Product
Solutions
Company
Contact
GDPR & Privacy
1. About us
1.1 Grantful OÜ (“Grantful”, “we”, “us”, and “our”) takes the protection of your personal data seriously. This privacy policy (“Privacy Policy”) explains our practice and policy regarding how we collect, use and share your personal information and how you can exercise your rights regarding your personal data.1.2 The platform is available on the website at www.grantful.com (“Website”).
1.3 Grantful is an application and review management platform.
1.4 Before you start using the services of Grantful, please read the following terms carefully. You will be asked to confirm that you have read the Privacy Policy.
2. The Controller
2.1 Grantful is the data controller, a company duly registered in Estonia as Grantful OÜ (registry code 16151971). You can contact us by sending an email to info@grantful.com3. What personal data do we process
3.1 We process the following data:3.1.1 From users, who wish to apply for grants (applicants): First name, last name, birthday, education, profession, contact information (email address, phone number, country).
3.1.2 From users, who potentially wish to provide grants, conduct evaluations, etc (committee members): Name, birthday, profession, identification, contact information (email address, phone number, country).
3.1.2 From users, who potentially wish to provide grants, conduct evaluations, etc (committee members): Name, birthday, profession, identification, contact information (email address, phone number, country).
4.How do we use your personal data
4.1 We process your personal data for the following purposes stipulated below:| Types of personal data | Purpose of processing | Legal basis of processing |
| First name, last name, education, profession, contact information (email address, phone number, country), achievements, links to social media | Creation of account for the user who is a natural person | GDPR Art 6(1)(b) |
| First name, last name, education, profession, contact information (email address, phone number, country) | Creation of account for users representing a legal entity | GDPR Art 6(1)(f) - the legitimate interest of Grantful to ensure that the legal entity's board members, employees and/or other representatives can access to platform |
| First name, last name, email address | Sending notifications to the about new features or the platform and/or guidelines about how to use the platform, how to overcome obstacles etc | GDPR Art 6(1)(f) - the legitimate interest of Grantful to ensure problem-free user experience |
| First name, last name, birthday, education, profession, contact information (email address, phone number, country), photo | Creation of a profile (CV) of a natural person on the platform and displaying it on the platform | GDPR Art 6(1)(b) |
| First name, last name, email address | Sending information about upcoming events related to Grantful, information about new products and/or services provided by Grantful | GDPR Art 6(1)(a) |
| First name, last name, email address | Reviewing and replying to inquiries submitted by data subjects via email | GDPR Art 6(1)(f) - the legitimate interest of Grantful to reply to inquiries by potential users of the platform or potential co- operation partners of Grantful |
| Email address | Entering the data subject to the waiting list and sending updates to the waiting list members about the platform | GDPR Art 6(1)(a) |
| First name, last name, education, profession, history of grants which the applicant has applied for. | Profile analysis of the data subject to determine which types of grants the data subject would be interested in the future | GDPR Art 6(1)(b) |
| First name, last name, email address | Sending information about upcoming grants to the data subject via email, based on the data subject's profile and the fields which the data subject is interested in | GDPR Art 6(1)(b) |
Please note that Grantful never collects the following personal data from data subjects: age, gender, race, location. However, foundations or other organisations who are using the platform may ask for this information as part of application forms. Any information you choose to input into application forms will be viewable by that organisation.
5. Retention of personal data
5.1 We retain the personal data of you only as long as it is necessary, in accordance with the aim of collecting the data and as required by law.6. How do we share your personal data
6.1 We do not disclose personal data to third parties without your consent, except if we have legal grounds to do so (for example to the supervisory authorities, accountants and in events arising from law or in case needed for submission or in process of claim against you).7. Cookies
7.1 Grantful uses cookies on its website. The types of cookies which are used are session cookies. The cookies are applied to the user's browser only if the user has given prior consent for the use of cookies.8. Transfer of personal data outside of the EEA
8.1 As part of providing the Platform and related services to you, your personal data may be transferred outside of the EEA, only if this is necessary as part of the relevant application procedure. The personal data of data subjects will be transferred outside of the EEA only if appropriate measures are in place to protect the personal data, according to Articles 44-49 in the GDPR.9. Security of personal data
9.1 We have taken measures to ensure that the data is as safe as possible. We keep your data safe by using organisational and technical measures according to Art 32 in the GDPR.10. Your rights as a data subject
10.1 As a data subject, you have the following rights, considering the relevant restrictions stipulated in applicable legal acts:10.1.1 Right to access. As a user you can manage your personal data in the account/dashboard settings. We provide you, upon request and free of charge, a copy of your personal data that we process.
