“Applicant(s)” – entrepreneurs and/or start-ups that apply to participate in the Program through the Website.
“GDPR” – the General Data Protection Regulation (EU) 2016/679, as amended from time to time.
“Non-Personal Data” – information that does not personally identify you and does not reveal your specific identity as an individual, such as anonymized information.
“Personal Data” – any information by which you can be individually identified both directly and indirectly, including, but not limited to full name, address, e-mail address and telephone number.
“Program” – the StarFinder innovation program established by Roche and aMoon aimed at identifying exceptional entrepreneurs and start-ups that are addressing pressing global health challenges.
“Website” – our website available at: https://www.starfinderlab.com/
Personal Data that you provide to us. While browsing the Website, you may voluntarily provide us Personal Data when you:
apply to participate in the Program.
subscribe to our newsletter (we collect your email address).
reach out to us through the “Contact Us” online application form on the Website (you will need to provide your full name and email address).
contact us by phone, email or otherwise.
Please note that you are not legally required to provide us with any Personal Data. If you do not wish to provide us with your Personal Data or to have it processed by us or any of our Service Providers (as defined below), please avoid any interaction with us or with the Website or submit a request to exercise your rights as further explained in Section 10 below.
Cookies and Other Web Trackers. Our Website and online resources also collect other basic information about you which may not directly identify you, but which may correspond with you or a particular device. We use some of this information to allow the Website to run, as well as to learn more about how the Website and online resources are used and to otherwise improve and administer the Website. We also use this information to enable us to deliver information tailored to your interests and preferences, based on your use of the Website. For example, we may collect the IP Address assigned to your computer by your internet service provider. This address may change each time you connect to the internet (a “dynamic” IP address), or it may remain the same (a “static” IP address). In most cases, this information is collected automatically, for our legitimate business interests. For more information regarding cookies, you may find the following website useful: www.allaboutcookies.org.
When you apply to participate in the Program through the online application form, we collect information about you as an Applicant including Personal Data (collectively, the “Application Information”), as follows:
With respect to each Applicant’s Company: the name of the Company, its number, incorporation date, number of employees, funds raised and current revenues, budget and other financial information. Any other Personal Data provided to us in the context of your application to the Program will also be considered Application Information.
With respect to each founder or advisory board member of an Applicant: full name, email address, telephone number, information related to his/her professional experience, his/her role with the Applicant, country in which he/she lives and his/her LinkedIn profile.
In addition, each Applicant is required to upload, as part of the Application Information, the resume of each of the founders and the “Investors Deck” of the Applicant which means we collect information relating to professional and employment history, qualifications, and similar biographic information.
To learn how we use your Personal Data please review Section 6 (“How we use Personal Data”).
In addition to the categories of Personal Data described above, we may also process Non-Personal Data through the Website in the following ways:
Log Data. Information that your browser automatically sends whenever you visit the Website.
Usage Information. We may collect information to help us understand how you and other visitors use our Website. We may also engage third parties (in particular, Google Analytics) to track and analyze users’ interests and behavior on the Website on our behalf.
We may use Personal Data for the following purposes (as may be updated from time to time):
To provide and operate the Website.
To monitor and analyze how you interact with the Website.
To maintain and improve the Content and functionality of the Website.
To provide notices relating to the application process.
To better understand your needs, both on an aggregated and individualized basis, to further develop, customize and improve the Website.
To communicate with you.
To create aggregated statistical data and other aggregated and/or inferred Non-Personal Data, which we or our Service Providers may use to provide and improve our Website.
To administer the Program.
If you submit an application to the Program, we will use your Application Information only for the purpose of evaluating your application and for the purposes of administering the Program. When we use and share your Application Information for such evaluation purposes, we will use reasonable efforts to ensure that those evaluators shall treat your Application Information confidentially; however, we do not want you to, and you should not, include any confidential or proprietary information in your Application Information. Please note that any information included in your application will be deemed not to be confidential or proprietary.
After the application process has ended, we may retain your application and the information contained therein.
We may use the contact details you provided under the “Contact Us” to respond to any requests and contact you when necessary.
This table outlines each website-related processing activity in greater detail and provides information on the categories of information collected for each activity as well as the legal basis of processing for each of these activities, if and to the extent the data processing is subject to GDPR.
