Pitchdrive NV, registered with the Crossroads Bank of Enterprises under company number 0703.977.104, having its registered office at Kleine Pieterpotstraat 8, 2000 Antwerp, represented by Mr. Koen Christiaens and with e-mail address dpo@pitchdrive.com (“Pitchdrive”, “we”, “us”) collects data, in its capacity of Controller, when you contact us and/or when you use our services or Platform (as defined below) (“you”).
Pitchdrive recognizes and understands the importance of your privacy. All your Personal Data (as defined below) collected by Pitchdrive shall be processed in accordance with the applicable privacy legislation, more specifically, the European Regulation 2016/679 on the protection of personal data, together with the codes of practice, codes of conduct, regulatory guidance and standard clauses and other related legislation resulting from such Regulation, as amended or supplemented from time to time (the “Privacy Legislation”).
Pitchdrive shall solely use your Personal Data for purposes mentioned in the present privacy policy (the “Privacy Policy”) and we shall not disclose your Personal Data to any Third Parties (as defined below), unless stated otherwise in this Privacy Policy.
Please read our Privacy Policy carefully, which you can also consult on our website www.pitchdrive.com, including Pitchdrive’s mobile application whereby amongst others (i) investors and start-ups are brought together based on “big data”, (ii) start-ups have the opportunity to present a business case and their financial needs to a number of selected investors and (iii) investors have the opportunity to provide capital or other financial means in an efficient and straight-forward manner to selected start-ups (the “Pitchdrive Platform”) (jointly the “Website”), carefully.
In this Privacy Policy you can find information on:
This Privacy Policy applies to the relationship between you and Pitchdrive. Pitchdrive undertakes to process, store and utilize your Personal Data in accordance with this Privacy Policy and the provisions of the applicable Privacy Legislation. In order to use Pitchdrive’s services and Website, you must be aware of the following.
All capitalized terms shall have the meaning as set forth in section 2 of this Privacy Policy.
We may collect several types of Personal Data, and store it on our servers such as:
Pitchdrive (i) collects, (ii) uses, (iii) maintains and (iv) may share the Personal Data provided by you or collected by Pitchdrive with its affiliates, parent companies or other related companies. The purposes for which Pitchdrive may process your Personal Data, may include (collectively the “Purpose”):
Furthermore, Pitchdrive can access, retain, and disclose Personal Data in the following events:
Pitchdrive’s processing of your Personal Data is lawful because of the following legal bases corresponding to the purposes stated above.
Taking into account the state of the art of the technology, the costs of its implementation and the nature of the Personal Data that is being processed, Pitchdrive shall take appropriate administrative, technical and organizational measures against unauthorized or unlawful processing of any Personal Data or its accidental loss, destruction or damage, access, disclosure or use.
Pitchdrive may share the Personal Data provided by you or collected by Pitchdrive with its affiliates, parent companies or other related companies.
In the event of full or partial merger with, or acquisition of all or part of Pitchdrive, Pitchdrive may transfer your Personal Data to a Third Party. In such event, Pitchdrive shall impose upon this Third Party strict consistency with this Privacy policy to use any Personal Data.
We may also share Personal Data with Third Party cloud providers and service providers who help us to provide, understand, commercialize and improve the Website and our services. We do not authorize these Third Party service providers to use or disclose your Personal Data except as strictly necessary to perform any services under our supervision or to comply with applicable legislation. We seek to provide any such Third Party service provider with only the Personal Data they need to perform their specific function.
In any event, such Third Party service providers shall be obliged to treat your Personal Data in accordance with this Privacy Policy. However, we cannot be held liable for any damages, whether direct or indirect, that may result from the misuse of your Personal Data by such Third Party service providers.
In Annex 1 to this Privacy Policy Pitchdrive identifies the current list of Sub-processors for the services. Such Sub-processors list shall include the identities of those Sub-processors and their country of location. Pitchdrive shall provide you with a notification of a new Sub-processor before authorizing any new Sub-processor(s) to process Personal Data in connection with the provision of the services under this Privacy Policy.
In the event that Personal Data is transferred to, stored or processed by a Third Party cloud or service provider located outside of the European Economic Area (EEA), appropriate measures will be taken to ensure a sufficient level of data protection.
