Privacy notice
1. Who is responsible
The controller is JooLC Technology s.r.o., Prague, Czech Republic. For anything about your data, including deletion, write to [email protected].
2. What we collect, and why
| Data | Purpose | Legal basis |
|---|---|---|
| Segment (company, expert, student, institution), email, country, sector or field of study, language of the page, time of sign-up, the campaign link you arrived from (UTM parameters) | To keep you on the waitlist, to contact you about TalentLedger, and to count demand by segment and country | Your consent (GDPR Art. 6(1)(a)) |
| Optional second-step answers (experience ranges, role, spend bands, readiness questions) | To prioritise the list and to understand demand; reported only in aggregate | Your consent |
| Confirmation that you are 18 or over | We do not collect data from minors | Legal obligation / consent validity |
| Email double opt-in link and confirmation time | To make sure the address is yours | Legitimate interest (Art. 6(1)(f)) |
| For the investor page: the label of the access code used, time of first opening, pages viewed. Not the IP address beyond rate-limiting for one hour | To know which invited investor opened the page, and to stop guessing attacks | Legitimate interest |
We do not collect date of birth, nationality, health, salary or any special-category data. Rate and spend questions are ranges only. No automated decision is made about you on the basis of your answers; there is no profiling.
3. Where it is stored
In the European Union. The waitlist database and the access-code store run on Cloudflare with the EU jurisdiction setting; transactional email is sent through an EU provider. We do not transfer your data outside the EU/EEA.
4. Processors
- Cloudflare, Inc. (EU data-localisation jurisdiction) — hosting, database, form protection (Turnstile), privacy-preserving analytics
- Brevo (Sendinblue SAS, France) — confirmation and update emails
- Plausible Insights OÜ (Estonia) — cookie-less page analytics, no personal data
5. How long
24 months from sign-up, or until you withdraw, whichever is earlier. Investor-page access logs: until the funding round closes, then 12 months. Unconfirmed sign-ups are deleted after 30 days.
6. Your rights
Access, correction, deletion, restriction, portability, and withdrawal of consent at any time, with effect for the future — one email to [email protected] is enough; we act within 30 days. You may also complain to the Czech Office for Personal Data Protection (ÚOOÚ).
7. Cookies
The public pages set no cookies. Analytics are cookie-less. The investor page sets one HttpOnly cookie for 30 days after a valid access code, so you do not have to enter it again; it contains no personal data.
8. Marketing to minors
None. The form requires confirmation that you are 18 or over; schools and universities register on behalf of younger students.
9. Changes
We will update this notice when the product goes live and the purposes change; the date at the top tells you which version you are reading.