Name: Found4U Europe, Unipessoal Lda. Legal Person Identification Number / Commercial Registry: 513 874 151 Headquarters and postal address: R da Manutenção, nº 67, 1900-319 Lisboa, distrito de Lisboa, concelho de Lisboa, freguesia de Beato, Portugal
Email address: data.controller@found4u.com
Data Protection Officer (“DPO”) contact details: data.controller@found4u.com

For details, please refer to section B.II.

We use third-party service providers within the operation of the Platform, and We will share your Personal Data with them for the provision of the services they provide Us.

We share your Personal Data with governmental authorities, courts, external advisors, and similar third parties that are public bodies as required or permitted by applicable law.

We share Personal Data with the recipients only to the extent necessary.

We will share your personal data with companies that are affiliated with Us. Some of those companies are located or have relevant operations outside of the EEA (namely, Brazil). By way of entering into appropriate data transfer agreements or by other adequate means, We have established that all such recipients located outside the EEA will provide an adequate level of protection for the Personal Data and that appropriate technical and organizational security measures are in place to protect Personal Data. Any onward transfer is subject to appropriate onward transfer requirements as required by applicable law.

For details, please refer to section B.IV.

Access; Rectification; Erasure; Object; restriction of the processing; Portability. When the legal ground is consent, the data subject has the right to revoke such consent at any time. To exercise any right, please send an email to data.controller@found4u.com.

For details, please refer to section B.IV.

The Controller of your personal data is Found4U Europe, Unipessoal Lda., with registered office at R Fernando Curado Ribeiro, 20, 1, B ALGÉS, distrito de Lisboa, concelho de Oeiras, freguesia de Algés, Linda-a-Velha e Cruz Quebrada-Dafundo, Portugal.
You can contact Us via: email address data.controller@found4u.com
You may also contact our Data Protection Office via: data.controller@found4u.com

We will process your personal data for the following purposes and based on these legal grounds:

Some of the personal data indicted on the table above is collected and processed through Cookies, and as such we suggest that you consult our Cookie Policy.

The time limit during which we retain your personal data may vary depending on the purpose for which they were processed. Therefore, we will retain your personal data within the following time limits:

We will transfer your Personal Data for the respective purposes and limited to the extent necessary to the recipients and categories of recipients listed below:

• Within the Found4U group: We share your Personal Data with other Found4U group entities as follows in order to carry out the following purposes:
  • Platform’s troubleshooting and bug fixing;
  • Provide technical assistance and for the purpose of responding to requests, inquiries, or complaints.
  A list of such other Found4U group entities can be found here ("Found4U Group Entities").
• Service providers: We use third-party service providers, to provide the Platform and will share your Personal Data with them for the provision of the services. Our service providers are contractually obligated to process such Personal Data on behalf of Found4U under appropriate instructions as necessary for the respective processing purposes and to appropriately protect your Personal Data. Our service providers may not otherwise process or share your Personal Data, except as permitted by law. We share your Personal Data with service providers listed below:
  • Stripe Technology Europe, Limited (“STEL”). STEL is authorized as an electronic money institution by the Central Bank of Ireland (reference number: C187865).
• Governmental authorities and regulators, courts, external advisors (e.g., lawyers, accountants, auditors), and similar third parties that are public bodies as required or permitted by applicable law, in order to: (i) ensure compliance with applicable laws; (ii) respond to governmental inquiries or requests from public authorities; (iii) comply with valid legal process; (iv) protect the rights, privacy, safety or property of Found4U, site visitors, guests, employees or the public; (v) permit Us to pursue available remedies or limit the damages that We may sustain; and (vi) respond to an emergency. Such data transfers are based on Art. 6 (1) (c) or (f) GDPR.

Some of the recipients of your Personal Data are located or have relevant operations outside of the EEA (namely, USA, and Brazil), where the data protection laws may provide a different level of protection compared to the laws in your jurisdiction. We will take all necessary measures to ensure that transfers out of the EEA are adequately protected as required by applicable data protection law.
By way of entering into appropriate data transfer agreements based on the Standard Contractual Clauses (2021/914/EU) as referred to in Art. 46 (2) (c) GDPR (the "SCC"), or by other adequate means, which are accessible upon request. We have established that all recipients located outside the EEA will provide an adequate level of protection for the Personal Data and that appropriate technical and organizational security measures are in place to protect Personal Data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of processing. Any onward transfer (including to Our group entities outside the EEA) is subject to appropriate onward transfer requirements as required by applicable law. For example, we will enter into appropriate data transfer agreements based on the SCC in order to transfer your Personal Data to US.

Under the conditions set out under applicable data protection law (e.g., the GDPR), you may have the following rights:

• Right of access: You have the right to obtain confirmation from Us as to whether or not Personal Data concerning you is processed, and, where that is the case, to request access to the Personal Data. The access information includes – inter alia – the purposes of the processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom the Personal Data have been, or will be disclosed. However, this is not an absolute right and the interests of other individuals may restrict your right of access. You also have the right to obtain a copy of the Personal Data undergoing processing. For further copies requested by you, We may charge a reasonable fee based on administrative costs.
• Right to rectification: You have the right to obtain rectification of inaccurate Personal Data concerning you from Us. Depending on the purposes of the processing, you have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
• Right to erasure ("right to be forgotten"): Under certain circumstances, you have the right to obtain the erasure of Personal Data concerning you from Us and We may be obliged to erase such Personal Data.
• Right to restriction of processing: Under certain circumstances, you have the right to obtain the restriction of processing your Personal Data from Us. In this case, the respective data will be marked and may only be processed by Us for certain purposes.
• Right to data portability: Under certain circumstances, you have the right to receive the Personal Data concerning you, which you have provided to Us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another entity without hindrance from Us.
• Right to object: You have the right to object, on grounds relating to your particular situation, at any time to processing of your Personal Data by Us which is based on the necessity of processing for the purposes of the legitimate interests pursued by Us or by a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection. We will no longer process your Personal Data unless We demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.
• Moreover, if your Personal Data are processed for direct marketing purposes, where such processing is permitted without you prior consent, you have the right to object at any time to the processing of Personal Data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In this case your Personal Data will no longer be processed for such purposes by Us.
• Right to lodge a complaint: In addition to the rights set out above, you also have the right to lodge a complaint with the competent data protection supervisory authority.

If you have any question or wish to exercise these rights, you may send an email to data.controller@found4u.com. The exercise of rights is free of charge, unless the request is obviously ungrounded, excessive or repeated.

This policy is subject to change due to technological developments, changes in laws regarding the functionality of electronic services, etc. objective factors. The controller of personal data will publish information about changes in the policy on the Platform. Date of last change: 04.07.2023