To provide and operate the Website.
|Purpose and categories of data||Legal Basis||Citation|
|Processing Application Information. We shall process the Application Information you submit for the purpose of evaluating your application.||We collect and process your Personal Data included in the Application Information for our legitimate business interests to evaluate and respond to your application and administer the Program.||Articles 6(1)(a) and 6(1)(f) of the GDPR|
|Website Analytics and Tracking.||In cases where we collect this information automatically, we collect and process this information for our legitimate business interests.||Article 6(1)(f) of the GDPR|
|To Run and Maintain the Website. We use this information to secure the Website, network systems, and other assets. This may include information concerning your IP Address, resources you have accessed, and similar information.||We collect this information automatically, for our legitimate business interests to run, maintain, and secure our website.||Article 6(1)(f) of the GDPR|
We may share your Personal Data with vendors, service providers and other third parties, including providers of hosting services, cloud services, email newsletter services, and web analytics services (collectively “Service Providers”), if necessary to fulfill the purposes for collecting the information, to conduct technical maintenance of the Website, to protect rights and safety, to respond to appropriate requests of legitimate government authorities, or where required by applicable laws, court orders, or government regulations and, where needed for corporate audits or to investigate or respond to a complaint or security threat.
Any Personal Data you provide to us through your use of the Website may be transferred to or stored in a geographic region that imposes different privacy obligations than your country of origin. This means that your Personal Data may be sent to a country with less restrictive data protection laws than your own. Any such transfer will be conducted in compliance with applicable law.
If your Personal Data is covered by the GDPR: For transfers of Personal Data to a third country outside the European Union (EU), European Economic Area (EEA) or in absence of an adequacy decision of StarFinder, we establish the contracts containing the EU Standard Contractual Clauses, which according to the EU Commission decision of 04 June 2021 (EU 2021/914), constitute appropriate and suitable safeguards to ensure compliance with GDPR.
You may have certain rights regarding our use and processing of your Personal Data. Please note that when you ask us to exercise any of your rights under this policy or applicable law, we may ask you to provide us with certain credentials to make sure that you are who you claim you are.
Your Rights If Your Personal Data is Covered by the GDPR. If your Personal Data are covered by the GDPR, you have the following rights with respect to your Personal Data:
The right to request access to the Personal Data that we have about you.
The right to rectify or correct any Personal Data that is inaccurate or incomplete.
The right to request a copy of your Personal Data in electronic format so that you can transmit the data to third parties, or to request that we directly transfer your Personal Data to third party/ies.
The right to erasure of your Personal Data when it is no longer needed for the purposes for which you provided it, as well as the right to restrict the processing of your Personal Data to certain limited purposes where erasure is not possible.
To exercise any of these rights, please contact us (please refer to “Contact Us” section below).
Please note that erasure or restriction of processing is only possible if and to the extent that the processing of Personal Data is based on your consent or our legitimate interests. If data processing is based on consent, note that you have the right to withdraw your consent at any time, but that the withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal. In the event of an erasure request, we may retain a copy of your Personal Data for our record-keeping purposes and to avoid entering your personal data in our systems after your request.
In the event that you believe or have the impression that our data processing does not comply with the GDPR, you are entitled to lodge a complaint with the responsible supervisory authority.
We take the safeguarding of Personal and Non-Personal Data very seriously and use reasonable steps to protect Personal Data we access or receive through this Website from loss, theft, damage or unauthorized disclosure, use, alteration, or destruction. Nevertheless, we make no guarantee as to the security of your Personal Data and disclaims, to the fullest extent permitted by law, all liability and damages caused by loss, misuse, and unauthorized access, disclosure, alteration, or destruction. We recommend that you take any available precautions to protect Personal Data you submit on this Website. Please note that you submit an application and provide us with Application Information, at your own risk.
The length of time in which we will store your Personal Data will differ depending on the purpose for which we have collected and are processing your Personal Data. In most cases, we will keep the Personal Data for three (3) years following our last interaction with you. We may, however, maintain your Personal Data for a longer period in order to protect ourselves from any potential disputes and/or if we are required by law.
Please note that except as required by applicable law, we reserve the right to securely delete your Personal Data or restrict access to it for any reason and at any time, with or without notice to you.
The Website is not meant to be used by or for persons under 18, as such, we do not knowingly collect any Personal Data on the Website from anyone under the age of 18 without the prior, verifiable consent of a parent or guardian. Such parent or guardian may have the right, upon request, to view the information provided by the minor and require that it be deleted. Moreover, all minors should seek their parent’s or guardian’s permission prior to using or disclosing any Personal Data on the Website.