Privacy policy for Fundshing tokenization platform users
This privacy policy explains how Fundshing handles personal data for tokenization platform users, issuers, investors, visitors, partners, and service requests.
Fundshing (“we”, “our”, “us”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you interact with our website, platform, and services.
Scope
- • Fundshing S.R.L., registered in Romania, is the entity responsible for processing personal data described in this Privacy Policy.
- • This Privacy Policy is designed in line with Regulation (EU) 2016/679 (“GDPR”) and applicable Romanian data protection requirements.
- • By accessing or using Fundshing services, you acknowledge this Privacy Policy.
Data We Collect
Information You Provide Directly
- Name, surname, and contact details (email, phone).
- Company details (legal entity, role, jurisdiction).
- Professional and project information when engaging with our services.
- Account login details (username and password).
Information Collected Automatically
- IP address, browser type, and device identifiers.
- Cookies and usage data (see Cookies & Tracking below).
- Interaction data about how you use our platform.
Information from Third Parties
- Limited reference data when backers, issuers, or partners interact via our ecosystem.
- Publicly available information (for example, LinkedIn or company registers).
What We Do Not Collect or Store
- Financial transaction data, wallet private keys, or KYC/AML verification documents.
- These are handled by issuers or their licensed service providers, where applicable.
How We Use Your Information
Purpose of Processing
- Provide, operate, and improve our services.
- Enable issuers, backers, and partners to connect via the Fundshing ecosystem.
- Communicate with you regarding updates, service notices, or support matters.
- Ensure compliance with legal and regulatory obligations.
- Maintain platform security, prevent misuse, and detect fraud.
- Fulfill contractual obligations under advisory or service agreements.
Legal Basis for Processing (GDPR)
Legal Bases
- Contract performance (Art. 6(1)(b) GDPR) – delivering services you request.
- Legal obligation (Art. 6(1)(c) GDPR) – compliance with regulatory requirements.
- Legitimate interest (Art. 6(1)(f) GDPR) – improving services, ensuring security, and operating our platform responsibly.
- Consent (Art. 6(1)(a) GDPR) – for marketing communications or optional cookies, where required.
Information Sharing
We Do Not Sell Personal Data
- We do not sell your personal data. We only share data as described below and require third parties to comply with confidentiality and applicable data protection obligations.
Who We May Share With
- Issuers, backers, or partners in the ecosystem, where necessary and where you voluntarily engage or confirm interest.
- Regulatory authorities or public bodies where disclosure is legally required.
- Technology service providers, such as hosting, analytics, infrastructure, or cybersecurity partners.
- Professional advisers, compliance providers, or legal partners where necessary to operate our services.
Data Security
Technical and Organizational Measures
- Encryption in transit (SSL/TLS).
- Access controls and authentication safeguards.
- System monitoring, security reviews, and incident response procedures.
- Industry-standard practices designed to reduce risk, while recognizing that no system is completely secure.
Your Privacy Rights
You have important rights regarding your personal information and how we use it.
Your GDPR Rights
You may have the right to access, rectify, erase, restrict processing, object to processing, request data portability, and withdraw consent where processing is based on consent.
How to Exercise Your Rights
Email privacy@fundshing.com with your request. We may need to verify your identity before processing the request.
Right to Lodge a Complaint
You may lodge a complaint with the competent data protection authority in Romania or in the EU/EEA member state where you live or work, if applicable.
Exercise Your Rights
To exercise unknown of these rights, please contact our privacy team at privacy@fundshing.com or use the contact information below.
Data Retention
Retention Periods
We retain your information only as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.
International Data Transfers
We may transfer personal data outside Romania or the European Economic Area where this is necessary to provide our services. Where this occurs, we implement appropriate safeguards in accordance with GDPR.
Safeguards
- Standard Contractual Clauses (SCCs), where applicable.
- Transfers to countries benefiting from an adequacy decision, where applicable.
- Additional contractual, technical, or organizational safeguards when needed.
Data Location Principles
- We seek to use reputable service providers with appropriate security standards.
- Cross-border transfers are limited to what is necessary for service delivery and compliance.
- You may contact us for more information about applicable transfer safeguards.
Cookies and Tracking Technologies
Fundshing uses cookies and similar technologies to improve platform functionality, security, and user experience. You can manage cookies through your browser settings, and where required by law, we will request your consent for non-essential cookies.
Essential
Required for login, security, and core platform functionality.
Functional
Used for preferences and interface settings.
Analytics
Used to understand usage patterns and improve the service.
Marketing
Includes LinkedIn Insight Tag measurement when you enable marketing cookies.
Marketing or non-essential cookies are used only where permitted and, where required, only with your consent.
Contact Our Privacy Team
Have questions about this policy or need to exercise your privacy rights? We're here to help.
We aim to respond to privacy requests within 30 days, subject to applicable legal requirements.
Governing Law
- This Privacy Policy is governed by the laws of Romania.
- Where applicable, data protection matters are interpreted in accordance with GDPR and Romanian law.
Policy Updates
We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last updated” date and, where appropriate, by providing additional notice.
Current Version: April 1, 2026