In case of an issue about the level of data protection of such data transfer, Pitchdrive will come up with a solution with the Third Party provider. In the meantime, your Personal Data can only be transferred to such a Third Party if necessary for the performance of the contract between you and Pitchdrive. In case the Third party is eventually not able to offer an adequate level of data protection, Pitchdrive will look for alternative service providers.
We want to guarantee a safe and lawful processing of Personal Data, and we assure you that your Personal Data will be processed in a straightforward and lawful way. This implies that the Personal Data will only be processed for the aforementioned, explicitly stated and lawful Purpose. Pitchdrive furthermore assures that Personal Data will always be processed in an adequate, relevant and non-extensive manner.
To exercise your rights mentioned below or any other questions concerning this Privacy Policy, please contact us by e-mail at dpo@pitchdrive.com or by writing to Pitchdrive NV, having its registered office at Kleine Pieterpotstraat 8, 2000 Antwerp, Belgium.
If you are concerned or have any questions about your Personal Data, and provided you are able to prove your identity, you have the right to request information and/or access to your Personal Data, which Pitchdrive holds or processes about you. We will then provide you with information and/or access to the Personal Data that is being processed and on the source of such Personal Data.
You have the right to request us, free of charge, to correct, erase or block any inaccuracies in your Personal Data if such Personal Data would be incomplete, inaccurate or processed unlawfully.
You have the right to request us, free of charge, to erase all of your Personal Data collected, stored and processed by us, without unreasonable delay.
You may withdraw your consent to the processing of your personal data by Pitchdrive at any time for those processing activities that are based on your consent (as specified above), without prejudice to the lawfulness of the processing which was based on consent prior to your withdrawal.
You may object to the processing of your personal data at any time for those processing activities which are based on Pitchdrive’s legitimate interest (as specified above). In addition, you may object at any time to the processing of your personal data for purposes of direct marketing.
Where processing of your personal data is either based on your consent or on the necessity for the performance of the contract between you and Pitchdrive and where this processing takes place through automated means, you may request that these data will be returned to you or transferred to someone else at your choice, in a structured, commonly used, machine-readable and operable format.
If you are not satisfied with the way in which we process your Personal Data, please let us know and we will investigate your concern using the above communication means. You also have the right to make a complaint to the competent data protection authority with the following contact details:
Gegevensbeschermingsautoriteit / Commission de la protection de la vie privée
Rue de la Presse 35, 1000 Bruxelles
Phone : 02 274 48 00 of 02 274 48 79/ Fax: 02 274 48 35
Website : https://www.gegevensbeschermingsautoriteit.be
E-mail: contact@apd-gba.be
We may retain information regarding you and your use of the Website, including Personal Data, for as long as reasonably needed taking into consideration (i) our need to answer queries and resolve problems, (ii) to provide you with improved and new Services and (iii) to comply with legal requirements under applicable law(s).
The retention period of your Personal Data can vary and will be determined by various criteria, including the Purpose for which we are using it and legal obligations (as applicable legislation or regulations may set a minimum period for which we have to keep your Personal Data).
We may keep your Personal Data for the Purpose under section 4, and for as long as we maintain an ongoing relationship with you.
After our relationship is terminated, we may keep your Personal Data for up to 10 years after that date in order to maintain records in accordance with applicable laws and regulations which apply to us and to respond to any regulatory requests or questions.
To the extent that we are not permitted to delete your Personal Data for legal, regulatory, internal compliance and audit, or technical reasons we may keep your data for longer than 10 years. In such circumstances, we will ensure your Personal Data and privacy is protected.
To ensure the confidentiality, security and privacy of our Personal Data, we have implemented strict procedures regarding the protection of Personal Data.
To ensure the confidentiality and privacy of personal data, we have implemented strict procedures for data security.
Pitchdrive makes no use of automated decision-making whatsoever on its platform services.
For more information on Pitchdrive’s use of cookies, please refer to our separate ‘Cookie Policy.’
Certain content or services provided by Third Parties may be made available to you through the Website. Such linked content or services may have their own privacy policies for which Pitchdrive cannot be held responsible. Pitchdrive does not in any way review or endorse the privacy practices of such Third Parties.
