Privacy Notice — Protection and Processing of Personal Data

1. Data controller

Your personal data is processed by the data controller DIGI4AGE (dijital.age – European Digital Innovation Hub). Contact: info@digi4age.com. (The legal entity name, address and any DPO details will be stated here.)

2. Categories of personal data

• Identity and contact: first name, last name, email, phone.
• Membership and transaction: membership status, session and login records, preferred language.
• Company/organisation: legal name, trade name, tax/VAT identifier, industry, team size, website/LinkedIn.
• Application content: product/service description, TRL, support requests and documents you upload (e.g. pitch deck).
• Consent and legal records: versioned records of your notice/consent/cookie preferences.
• Processing security: security and audit logs (kept to a minimum; raw IP/UA storage is minimised).

3. Purposes of processing

• Creating your membership account, authentication and account management.
• Receiving and assessing your applications and communicating with you.
• Providing, improving and securing our services.
• Meeting legal obligations and handling requests/disputes.
• Where you consent, sending commercial electronic messages and enabling opt-in features.

4. Legal bases

Your data is processed on the bases of performance of a contract, compliance with a legal obligation, establishment/exercise/defence of a right, and legitimate interests (KVKK Art. 5; GDPR Art. 6(1)(b), (c), (f)); where none of these apply, it is processed on the basis of your explicit consent (KVKK Art. 5/1; GDPR Art. 6(1)(a)).

5. Transfers of data

Your data may be shared, to the extent necessary to provide the service, with our authorised processors (hosting, email infrastructure, etc.) and with legally authorised public authorities, in accordance with the law. Where transfers abroad are required, the appropriate safeguards required by KVKK and GDPR (adequacy decision, standard contractual clauses, etc.) are ensured.

6. Method of collection

Your data is collected through the registration, onboarding and application forms on the website, and via email and electronic communication channels, by automated and semi-automated means.

7. Retention periods

Your data is retained for as long as required by the purpose of processing and applicable law; afterwards it is deleted, destroyed or anonymised. Separate retention periods per record type are defined in our retention policy (e.g. unverified/pending accounts, active membership, rejected/withdrawn applications, audit/security logs, consent records).

8. Your rights

Under KVKK Art. 11 and GDPR Arts. 15–22, you have the right to learn whether your data is processed, to request information, rectification, erasure/anonymisation, restriction of processing, data portability and to object to processing, as well as to claim compensation for any damage. To exercise these rights, contact us at the address below.

9. Contact

For requests and questions: info@digi4age.com