Privacy & cookies

1. Who is responsible for your information?

David Fischer is the controller of personal information collected through the Founders Tuk & Talk website for bookings, applications and enquiries.

Monte Sobral, Caminho Municipal 1186, Caixa Postal 8025, 7630-592 São Miguel - São Teotónio, Portugal. NIF: 307532402. Contact: david@founderstukandtalk.com.

The networking cooperation partner FISCHER & FILHOS ATLÂNTICO EMPREENDIMENTOS & INVESTIMENTOS, LDA does not operate this website. Independent ride providers may separately control information needed for their services and legal obligations; their identity and applicable privacy information must be supplied when your provider is confirmed.

2. Information we handle

• Bookings: your name, email, phone or WhatsApp number, chosen ride, date and time, passenger count, pickup address, language preference, booking reference and payment/refund status.
• Founder and investor applications: contact details, company or firm, stage, sector, interests, goals, investment focus and ticket range, optional profile links, and departure preferences.
• Team, gastronomical, DJ, accelerator, partner and media enquiries: contact and organisation details, group or audience size, requested date, destination and service preferences, links and messages you choose to provide.
• Correspondence, agreed departure changes and information necessary to handle a complaint, refund or dispute.
• Technical connection and security information, such as IP address, browser/device information, request timing and error information, processed by website infrastructure and payment services. Admin sign-in uses session information.

Please do not send passports, card details, confidential pitch material, health details or other sensitive information in ordinary form messages. To discuss an accessibility need, contact us first so we can agree what information is necessary and an appropriate way to handle it.

3. Purposes and legal bases

• Requested bookings and applications: taking steps at your request before a contract, and performing a contract (GDPR Article 6(1)(b)). This includes responding, reviewing participation requests, organising groups and managing departures, payment and refunds.
• Business contacts, safety, security and disputes: our legitimate interests in answering business enquiries, operating a secure service and establishing or defending legal claims (Article 6(1)(f)), balanced against your rights. You may object on grounds relating to your situation.
• Legal obligations: required accounting, tax records and responses to lawful authorities (Article 6(1)(c)).
• Optional uses: separate consent where required for marketing, promotional photos, public participant profiles or non-essential tracking (Article 6(1)(a)). Booking or applying is not consent to these uses.

Information marked required is needed to handle the particular request; without it we may be unable to process your booking or application. Optional fields may be left blank. If you submit details for other guests, ensure you are entitled to do so and give them this notice.

4. Who may receive information?

Authorised organisers and administrators handle requests. The assigned ride company and driver may receive the minimum contact, pickup, passenger and scheduling information needed to deliver your ride. Necessary event coordination details may be shared with the relevant host or confirmed cooperation partner; cooperation does not give partners unrestricted access to applications.

Founder stage, sector and interests are used to shape groups where possible. Any necessary introduction should be limited to the relevant participants; private contact details and full application messages are not intended as a public directory. Public investor profiles and promotional images require a separately established lawful basis and publication permission where required.

Lovable Cloud provides website and application-data services. Stripe handles checkout, fraud prevention and payment processing, receiving booking/payment references and your email together with the information you enter in its checkout. Full card numbers and security codes are entered into Stripe's payment form, not our booking fields. See Stripe's privacy information and Lovable's privacy information.

Professional advisers and authorities may receive information where required for accounting, legal obligations or legal claims. We do not sell your personal information.

5. Automated recommendations

The public AI matchmaker is currently suspended while applicant sharing and processing safeguards are reviewed. Booking and application details are not submitted to that matchmaker through the suspended feature. Previously, the feature used submitted preferences and selected applicant profile information to generate recommendations; contact us if you have questions about an earlier submission.

Founder applications and group allocation are reviewed by the organiser; there is no solely automated acceptance or rejection decision through this feature. Matching, funding and investment are not guaranteed.

6. International processing

Some service providers may process information outside the European Economic Area. Applicable safeguards may include an adequacy decision or European Commission standard contractual clauses, together with additional measures where needed. The actual processing locations, contracts and safeguards for our service configuration still require verification; this notice does not certify that those checks are complete. You can contact David to request information about the recipients and safeguards applicable to your data.

7. How long information is kept

Information should be kept only as long as necessary for the purpose for which it was collected. Booking and payment records may need to be retained for applicable Portuguese accounting/tax duties and the period necessary to handle disputes. Unsuccessful applications and enquiries should be reviewed after the relevant event and deleted or anonymised when no longer needed; records relevant to an ongoing request or legal claim may need longer retention.

A precise retention schedule and routine deletion process are still being finalised. No automatic deletion timetable is promised. A 30-minute unpaid seat hold concerns availability only: it does not delete the associated personal information. Ask David about retention or deletion of your particular record.

8. Your rights

Subject to the GDPR's conditions, you may request access and a copy, correction, erasure, restriction, portability, and object to processing based on legitimate interests. Where consent is the basis, you can withdraw it at any time without affecting earlier lawful processing. Legal retention duties can limit erasure; we will explain any applicable limitation.

Email david@founderstukandtalk.com. We may request proportionate information to verify your identity, but please do not send identity documents unless specifically necessary. GDPR requests normally receive a response within one month; where a permitted extension is necessary, we will explain it within that first month.

You may complain to the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD), or the competent authority in your place of habitual residence or work. You do not have to contact us first.

9. Cookies, storage and external services

Admin sign-in uses browser storage to maintain an authenticated session. Payment services may use necessary security and fraud-prevention technologies when checkout is opened. Blocking necessary storage may prevent sign-in or payment from working.

The application code currently contains no advertising pixels or optional analytics integration. This is not a guarantee about hosting or third-party technologies: a complete live cookie and storage inventory, including provider lifetimes, is still to be verified. Any non-essential cookies or similar tracking require an appropriate consent mechanism before activation; a notice alone is not consent.

Fonts are loaded from Google Fonts, which receives connection information including your IP address when the page loads. Images are served through our website and media infrastructure. Google Maps, Instagram, WhatsApp, Telegram and external event pages are links, not embedded social feeds; their own terms and privacy practices apply when you open them. You can contact us by email instead of using a social messaging service.

You can manage cookies and site storage in your browser. There is currently no optional tracking preference stored by this application.

10. Security and changes

Access to booking and application administration is restricted, and payment processing is handled separately through Stripe. No transmission or storage system is risk-free. Contact David if you believe your information has been exposed or used incorrectly.

We will update this notice when processing or provider arrangements change. See the Imprint for operator details and Booking & consumer information for service disclosures.