10.1.2 Right to be informed. This Privacy Policy informs you about who we are, what personal data we process, how we process it, and it explains what your rights are and how you can enforce them. If you wish to have more information related to this Privacy Policy, you can find our contacts at the end of the Privacy Policy.
10.1.3 Right to data portability. You can easily copy, move, or transfer the personal data you provided us to a third-party service provider if you wish, therefore keeping its usability.
10.1.4 Right to erasure. You have the right to request us to delete your personal data in case the obligation to retain the data is not set out by the law.
10.1.5 Right to object. You have the right to object to the way we are processing your data. You have the absolute right to object to your personal data being used for direct marketing. In any other circumstances, we will reply to your objection within one month.
10.1.6 Right to rectification. You have the right to modify and correct your personal data on your account on the Website at any time and you are therefore responsible for the accuracy of your personal data.
10.1.7 Right to restrict processing. According to the GDPR, you may have, depending on the circumstances, the right to ask us to suppress the use of your personal data. We reserve the right to store your personal data even if we will not use it.
10.1.8 Right to withdraw consent. If your personal data is processed based on consent, then you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
10.1.9 Rights related to automated decision making, including profiling. We are not doing automated decisions.
10.1.10 Right to file a complaint with a data protection authority or a court. You have the right to file a complaint with the relevant data protection supervisory authority or a court. The contact details of the data protection supervisory authorities can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
10.1.2 Right to be informed. This Privacy Policy informs you about who we are, what personal data we process, how we process it, and it explains what your rights are and how you can enforce them. If you wish to have more information related to this Privacy Policy, you can find our contacts at the end of the Privacy Policy.
10.1.3 Right to data portability. You can easily copy, move, or transfer the personal data you provided us to a third-party service provider if you wish, therefore keeping its usability.
10.1.4 Right to erasure. You have the right to request us to delete your personal data in case the obligation to retain the data is not set out by the law.
10.1.5 Right to object. You have the right to object to the way we are processing your data. You have the absolute right to object to your personal data being used for direct marketing. In any other circumstances, we will reply to your objection within one month.
10.1.6 Right to rectification. You have the right to modify and correct your personal data on your account on the Website at any time and you are therefore responsible for the accuracy of your personal data.
10.1.7 Right to restrict processing. According to the GDPR, you may have, depending on the circumstances, the right to ask us to suppress the use of your personal data. We reserve the right to store your personal data even if we will not use it.
10.1.8 Right to withdraw consent. If your personal data is processed based on consent, then you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
10.1.9 Rights related to automated decision making, including profiling. We are not doing automated decisions.
10.1.10 Right to file a complaint with a data protection authority or a court. You have the right to file a complaint with the relevant data protection supervisory authority or a court. The contact details of the data protection supervisory authorities can be found here: https://www.edpb.europa.eu/about-edpb/about-edpb/members_en
11. Amendments to this Privacy Policy
11.1 Please be aware that we may amend this Privacy Policy from time to time. Therefore, our Privacy Policy may be changed or amended. Any changes or amendments will be published on the Website and sent to your registered e-mail to notify you about the updates of the Privacy Policy. A notice about these changes will be posted on the Website's homepage for a reasonable period of time prior to such changes coming into force.11.2 We advise you to revisit the Website from time to time to make sure you are familiar with the current version of the Privacy Policy.
11.3 If you do not agree to the updated Privacy Policy, you must stop using the Website and the services provided through the Website.
12. Governing law and jurisdiction
12.1 This Privacy Policy and obligations arising from or related to it are governed by the laws of the Republic of Estonia.12.2 Any disputes arising from or related to this Privacy Policy will be settled by the parties by way of negotiations.
12.3 In case the dispute between the parties is to be resolved in judicial proceedings, the parties agree to refer the dispute to Harju County Court.
13. Other
13.1 If you have any questions or comments, if you have a concern about the way we are processing your personal data or if you would like to exercise any of your rights as a data subject, please contact us at info@grantful.com.Create a Streamlined, Accessible Grant Program Now
Schedule a Grantful demo today and discover how you can operate an impactful grant program with greater efficiency and inclusivity.
