Privacy Policy

Effective Date: Januray 19, 2026

1. Introduction

Welcome to Cofactor. We are committed to protecting your personal data and your privacy. This policy explains how we handle your data when you use our website and contact forms in compliance with the EU General Data Protection Regulation (GDPR).

2. Data Controller

The “Controller” responsible for your data is:
Thies contact at [email protected] or [email protected]

3. Data We Collect and Why

When you interact with our website, we may collect the following information:

A. Contact Forms (Contact Form 7)

When you fill out a form, we collect:

  • Identity Data: Name, surname.

  • Contact Data: Email address, phone number.

  • Message Content: Any information you voluntarily provide in the message field.

  • Consent Status: We record your acceptance of these terms via our acceptance checkbox.

Legal Basis: Consent (Art. 6(1)(a) GDPR).

B. Storage & Processing (Flamingo)

Submissions are stored in our website’s database via the Flamingo plugin. This allows us to recover messages if an email fails to deliver and to maintain a record of our business correspondence.

C. Email Marketing & Notifications (Brevo)

We use Brevo as our communication platform. By submitting a form, you acknowledge that the information you provide will be transferred to Brevo for processing in accordance with their Privacy Policy.

D. Application & Evaluation Forms (Fillout)

We use Fillout (Fillout, Inc.) to power our specialized intake forms, applications, and surveys in accordance with their Privacy Policy.

  • Data Collected: Depending on the form, this may include Identity Data, professional background, startup details, and any uploaded documents or files.

  • Purpose: We use this data to evaluate applications, provide customized feedback, and manage our community intake process.

  • Legal Basis: Performance of a contract or steps taken prior to entering into a contract (Art. 6(1)(b) GDPR) and/or Consent.

4. How Long We Keep Your Data

  • Contact Inquiries: Stored in Flamingo unless you request deletion.

  • Marketing Data: If you opt-in to a newsletter, we keep your data until you unsubscribe or withdraw consent.

  • Application Data: Data submitted via Fillout is stored as long as necessary to evaluate your application or maintain your relationship with the Cofactor community, unless you request erasure.

5. Your Rights under GDPR

As an EU resident, you have the following rights:

  • Right to Access: Request a copy of the data we hold about you.

  • Right to Rectification: Request that we correct inaccurate data.

  • Right to Erasure (“Right to be Forgotten”): Request that we delete your data.

  • Right to Data Portability: Request a transfer of your data to another service.

  • Right to Withdraw Consent: You can withdraw your consent at any time.

To exercise these rights, please contact us at [email protected].

6. Data Security

We implement technical and organizational measures (such as SSL encryption) to protect your data from unauthorized access, loss, or alteration.

7. Third-Party Transfers

We do not sell your data. Data is only shared with service providers strictly necessary for our operations, including:

  • Fillout, Inc.: For form processing and secure data collection.

  • Brevo: For email communication and notifications.

As Fillout is a US-based provider, your data may be transferred to and stored on servers in the United States. We ensure these transfers are protected by Standard Contractual Clauses (SCCs) or other lawful data transfer mechanisms to maintain a level of protection equivalent to the GDPR.