As a rule, the data connected to and on your Account are processed as long as your Account is active or until the effective objection to processing is raised. You can object to data processing by contacting us via privacy@fundingbox.com.

If you decide to close your Account, your personal data will stop being visible to others in the OnePass within 7 days. We generally delete closed Account information within 30 days of Account closure. Exceptions as noted below:

• to comply with FundingBox’s legal obligations (such as execution of H2020 projects, execution of obligations towards third parties etc.);
• to meet regulatory requirements;
• to resolve disputes or protect our rights;
• to prevent fraud and abuse;
• to complete/execute a User’s Contract;
• to implement agreements for co-financing for the period provided for in those agreements (usually 6 years).

Information you have shared with others might remain visible after you have erased your Account or deleted this information from your Profile.

Coming back to the subject of system logs, we will store archived data contained in your organisation profile along with information about when these changes were made. We made this decision because the organisation is not permanently assigned to your Personal Account. It may be that the administration of the organisation's account is transferred to another User, or the organisation's account is retained even though you decide to delete your Personal Account. Then it would be important that the organisation's data remain intact.

Detailed information

We implemented the following retention periods for specific situation:

Type of data	How long?
registration data when account was not verified	14 days
contact information of invited persons who did not accept the invitation	14 days
data deleted by the User in the OnePass	30 days
data generated by the OnePass based on User activity on the OnePass (e.g. logs)	1 year
processing based on consent	until the consent is withdrawn or the Account is deleted, depending on which event occurs earlier
dispute resolution and protection of our rights or right of third parties	no longer than limitation periods included in applicable law, usually 6 years

Security of the data

We apply technological and organisational means to secure your personal data. We implement security safeguards corresponding to the threats and category of data to be secured. In particular, FundingBox secures data against being published to unauthorised persons, being taken over by an unauthorised person, processed in violation of the law and changed, lost, damaged or destroyed. Among others, the SSL (Secure Socket Layer) certificates shall be applied. Your personal data is collected and stored on a secured server. Moreover, the data is secured by internal procedures of FundingBox related to processing of the personal data and information security policy.

In order to log in to the Account, you have to provide relevant username and password. In order to ensure an appropriate level of security, the password for the Account exists in the OnePass only in a coded form. Furthermore, registration and logging into the OnePass takes place under a secure https connection. Communication between the User’s device and servers is encoded using the SSL protocol.

Please remember that using the Internet and services provided by electronic means may pose a threat of malware breaking into the User’s IT system and device, as well as any other unauthorised access to your data, including personal details, by third parties. In order to minimise such threats, you should use appropriate technical security means, e.g. using updated antivirus programs or programs that secure user identification on the Internet. In order to obtain detailed and professional information related to Internet security, FundingBox recommends taking advice from entities specialising in relevant IT services.

FundingBox undertakes all necessary actions, so that our subcontractors and service providers guarantee appropriate security measures whenever they process personal data at the request of FundingBox.

For more information please visit Technical and organisational measures to ensure the security of the data.

Cookies

To learn more about how we process cookies and how we implement our Cookies Policy please check here.

FundingBox OnePass/Privacy Policy/v.1/2022-03-11