Pitchdrive currently appointed Koen Christiaens as Data Protection Officer. In case of questions or concerns, he/she can be contacted via (e-mail) dpo@pitchdrive.com.
Occasionally, we may change or update this Privacy Policy to allow us to use or share your previously collected Personal Data for other purposes. If Pitchdrive would use your Personal Data in a manner materially different from that stated at the time of the collection, we will provide you with a notice on our Website indicating that the Privacy Policy has been changed or updated.
If you consider that the Pitchdrive has not processed your personal data in accordance with the applicable regulations, you are entitled to lodge a complaint with the Data Protection Authority:
Data Protection Authority
Rue de la Presse 35, 1000 Brussels
E-mail: contact@apd-gba.be
Data Protection Officer: Koen Christiaens (dpo@pitchdrive.com)
Pitchdrive NV
Kleine Pieterpotstraat 8, 2000 Antwerp
dpo@pitchdrive.com
www.pitchdrive.com
ADDRESS: https://workspace.google.com/
TYPE OF ASSISTANCE: G Suite is a Saas product that groups all cloud-based productivity tools developed by Google for businesses.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: Google Cloud Standard Contractual Clauses
ADDRESS:
https://www.hubspot.com/
https://www.hubspot.com/data-privacy/gdpr
TYPE OF ASSISTANCE: Hubspot offers a complete CRM platform containing marketing software, sales CRM software, customer service software and content management software.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: HubSpot updated DPA to include the new SCCs.
ADDRESS: GLBAI Solutions Ltd, Pune, India
TYPE OF ASSISTANCE: Collecting and analyzing personal and/or non-personal data from HubSpot form submissions and the Pitchdrive database in order to populate the fields on the Pitchdrive’s data entry homepage.
CATEGORY: Processor, Sub-processor
COUNTRY OF PROCESSING: India
DATA TRANSFER POLICY: DPA-SCC
ADDRESS:
https://aws.amazon.com/
https://aws.amazon.com/privacy/?nc1=f_pr
TYPE OF ASSISTANCE: Amazon Web Services (AWS) is a subsidiary of Amazon providing on-demand cloud computing platforms and APIs to individuals, companies, and governments, on a metered pay-as-you-go basis.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: AWS GDPR Data Processing Addendum (AWS GDPR DPA)
ADDRESS:
https://www.intercom.com/legal/privacy
https://www.intercom.com/legal/data-processing-agreement
TYPE OF ASSISTANCE: Intercom is a software company that helps with personalized customer messaging built for sales, marketing and support.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: Privacy shield, DPA
ADDRESS: https://wiza.co/privacy
TYPE OF ASSISTANCE: Wiza allows you to scrape leads in bulk from any Linkedin Sales Navigator search or saved list and outputs a clean spreadsheet with accurate contact info - Wiza does all the work of extracting, cleaning, and enriching your LinkedIn leads.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: https://help.wiza.co/en/articles/3956777-is-email-scraping-gdpr-compliant
ADDRESS: https://www.lemlist.com/privacy-policy
TYPE OF ASSISTANCE: Lemlist is a sales automation program that helps personalize cold emails, automate follow-ups, and engage with leads across all channels.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: France
ADDRESS:
https://snov.io/privacy-policy
https://snov.io/knowledgebase/is-snov-io-compliant-with-the-gdpr/
TYPE OF ASSISTANCE: Snov.io is an all-in-one sales platform built for prospecting and cold outreach with revenue growth in mind.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: International Data Transfers
ADDRESS:
https://capsulecrm.com/privacy/
https://capsulecrm.com/gdpr/
TYPE OF ASSISTANCE: Capsule is a CRM software available from the cloud that you can use anywhere to manage your contacts and sales
CATEGORY: Processor
COUNTRY OF PROCESSING: England
ADDRESS: https://www.apollo.io/privacy-policy/
TYPE OF ASSISTANCE: Apollo’s comprehensive solution provides the most accurate B2B contact data, built-in engagement tools, and intelligence features that help companies find and convert quality prospects.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: United States
ADDRESS:
https://www.emaillistverify.com/privacy
https://www.emaillistverify.com/gdpr
TYPE OF ASSISTANCE: Email List Verify helps get rid of spam traps, bounces, disposable or catch-all emails with bulk email verifier or real-time API.
