Effective date: June 2026 (V1)
Failing Forward Hub (hereinafter referred to interchangeably as "the Project", "Failing Forward" or "We") is a project owned and operated by two co-founders set forth below. This Privacy Policy explains the personal data we process and the rights you have under the General Data Protection Regulation (EU) 2016/679 ("GDPR").
Joint Controllers: each Co-Founder, as outlined in Failing Forward — Lisbon
Official Email: failingforwardhub@gmail.com
We may process the personal data you provide to us, such as your name, email address, message content, newsletter preferences, event or community registration details, and any information you submit through website forms.
We may also process technical data generated when you use the website, such as IP address, browser and device information, pages visited, timestamps, cookie preferences, and basic usage data.
These are the categories of data we collect to manage your participation in the events:
Please do not send us special category data unless we specifically request it and identify a lawful basis for processing it.
We process personal data only where one of the lawful bases set out in Article 6(1) GDPR applies. The lawful basis depends on the purpose of processing. In general, we may process your personal information on grounds of one or more of the following legal bases:
Purpose: site performance and security.
Data: IP, device info, pages viewed.
Lawful Basis: Legitimate Interests.
Purpose: respond to enquiries and requests.
Data: name, email, message.
Lawful Basis: Legitimate interest.
Purpose, Data and Lawful Basis: as described in the event registration form ("Participant Enrollment & Consent Form") set up for each event.
Purpose: send updates aligned with selected motivations.
Data: email, motivation category.
Lawful Basis: consent.
Purpose: reminders, safety notices, logistics.
Data: email, attendance status.
Lawful Basis: Legitimate Interests.
Purpose: improve events and community experience.
Data: aggregated or anonymized participation data.
Lawful Basis: Legitimate Interests.
Purpose: ensure website functionality and detect errors.
Data: server logs, IP, error logs.
Lawful Basis: Legitimate Interests.
Purpose: general updates.
Lawful Basis: Consent.
Purpose: publish voluntary contributions.
Lawful Basis: Consent.
Lawful Basis: processing is necessary for compliance with a legal obligation to which the Failing Forward is subject.
Where we rely on consent, you may withdraw it at any time. Where we rely on legitimate interests, you may object to the processing as described in the "Your Rights" section.
We may share personal data with service providers that help us run our website and related services, such as hosting, email, forms, analytics, security, event, donations, or community tools.
Further to the above, your data may be shared, pursuant to Section 3 above, in line with your selected motivations in the event registration form, and only to the extent strictly necessary:
We may also share personal data required by law, with public authorities, courts, professional advisers, or parties involved in protecting rights, security, or legal claims.
For clarity, no personal data is shared with third parties for marketing, profiling or independent activities.
If personal data is transferred outside the European Economic Area, we will use a lawful transfer mechanism, such as an adequacy decision, standard contractual clauses, or another permitted safeguard.
We keep personal data only for as long as necessary for the purposes above, unless a longer period is required by law. Retention depends on the type of data, the reason for processing, legal limitation periods, and security or record-keeping needs.
Under the GDPR, you have the right to be informed, access, rectify, erase, restrict processing, get a copy of your personal data, and object to certain processing activities. You may also withdraw consent where processing is based on consent.
We will respond to rights requests within the time required by the GDPR and may need to verify your identity to that end.
You also have the right to complain to a competent supervisory authority. Whereas Failing Forward is established in Portugal, the relevant DPA is Comissão Nacional de Proteção de Dados (CNPD).
We use appropriate technical and organizational measures to protect personal data, taking account of the risks involved. That said, no online service can be guaranteed to be completely secure.
We may use necessary cookies to make the website work. We use non-essential cookies, analytics, or similar technologies only where legally permitted and, where required, with your consent.
You can manage or withdraw cookie consent through the website's cookie tool, where available, or through your browser settings.
We use two GDPR-compliant sub-processors: Typeform, S.L. for registration and consent, and MailerLite UAB for website and communications. Both may involve international data transfers under their respective DPAs.
Voluntary donations (if any) are made at the end of the event and received directly by Failing Forward, using the method communicated during the event. Only the data that may appear in the donation is processed for reconciliation and fraud prevention.
For clarity, voluntary donations do not create a contract nor activate contractual necessity.
Failing Forward does not provide recruitment, selection, placement or labor intermediation services, or any activity regulated under the terms of Decree-Law No. 260/2009 of September 25th. For clarity, Failing Forward role is limited to providing context, curation, networking, ethical mediation and generation of business opportunities.
Failing Forward provides no warranties of employment, business opportunities or professional outcomes.
We may update this Privacy Policy from time to time.
The effective date above shows when it was last updated.
To ask questions or exercise your data subject rights, contact us at: failingforwardhub@gmail.com