Privacy Policy

Last updated: 17 March 2026

Fairin.eu is operated by Sherpas Durden LLC, based in Boston (MA), USA. We are committed to protecting the personal data of visitors and waitlist members in full accordance with the General Data Protection Regulation (GDPR) and applicable Spanish and European data protection law.

1. Data Controller

The data controller responsible for your personal data is:

Sherpas Durden LLC
Boston, USA
Email: privacy@fairin.eu

2. What Personal Data We Collect

When you join our early access waitlist, we collect:

Full name
Business email address
A description of your biggest challenge (free-text field)

We do not collect payment details, sensitive personal data (as defined in Article 9 GDPR), or any data from minors under the age of 16.

We may also automatically collect limited technical data when you visit our website, including your IP address, browser type, and pages visited, for security and analytics purposes.

3. Legal Basis for Processing

We process your personal data on the following legal bases under Article 6 GDPR:

Consent (Art. 6(1)(a)): By submitting the waitlist form, you give us your express consent to contact you about Fairin.eu’s early access programme.
Legitimate interests (Art. 6(1)(f)): For basic website security, fraud prevention, and anonymous analytics that do not override your fundamental rights.

You have the right to withdraw your consent at any time (see Section 7).

4. How We Use Your Personal Data

We use the data collected exclusively for the following purposes:

To contact you personally regarding your place in the early access programme
To assess whether Fairin.eu is a suitable fit for your business needs
To send you relevant updates about Fairin.eu’s launch and EU AI Act compliance deadlines — only where you have consented
To improve our service offering based on the challenges you describe

We will never sell, rent, or share your personal data with third parties for marketing purposes.

5. Data Storage and International Transfers

All personal data submitted via this website is stored on infrastructure located within the European Union. We do not transfer your data to third countries outside the EEA.

We use European-based technology providers, including Hetzner (Germany) for hosting. Any sub-processors we engage are bound by GDPR-compliant data processing agreements.

6. Data Retention

Waitlist data is retained until Fairin.eu’s early access programme concludes, or until you withdraw your consent — whichever is earlier.
Customer data (once a service relationship begins) will be retained in line with the terms of our service agreement and applicable legal obligations.
Technical/log data is retained for a maximum of 90 days.

Once data is no longer needed, it is securely deleted or anonymised.

7. Your Rights Under the GDPR

As a data subject, you have the following rights:

Right	Description
Access (Art. 15)	Request a copy of the personal data we hold about you
Rectification (Art. 16)	Ask us to correct inaccurate or incomplete data
Erasure (Art. 17)	Request deletion of your data (“right to be forgotten”)
Restriction (Art. 18)	Ask us to restrict processing in certain circumstances
Portability (Art. 20)	Request your data in a structured, machine-readable format
Object (Art. 21)	Object to processing based on legitimate interests
Withdraw consent	Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact us at privacy@fairin.eu. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish supervisory authority:

Agencia Española de Protección de Datos (AEPD)
Website: www.aepd.es
Telephone: +34 912 663 517

8. Cookies and Analytics

We distinguish between:

Strictly necessary cookies: Required for the website to function. No consent required.
Analytics cookies: Activated only with your explicit consent via our cookie banner.

You can manage or withdraw your cookie consent at any time through your browser settings or our cookie preference panel.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encrypted connections (HTTPS/TLS), access controls, and regular security reviews.

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the AEPD within 72 hours and, where required, notify you directly.

10. Third-Party Links

Our website may contain links to external websites. This Privacy Policy does not apply to those third-party sites. We encourage you to review the privacy policies of any external sites you visit.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the “Last updated” date and, where appropriate, by email notification.

12. Contact Us

Email: privacy@fairin.eu
Post: Fairin.eu, Barcelona, Spain