Privacy Policy
Including GDPR Article 14 Transparency Notice
Last updated: June 2026
1. Data Controller
The data controller is TenderHawk AI, the company operating this website at tenderhawk.nanocorp.app.
For any privacy-related requests, please use the contact form on our website. We respond to all privacy requests within 30 days.
2. Personal Data We Process
We process the following categories of personal data:
- From the free opportunity scan form: Full name, company name, work email address, sector (optional), country (optional), and a free-text message (optional).
- From the book-a-call form: Full name, work email address, company name, sector (optional), and preferred time slot.
- From the bid scorecard tool: Company name and work email address, together with the scorecard answers you submit.
- Tender contact data from public sources: Name, job title, and organisation of procurement officers or contracting authorities, sourced exclusively from official public procurement registries (TED — Tenders Electronic Daily, BOAMP, and national EU procurement portals). This is public data published by the issuing authorities themselves.
We do not collect phone numbers, personal social media profiles, special-category data (health, religion, political opinion, etc.), or any data about individuals acting in a personal (non-business) capacity.
3. Data Sources (Article 14 Notice)
Where we process personal data that you did not provide directly to us, it comes from:
- TED (Tenders Electronic Daily) — the official EU-wide public procurement journal, published by the Publications Office of the European Union.
- BOAMP — the official French public procurement bulletin (Bulletin Officiel des Annonces des Marchés Publics).
- National EU procurement portals — official portals operated by EU member states (e.g. TenderNed, e-Vergabe, etc.).
All tender data processed by TenderHawk AI is sourced from these official, public registries. We do not purchase, scrape, or resell personal contact databases.
4. Purpose and Legal Basis
| Purpose | Legal Basis (GDPR Art. 6) |
|---|---|
| Responding to free opportunity scan requests | Legitimate interest (Art. 6(1)(f)) — fulfilling the service you requested |
| Scheduling and conducting the free 15-min call | Legitimate interest (Art. 6(1)(f)) — fulfilling the booking you requested |
| Delivering paid services (Monitoring Pack, Bid/No-Bid Brief, Bid Response Sprint) | Contract performance (Art. 6(1)(b)) |
| Sending tender monitoring alerts to subscribers | Contract performance (Art. 6(1)(b)) |
| Internal analytics and service improvement | Legitimate interest (Art. 6(1)(f)) |
5. Data Retention
- Prospect and lead data (from the free scan form, book-a-call form, or scorecard): retained for a maximum of 24 months from the date of submission, unless you become a client.
- Client data: retained for the duration of the contract, plus a maximum of 36 months thereafter for legal and accounting purposes.
- Tender registry data (sourced from public procurement portals): retained for operational purposes while the service is active; regularly refreshed with live portal data.
6. Your Data Subject Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access (Art. 15): Request a copy of the personal data we hold about you.
- Right to rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to erasure (Art. 17): Request deletion of your personal data ('right to be forgotten'), subject to legal retention obligations.
- Right to object (Art. 21): Object to processing based on legitimate interest. We will stop unless we have compelling legitimate grounds.
- Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to lodge a complaint: You have the right to lodge a complaint with your national data protection authority (e.g. CNIL in France, APD in Belgium, BfDI in Germany).
To exercise any of these rights, please use the contact form on our website. We will respond within 30 days.
7. Data Sharing and Third Parties
We do not sell your personal data. We may share data with trusted infrastructure providers (hosting, email delivery) strictly to operate the service. Any such providers are bound by data processing agreements and are not permitted to use your data for their own purposes.
8. Special-Category Data
TenderHawk AI does not collect or process any special-category personal data as defined in GDPR Article 9 (health data, racial or ethnic origin, political opinions, religious beliefs, biometric data, etc.).
9. Changes to This Policy
We may update this policy from time to time. Material changes will be indicated by an updated "Last updated" date at the top of this page.