Privacy Policy

valorise.ventures ("we," "us," or "our") operates the platform located at https://valorise.ventures (the "Website"). We act as a Data Controller under the EU General Data Protection Regulation (GDPR) regarding the personal data processed through our Website.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our Website, apply to our platform, or communicate with us.

1. Information We Collect and How We Use It

We process personal data only when we have a valid legal basis under Article 6 of the GDPR. The specific categories, purposes, and legal grounds are detailed below:

A. Technical Usage & Infrastructure Data

Data Types: IP addresses, browser types, device operating systems, referring URLs, access timestamps, and page interaction metrics.
Purpose: To ensure stable website performance, deliver heavy media assets (such as video backgrounds and optimized imagery), and maintain cybersecurity.
Legal Basis: Legitimate Interest (Art. 6(1)(f) GDPR). It is technically necessary to process this data to provide a functional, optimized, and secure online platform.

B. Contact & Venture Communication (Inquiries, Startups, Talent)

Data Types: Full name, business email address, company/institutional affiliation, investment pitch data, resume/CV details, and any free-text messages you submit.
Purpose: To evaluate venture opportunities, process candidate applications for our founder formation pipelines, and respond to platform inquiries.
Legal Basis: Pre-contractual steps or performance of a contract (Art. 6(1)(b) GDPR) if you are seeking to partner or join our programs; Legitimate Interest (Art. 6(1)(f) GDPR) for general B2B professional networking.

C. Platform Updates & Newsletters

Data Types: Email address and subscription preferences.
Purpose: To send you early updates, ecosystem insights, and notifications about our deep tech fund activities.
Legal Basis: Explicit Consent (Art. 6(1)(a) GDPR). We utilize a Double Opt-In mechanism to verify your email ownership before sending promotional content. You may withdraw consent at any time.

2. Cookies and Tracking Technologies

In compliance with the ePrivacy Directive, our Website distinguishes between strictly necessary and non-essential tracking mechanisms:

Strictly Necessary Cookies: These are required for fundamental website functionality, asset rendering, and security. They do not require your prior consent.
Analytics and Marketing Cookies (Optional): We may use third-party analytics to understand how visitors engage with our platform. These scripts are blocked by default and will only execute if you provide explicit consent via our cookie banner.

You can manage or revoke your tracking preferences at any time by clicking the "Cookie Settings" link in our footer.

3. Data Sharing and International Transfers

As a pan-European deep tech platform, your data may be shared with our network affiliates, institutional partners, or specific SaaS subprocessors (such as cloud hosting, CRM tools, or communication infrastructure).

Whenever data is transferred outside the European Economic Area (EEA), we ensure a structurally equivalent level of protection by enforcing:

Adequacy Decisions: Transfers to countries recognized by the European Commission as providing adequate data protection.
Standard Contractual Clauses (SCCs): Standardized legal contracts approved by the European Commission, combined with robust technical and organizational security measures.

4. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected:

Infrastructural/Log Data: Automatically overwritten or anonymized within 30 days.
Inquiries & Pitch Submissions: Retained for the duration of our evaluation process and up to 3 years following the last professional interaction, unless a longer legal or contractual retention period applies.
Newsletter Subscriptions: Retained until you click "Unsubscribe" or formally withdraw consent.

5. Your Data Subject Rights Under GDPR

If you are located within the EEA, you possess the following actionable rights regarding your personal data:

Art. 15 GDPR (Right of Access): Request a copy of the personal data we hold about you.
Art. 16 GDPR (Right to Rectification): Correct inaccurate or incomplete data.
Art. 17 GDPR (Right to Erasure): Request the deletion of your data ("Right to be Forgotten").
Art. 18 GDPR (Right to Restriction): Ask us to temporarily halt processing your data.
Art. 20 GDPR (Right to Data Portability): Receive your data in a structured, machine-readable format.
Art. 21 GDPR (Right to Object): Object to data processing based on our legitimate interests.
Art. 7(3) GDPR (Right to Withdraw Consent): Revoke marketing or tracking consent at any time.

To exercise any of these rights, please contact our Data Protection Compliance Team at: privacy@valorise.ventures.

You also have the right to lodge a formal complaint with a European Data Protection Authority (DPA) if you believe our data processing violates applicable regulations.

6. Security Architecture

We deploy rigorous technical and organizational security controls to minimize risks. This includes end-to-end transport encryption (HTTPS/TLS), isolated cloud environments, strict access controls, and regular architectural reviews to safeguard our deep tech investment ecosystem from unauthorized access or leakage.