Privacy Policy

The data controller for funded.gr is the platform operator, reachable at info@funded.gr. All data is processed in accordance with Regulation (EU) 2016/679 (GDPR).

We collect the following categories of personal data:

We do not collect payment information, precise location data, or any special categories of personal data as defined in Article 9 GDPR.

We process your personal data on the following legal bases:

• Contract (Art. 6(1)(b)): to provide the services you registered for, including account management and project publishing.
• Legitimate interests (Art. 6(1)(f)): to maintain the security and integrity of the platform, and to improve our services.
• Consent (Art. 6(1)(a)): where you have explicitly provided consent, such as when submitting a contact form message.

• To create and manage your account
• To publish and display your submitted project
• To generate AI-assisted project evaluations based on your project content
• To respond to contact form submissions
• To detect and prevent abuse, spam, and fraudulent activity
• To communicate important service updates

We do not use your data for automated decision-making that produces legal or similarly significant effects, except as part of the optional AI evaluation which you must explicitly request.

Your data is stored on cloud infrastructure located within the European Union. No personal data is transferred to countries outside the EEA without adequate safeguards in place.

We do not sell, rent, or trade your personal data. We may share data with:

• Cloud infrastructure providers — for hosting, authentication, and data storage services
• AI processing services — solely to generate project evaluations; only project content is submitted, not account data
• Bot protection services — to verify that contact form submissions are made by humans
• Law enforcement — if required by applicable law or a valid legal order

We retain account and project data for as long as your account is active. Contact form messages are retained for 12 months, after which they are permanently deleted.

When you delete your account, we delete or anonymise your personal data within 30 days, except where retention is required by law.

Under GDPR, you have the following rights:

• Access (Art. 15): request a copy of the data we hold about you
• Rectification (Art. 16): correct inaccurate or incomplete data
• Erasure (Art. 17): request deletion of your personal data. Note that if you have requested an AI evaluation, your project data is locked for up to 30 days from the evaluation date — deletion of that data will be fulfilled once the lock period expires.
• Restriction (Art. 18): restrict processing in certain circumstances
• Portability (Art. 20): receive your data in a machine-readable format
• Objection (Art. 21): object to processing based on legitimate interests
• Withdraw consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing

To exercise any of these rights, please contact us. We will respond within 30 days. You also have the right to lodge a complaint with the Hellenic Data Protection Authority (HDPA) at www.dpa.gr.

funded.gr uses browser localStorage to store your authentication session tokens. No third-party advertising or tracking cookies are used. A bot protection service may set a cookie on the contact page only, solely to distinguish human visitors from automated traffic.

We may update this Privacy Policy periodically. Material changes will be communicated via the platform. The "Last updated" date at the top of this page always reflects the most recent revision.

For any privacy-related enquiries or to exercise your rights, please contact us or email info@funded.gr.