Privacy Notice
Information pursuant to Article 13 of Regulation (EU) 2016/679 (GDPR) · Last updated: 28 October 2026
1. Data controller
Tifeo S.r.l., with registered office at Via dei Carabinieri 28, 57123 Livorno (LI), Italy, VAT No. 02210440687 (the “Company”). Contact: stefano.briola@tifeo.eu; certified email (PEC): tifeo@pec.tifeo.eu.
2. Personal data processed
The data provided through the “Request the full confidential documentation” form (name, fund name, work email address and, if provided, intended check size) and the data exchanged in subsequent correspondence, including the data contained in any non-disclosure agreement (NDA).
3. Purposes and legal bases
- Responding to the request, arranging the signing of the NDA and sending the confidential documentation: steps taken at the request of the data subject prior to entering into an agreement (Article 6(1)(b) GDPR).
- Managing subsequent communications concerning the investment opportunity: the Company’s legitimate interest in managing relations with prospective investors (Article 6(1)(f) GDPR).
- Complying with legal obligations and, where necessary, establishing, exercising or defending legal claims (Article 6(1)(c) and (f) GDPR).
The data are not used for marketing purposes or for automated decision-making, including profiling.
4. Provision of data
Providing the name, fund name and work email address is necessary to process the request; without them, the Company cannot respond. Providing the intended check size is optional.
5. Recipients
The data are processed by the Company’s directors and by persons authorised by the Company and bound by confidentiality. They may be processed on behalf of the Company by providers of website hosting, form management and email services acting as data processors, and may be disclosed to the Company’s professional advisers where necessary for the purposes above. The data are not disseminated.
6. Transfers outside the European Economic Area
Some service providers may process data outside the European Economic Area. In such cases, transfers take place on the basis of an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or of the standard contractual clauses adopted by the European Commission.
7. Retention
The data are retained for the time necessary to manage the request and any subsequent relationship and, in any case, for no longer than 24 months from the last contact. Data contained in signed agreements, such as NDAs, are retained for the duration of the agreement and thereafter for the period required to protect the Company’s rights.
8. Rights of the data subject
Data subjects may at any time exercise the rights set out in Articles 15 to 22 GDPR – access, rectification, erasure, restriction of processing, data portability and objection to processing based on legitimate interest – by writing to stefano.briola@tifeo.eu. They also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).