Privacy notice

Fondevia tells businesses whether they qualify for public funding. Here is who is responsible for your data, what we collect on the public check, when you leave your email address and when you use your account, and why.

1. Data controller (article 13 GDPR) — the controller is EVOLUTION HCC SL (NIF B72833585), with its registered office at Calle Xaloc 47, Bl. 45, Ptl. AC 1, Masías, 46113 Moncada (Valencia), España, registered in the Registro Mercantil de Valencia — Tomo 11295, Folio 100, Hoja V-208416, Sección 8, Inscripción 1ª (18/01/2023). For anything about your data, including requests to exercise your rights, write to contact@fondevia.com; a person reads and answers every message.
2. Professional use — the service is offered to businesses and professionals only (companies, sole traders, farmers, consultants). When a sole trader or another natural person uses it, the data about their activity — name, tax ID, activity code, figures — is personal data and is protected as described here.
3. What we collect — the tax ID you enter (stored only as a hash), public registry data about the company, a daily hash of your IP address (never the address itself), and, if you leave it, your email address with the time and version of your consent.
4. Why — to compute and show the pre-qualification, to limit abuse of the free check, and to send you the results and the confirmation email you asked for.
5. Legal basis — your consent (email) and our legitimate interest in running and protecting the service (abuse limits, audit).
6. Accounts and organizations — when you create an account we store your email address, name and language, the organization you belong to and the entities you add (name, tax ID, region, activity code, financial figures — for sole traders this is personal data), together with the verdicts computed for them.
7. Automatic matching and alerts — the engine recomputes the matches between your entities and the open programs when rules or data change and, if you enable alerts, sends you a summary at the frequency you chose, to the address you chose.
8. News and recommendations (optional) — if you tick the box when you create your account, at your first sign-in or in your settings, we write to you about calls that open for your company and about the plan that suits you. The legal basis is your consent (article 6(1)(a) GDPR); we keep the moment, the version of the text you saw, the language and where you decided. You can withdraw at any time, from your settings or from the link in any of these emails, without affecting the service. Emails about your subscription (payment, renewal, failed payment, cancellation, refund) are part of the contract and are sent regardless.
9. Automated processing and human review (article 22 GDPR) — the verdict is computed by a deterministic rules engine, not by a generative AI model: every rule quotes the passage and the page of the official document it comes from, and the explanation shown with each verdict is the exact logic that was applied. The verdict is an estimate meant to help you decide; it is not a decision with legal effects, and nobody is granted or refused funding by us. If you are a sole trader or another natural person and you consider that a verdict concerns you, you have the right to obtain human review, to express your point of view and to contest the result: use “Request a human review” under any verdict in your account — the request is recorded and a person answers by email within 30 days — or write to contact@fondevia.com.
10. Retention — shared results expire after 90 days; the confirmation link after 7 days; audit records are kept as required for the service.
11. Sharing — we do not sell or share your email; the email is delivered by our transactional email provider; payments, when you subscribe, are handled by Paddle.
12. Our processors — Supabase (database and authentication), Vercel (hosting), Resend (transactional email), Paddle (payments, as merchant of record). Rule extraction uses an AI model provider (Anthropic) on the official documents only — no personal data is sent to it.
13. Where data is processed — our processors may process data outside the EEA under standard contractual clauses and equivalent safeguards; details are available on request.
14. Your rights — access, rectification, erasure, restriction and objection under the GDPR; write to us and we will answer within 30 days.
15. Export and erasure — the organization owner can download a complete export and can anonymize the organization from the settings; audit records are kept without any personal data.
16. Double opt-in — we send nothing beyond the single confirmation email until you confirm your address.
17. Cookies — strictly necessary cookies only, unless you accept analytics; see the cookie policy and change your choice at any time.
18. Complaints — you may lodge a complaint with the supervisory authority of your country (ANSPDCP in Romania, AEPD in Spain, CNPD in Portugal, CNIL in France).

Contact: contact@fondevia.com