Privacy Policy

1. Who We Are

GroundSet is a brand operated by Brandmark Solutions SRL, a company registered in Romania (CUI 50541002, VAT RO47840381), with its registered office at 47 Vespasian, District 1, Bucharest, Romania.

We provide AI-powered GTM operator services for B2B scale-ups entering or operating in CEE markets. This policy explains how we collect, use, and protect personal data in connection with our website (groundset.eu) and service engagements.

2. Data We Collect

We collect and process the following categories of personal data:

• Contact data — name, email address, company name, job title, provided when you book a call or contact us directly.
• Communication data — content of emails, messages, or calls exchanged with us.
• Usage data — pages visited, time on site, referral source, collected via analytics tools (see Section 5).
• Engagement data — information provided during a service engagement, including CRM data, commercial information, and business context shared with us.

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR:

• Contractual necessity — to deliver services under a signed agreement.
• Legitimate interests — to respond to enquiries, manage business relationships, and improve our services.
• Consent — where you have explicitly opted in (e.g. marketing communications). You may withdraw consent at any time.
• Legal obligation — where required by applicable law (e.g. tax records).

4. How We Use Your Data

• To respond to discovery call requests and enquiries
• To deliver contracted GTM services
• To send service-related communications
• To improve our website and service offering
• To comply with legal and regulatory obligations

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

5. Third-Party Tools

We use the following third-party services which may process personal data on our behalf:

• Calendly — for booking discovery calls. Subject to Calendly's Privacy Policy.
• Google Analytics / Search Console — for website performance analysis. Data is anonymised where possible.
• LinkedIn — for company page management and outreach. Subject to LinkedIn's Privacy Policy.

All third-party processors are contractually bound to process data only as instructed and in compliance with GDPR.

6. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, or as required by law. Engagement-related data is retained for a maximum of 5 years after contract completion. Contact and enquiry data is retained for up to 2 years.

7. Your Rights

Under GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (where legally permissible)
• Object to or restrict certain processing
• Data portability — receive your data in a structured format
• Lodge a complaint with your national data protection authority

To exercise any of these rights, contact us at hello@groundset.eu. We will respond within 30 days.

8. International Transfers

Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA (e.g. via third-party tools), we ensure appropriate safeguards are in place, including Standard Contractual Clauses.

9. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via this page with an updated date. Continued use of our services after changes constitutes acceptance.