shift^
Trusted networks begin with trusted data.

shift^ Founders Network — Privacy Policy (GDPR)

Last updated: 3 November 2025

Data Controller

Shift Group Ltd. (“shift^”)
Company Registration Number: 201424228
Legal Address: 1V Dimitar Manchev Str., 1407 Sofia, Bulgaria
Contact: office@shift.group

You can always check the latest version of all governing documents (Community Participation & Confidentiality Agreement, Privacy Policy (GDPR), Peer-Vetting Criteria, Code of Conduct, Manifesto) at: Membership Page

Our Philosophy

We protect founders’ privacy with the same integrity and purpose with which we build companies.

Quick Overview

In simple terms: we collect only the minimum data necessary to operate a trusted, founder-to-founder community — and will never resell it.

Summary

This Privacy Policy explains how shift^ protects and processes personal data of members, invited guests, and collaborators in the shift^ Founders Network — in line with EU General Data Protection Regulation (GDPR). We handle all data with discretion, respect, and purpose — never for unsolicited marketing.

1. Scope

This Policy applies to all members, invited guests, and collaborators participating in the shift^ Founders Network, both online and offline.

2. Our Commitment

At shift^, trust is foundational to how we operate. We collect and process only the information necessary to manage membership, organize events, and facilitate collaboration. Privacy, transparency, and accountability are core to how we build a principled entrepreneurial ecosystem.

3. Purpose

This Privacy Policy defines how personal data is collected, processed, stored, and shared within the shift^ Founders Network. All processing complies with Regulation (EU) 2016/679 (GDPR) and Bulgarian data-protection legislation.

4. Data Collected

4.1 From Invitation Forms (Tally)

4.2 From Community Participation (Viber and Events)

Providing personal data is voluntary, but certain details are necessary to enable participation in the community and its activities.

5. Legal Basis for Processing

6. Purpose of Processing

Personal data is used exclusively for legitimate and transparent operations, including to:

Personal data will not be used for purposes incompatible with this Policy without additional consent.

7. Information Sharing

shift^ does not sell, rent, or exchange personal data for advertising or marketing.

Data may be shared only as follows:

Recipients must use contact data responsibly and solely for legitimate professional purposes.

8. Data Processors and Third-Party Tools

9. Media and Visibility

Event photos and videos are processed under the legitimate interest of documenting and promoting community activities while respecting privacy.

Participation implies consent for limited visibility in community-related media:

Members may request not to appear by emailing office@shift.group. Members may also object at any time to the use of their image or name under legitimate interest, and such requests will be respected going forward.

10. Data Protection and Security

shift^ implements technical and organizational measures to secure personal data against unauthorized access, misuse, or loss. Access is restricted to authorized personnel under confidentiality obligations. We collect and retain only information necessary for community participation and communication. Despite all safeguards, no system can guarantee absolute security.

11. Data Retention

12. Rights of Data Subjects

Under GDPR, individuals may:

Members are responsible for ensuring the accuracy of their personal data and should promptly notify shift^ of any updates or corrections.

Requests: office@shift.group. Members may opt out of non-essential communications or social tagging any time.

13. Right to Withdraw or Decline Invitations

Participation is voluntary. Individuals may decline or withdraw from invitations at any time; data will be deleted upon request, subject to lawful retention requirements.

14. Data Minimization and Purpose Limitation

We collect only data necessary for membership administration and community engagement and use it solely for the purposes stated here.

15. Guests and Event Participants

Guests attending events or activities are subject to this Privacy Policy regarding event organization, data handling, and media publication.

16. Children and Age Restrictions

The shift^ Founders Network is intended for adults (18+). shift^ does not knowingly collect or process data from minors.

17. Automated Decision-Making

shift^ does not use automated decision-making or profiling regarding personal data.

18. International Data Transfers

shift^ operates primarily within the EU. Where data is processed by third-party tools outside the EU, Standard Contractual Clauses and other safeguards apply.

19. Third-Party Links

shift^ or its members may occasionally share links to external websites or resources. These operate under their own privacy policies, and shift^ bears no responsibility for their content, accuracy, or practices.

20. Supervisory Authority

Data subjects may lodge complaints with the Commission for Personal Data Protection (CPDP) in Bulgaria or their local EU supervisory authority.

21. Data Protection Officer and Contact

Shift Group Ltd. designates its Managing Director as responsible for data-protection compliance. A formal Data Protection Officer is not appointed, as shift^ does not meet regulatory thresholds.
All privacy inquiries: office@shift.group

22. Dispute Resolution and Jurisdiction

Questions or disputes relating to data protection will be handled in good faith and, where applicable, under the jurisdiction of the competent Bulgarian courts.

23. Policy Updates and Review

shift^ reviews this Privacy Policy regularly and updates it as necessary. Each new version supersedes all previous versions and takes effect upon publication at the link above. Continued participation constitutes acceptance of the latest version.

24. Language

This Privacy Policy is provided in English. If translated versions differ, the English version prevails.

25. Closing Statement

We believe in responsible innovation and ethical collaboration. Protecting privacy, integrity, and trust is not only a legal duty — it is part of how we build the future, together. Privacy protection is integral to shift^’s broader commitment to ethical, sustainable, and transparent entrepreneurship — because progress built on trust endures.

Related Documents