Your GDPR Rights

You have the right to request confirmation of whether we process personal data about you, and if so, to receive a copy of that data along with information about:

• The purposes for which it is processed
• The categories of data concerned
• Any third parties the data has been shared with
• The retention period or criteria used to determine it
• Your other rights under the GDPR

For FindFund.eu users: you can export your company profiles and analysis history directly from the dashboard. For a full data export including account metadata, contact dpo@synopp.io.

If personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct it without undue delay.

For FindFund.eu users: you can update your account details (name, email) directly through your account settings. For corrections to extracted company profile data, contact dpo@synopp.io.

You have the right to request deletion of your personal data when:

• The data is no longer necessary for the purposes for which it was collected
• You withdraw consent and there is no other legal basis for processing
• You object to processing and there are no overriding legitimate grounds
• The data has been unlawfully processed

For FindFund.eu users: you can delete your account from the Settings page. This triggers deletion of your profiles, analyses, Value Propositions, and all associated personal data within 30 days. Payment records are retained for 7 years as required by French fiscal law (Code général des impôts), but this data is limited to transaction records necessary for accounting purposes.

You have the right to request that we temporarily suspend processing of your data if:

• You contest the accuracy of your data (while we verify it)
• Processing is unlawful but you prefer restriction over erasure
• We no longer need the data but you require it for a legal claim
• You have objected to processing pending verification of legitimate grounds

To request a restriction, contact dpo@synopp.io.

Where processing is based on your consent or a contract, and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format (JSON or CSV) and to transmit it to another controller.

This applies to data you have actively provided: your account information, extracted company profiles, and analysis results. Contact dpo@synopp.io to request a data export.

You have the right to object to processing of your personal data based on legitimate interests (Art. 6.1.f). If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.

You have an absolute right to object to processing for direct marketing purposes at any time; we will stop immediately.

FindFund.eu uses AI to generate compatibility scores and match rankings. These are informational tools to support your decisions, not automated decisions with legal or significant effect on you. Synopp does not engage in solely automated decision-making as defined under GDPR Article 22.

If you believe an AI-generated result has unfairly affected you, contact dpo@synopp.io to request human review.

Where processing is based on your consent (e.g. marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

To withdraw consent, use the unsubscribe link in any marketing email or contact dpo@synopp.io.

Send your request to:

Data Protection Officer — Synopp
dpo@synopp.io
60 Rue François Ier, 75008 Paris, France

Please include:

• Your full name
• The email address associated with your FindFund.eu account
• A clear description of the right you wish to exercise
• A copy of a valid identity document (required for access and erasure requests to prevent fraud)

We will respond within 1 month of receiving your request. In cases of complexity or high volume, this period may be extended by a further 2 months; you will be informed within the initial 1-month period.

If you believe your GDPR rights have not been respected, you have the right to lodge a complaint with the French supervisory authority:

CNIL — Commission Nationale de l'Informatique et des Libertés
3 Place de Fontenoy — TSA 80715 — 75334 Paris CEDEX 07
www.cnil.fr

You may also lodge a complaint with the supervisory authority of your country of residence or workplace within the EU.