CATEGORY: Processor
COUNTRY OF PROCESSING: Slovakia
ADDRESS: https://www.linkedin.com/legal/privacy-policy?src=go-pa&veh=null&mcid=6844057663588847662&gclid=Cj0KCQjw0oyYBhDGARIsAMZEuMslbs_JmpCY-ULt8SrPP6FwmhhYJgHZaGTX_Zhfe4spws_AaALoXPEaAhNTEALw_wcB
TYPE OF ASSISTANCE: LinkedIn Sales Navigator makes virtual selling easy with sales tools that help you find the right prospects & build relationships.
CATEGORY: Joint Controller
COUNTRY OF PROCESSING: Ireland
ADDRESS: https://www.koble.ai/privacy-policy/
TYPE OF ASSISTANCE: Koble’s AI-powered algorithms help in sourcing and scoring Pre-seed and Seed startups.
CATEGORY: Processor
COUNTRY OF PROCESSING: England
ADDRESS: https://ledgy.com/legal/privacy-policy/
TYPE OF ASSISTANCE: Ledgy provides a fast and easy way for international teams to manage equity.
CATEGORY: Processor
COUNTRY OF PROCESSING: Switzerland
DATA TRANSFER POLICY: DPA addendum
ADDRESS:
https://www.trulioo.com/privacy
https://www.trulioo.com/legal/dpa
TYPE OF ASSISTANCE: Trulioo is a global identity verification service that provides instant online identity, document & business verification coverage of 5 billion people.
CATEGORY: Processor, Joint Controller
COUNTRY OF PROCESSING: Canada
DATA TRANSFER POLICY: Standard_Contractual_Clauses
ADDRESS:
https://www.notion.so/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091
https://www.notion.so/Data-Processing-Addendum-361b540101274b1fa7e16b90402b0d99
TYPE OF ASSISTANCE: Notion is a project management and note-taking software designed to help members of a company or organization coordinate deadlines, objectives, and assignments for the sake of efficiency and productivity.
CATEGORY: Processor, Joint Controller
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: Standard Contractual Clauses.
ADDRESS: https://policies.google.com/technologies/partner-sites
TYPE OF ASSISTANCE: Google Analytics is a web analytics service offered by Google that tracks and reports website traffic, currently as a platform inside the Google Marketing Platform brand.
CATEGORY: Joint Controller, Processor
COUNTRY OF PROCESSING: United States
DATA TRANSFER POLICY: SCCData processing terms
ADDRESS: https://leadcamp.io/
TYPE OF ASSISTANCE: All-In-One Sales Platform - Sales Engagement
CATEGORY: Joint Controller, Processor
COUNTRY OF PROCESSING: Belgium
DATA TRANSFER POLICY: Privacy policy
ADDRESS: https://www.heroku.com/
TYPE OF ASSISTANCE: Heroku is a cloud platform as a service supporting several programming languages.
CATEGORY: Joint Controller, Processor
COUNTRY OF PROCESSING: USA
DATA TRANSFER POLICY: DPA
ADDRESS: https://sentry.io/
TYPE OF ASSISTANCE: Sentry's hooks into your runtime environment and automatically reports errors, uncaught exceptions, and unhandled rejections as well as other types of errors depending on the platform.
CATEGORY: Joint Controller, Processor
COUNTRY OF PROCESSING: USA
DATA TRANSFER POLICY: DPA
ADDRESS: https://super.ai/
TYPE OF ASSISTANCE: Super.AI’s Intelligent Document Processing (IDP) solution leverages the power of Large Language Models (LLMs) to extract data from any document with guaranteed quality. Their platform offers access to the latest AI models and their Data Processing Crowd provides on-demand human-in-the-loop (HITL) review.
CATEGORY: Joint Controller / (Sub)processor
COUNTRY OF PROCESSING: USA
DATA TRANSFER POLICY: DPA
Last revision: March 2023.