Legal

Privacy policy

Privacy and Data Protection Information

Pursuant to the GDPR and the German privacy and data protection legislation, Venista Ventures (Imprint) hereby explains its current Privacy and Data Protection Policies.

If you would like to get any further information about these policies, or if you think we may have personal information about you that is relevant in terms of data protection, please contact our external data protection officer Mr. Sascha Kremer at privacy@venista.com.

General Information

Venista Ventures treats the protection of your personal data with high priority and vows to fully comply with the applicable legislation and directives as set forth by the European Union and the Federal Republic of Germany. This Privacy and Data Protection Information explains why and how accessing our website www.venista-ventures.com becomes relevant in terms of personal data processing, storage and use, and we also indicate how this applies to other websites linking to our website. This document further indicates what we do to protect your personal data when you are using our website.

Personal Data

Personal Data allow for identification of natural persons. Name, address, email, and similar information qualify as personal data. Accessing and using our website is possible without sharing fully or in part your personal information with us or any other third party.

If you decide to use our contact fields or use the email links to submit information on our website, we will receive personal information, which is the information that you share in our contact fields or by sending us an email. Your decision to submit this information is understood as an intrinsic part of contacting us, for we wouldn’t be able to get back to you without your personal information. If you contact us through this website, you will be in control of the information that you submit and decide to share.

Hosting and server logs

This website consists of static pages and is operated on a server of Amazon Web Services (AWS) in its data centre in Ireland (region eu-west-1). The connection is encrypted via HTTPS.

When you open a page, your browser transmits technically necessary data to the server, in particular your IP address, the date and time of the request, the requested address, the page you came from, and your browser and operating system. This data is processed only to deliver the pages to you. Requests are not stored in log files. Only in the event of a technical fault can an error message containing your IP address be written to the server's system log; it is deleted automatically after 14 days at the latest.

The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6(1)(f) GDPR). We have a data processing agreement with AWS. Where data may be transferred to the USA in this context, this is based on AWS's certification under the EU-US Data Privacy Framework and, in addition, on the European Commission's Standard Contractual Clauses.

Processing personal data from this website

If you choose to contact us, we will process your personal data only to answer your request. We will receive your submitted information by email and may forward this information internally to the staff member in charge of the topic you are contacting us about. We inform you that we store information according to the legal requirements, e.g. if taxation or penal law puts this obligation on us.

Forwarding of personal information to third parties

We will not forward your personal information to third parties unless this is relevant to answering your request or if legally permitted or required. If we forward personal data to third parties, this will be handled according to the legal requirements for this process. The data that we share will only be the minimal data needed to achieve the target for which we are contacting the third party.

Your right to information and to delete personal data

If you would like to understand which of your personal data we may have stored or if you would like to understand how this data is being processed in our company, please contact us. We will share this information free of charge and in the timeliest possible manner. You can also receive an electronic report from us. If you ask us to review, change or delete personal data belonging to you, we will immediately do so unless legal requirements prohibit the same.

Cookies

This website does not set any cookies itself and does not store any information in your browser. We do not use analytics, tracking or advertising services. The pages do not load content from third-party servers; fonts and images are hosted on our own server.

The only exception is our contact page: there HubSpot loads the form in an embedded frame and may set technically necessary cookies. Details are given in the section "Contact form (HubSpot)".

Social plugins and LinkedIn

This website does not use so-called social plugins, i.e. no scripts that establish a direct connection with social networks. We do not pass on any of your data to social networks.

We link to our company page and the profiles of our managing directors on LinkedIn. These are plain links. Only when you click such a link do you leave our website and open LinkedIn, where LinkedIn's privacy policy applies. Our website does not transmit any personal data in the process.

Contact form (HubSpot)

On our contact page we embed a form provided by HubSpot (HubSpot Inc., data centre in the EU). When the contact page is opened, the form is loaded from HubSpot servers and your IP address is transmitted to HubSpot. The details you enter (name, company, email address, message) are processed to handle your enquiry (Art. 6 (1) (b) GDPR) and stored in our CRM system at HubSpot. A data processing agreement is in place with HubSpot.

Pitch deck submission (Airtable)

Founders can introduce their startup to us via a form provided by Airtable (Formagrid, Inc., San Francisco, USA). The form is not embedded in our website. Only when you click "Submit your pitch deck" does the Airtable page open and data is transmitted to Airtable.

The form asks for details about your startup and about you: startup name, short description, pitch deck as a file or link, location, founding year, website, sector, stage, funding situation, your name, your LinkedIn profile and your email address. We process this information to review your submission and to get in touch with you (Art. 6(1)(b) GDPR). We keep it for as long as it is needed for the review and a possible collaboration.

Airtable stores the data on servers in the USA. We have concluded a data processing agreement with Airtable that includes the European Commission's Standard Contractual Clauses.

Changes to the Data Protection Policy

We reserve the right to change our Data Protection Policy, especially to adapt it to new legal requirements or to keep it up-to-date with technical developments and new situations. Please note that this Data Protection Policy is the most current one. Please use it to get the valid and current information about the applicable policy for your visit on this website.