Privacy Policy

1. Who We Are

GroundSet is the executive platform of Dorin Sterie, an operator based in Bucharest, Romania. The legal entity acting as data controller is identified in the Data Controller section below.

This policy explains how personal data is collected, used, and protected in connection with the website (groundset.eu) and any work undertaken under a signed agreement.

2. Data We Collect

We collect and process the following categories of personal data:

• Contact data: name, email address, company name, job title, provided when you book a call or make contact directly.
• Communication data: content of emails, messages, or calls exchanged.
• Usage data: pages visited, time on site, referral source, collected via analytics tools (see Section 5).
• Work data: information provided in the course of work under a signed agreement, including commercial information and business context shared.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contractual necessity: to carry out work under a signed agreement.
• Legitimate interests: to respond to enquiries and manage business relationships.
• Consent: where you have explicitly opted in (e.g. marketing communications). You may withdraw consent at any time.
• Legal obligation: where required by applicable law (e.g. tax records).

4. How We Use Your Data

• To respond to call requests and enquiries
• To carry out work under a signed agreement
• To send communications related to that work
• To improve the website
• To comply with legal and regulatory obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Third-Party Tools

We use the following third-party services which may process personal data on our behalf:

• Calendly: for booking calls. Subject to Calendly's Privacy Policy.
• Google Analytics / Search Console: for website performance analysis. Data is anonymised where possible.
• LinkedIn: for company page management and outreach. Subject to LinkedIn's Privacy Policy.

All third-party processors are contractually bound to process data only as instructed and in compliance with GDPR.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Data related to work under a signed agreement is retained for a maximum of 5 years after the agreement ends. Contact and enquiry data is retained for up to 2 years.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where legally permissible)
• Object to or restrict certain processing
• Data portability, to receive your data in a structured format
• Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at hello@groundset.eu. We will respond within 30 days.

8. International Transfers

Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g. via third-party tools), we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via this page with an updated date. Continued use of our services after changes constitutes acceptance.