1. General

This privacy policy serves to provide information about the type, scope and purpose
of the collection and use of your personal data.
The processing of personal data takes place in accordance with the General Data
Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG).

​

2. Controller

The controller within the meaning of the GDPR is:

​

Blue Forest Management GmbH
Konstanzer Straße 10
10707 Berlin
info (at) blueforest.ventures

​

1 General information on Data Processing
This privacy statement describes the collection and use of personal data in
connection with the use of our website in accordance with the requirements of the
General Data Protection Regulation (“GDPR”). We inform you in the following about
the processing of your personal data within the scope of our
website www.blueforest.ventures (“website”). Processing activities that are not
covered by this privacy statement may be supplemented by further privacy
statements that shall apply separately.

​

1.1 Controller
The responsible controller for the processing of personal data on this website within
the meaning of the EU General Data Protection Regulation (GDPR) is:
Blue Forest Management GmbH
Konstanzer Straße 10
10707 Berlin
info (at) blueforest.ventures
We inform you in the following about the processing of your personal data within the
scope of our website www.matterwave.vc (“website”).

​

1.2 Datenschutzbeauftragter
Our appointed data protection officer is Moisés Gené. He can be reached via postal
mail at:

​

Blue Forest Management GmbH
– Data Protection Officer –
Blue Forest Management GmbH
Konstanzer Straße 10
10707 Berlin

​

by e-mail at:
moises(at)blueforest.ventures

​

1.3 Data Subject Rights and Supervisory Authority
You may exercise the following rights:

• Right to information about your data stored by us and its processing (Art. 15

• GDPR),

• Right to rectification of inaccurate personal data (Art. 16 GDPR),

• Right to have your data stored by us deleted (Art. 17 GDPR),

• Right to restriction of data processing if we are not yet allowed to delete your

• data due to legal obligations (Art. 18 GDPR),

• Right to portability of data if you have consented to the data processing or

• have concluded a contract with us (Art. 20 GDPR),

• Right to object to the processing of your data by us (Art. 21 GDPR)

​

To exercise your rights, you can contact us by email (see above).

For identification purposes, please provide the following information:

• First and last name

• Company

​​

The processing of your request and the identification of your person is based on Art.

6 para 1 lit. c) GDPR.
You can file a complaint at any time pursuant to Art. 77 GDPR in conjunction with §
19 German Federal Data Protection Act (BDSG) with a supervisory authority, e.g.

with the competent supervisory authority of the federal state in which you live or with
the authority responsible for us.
Under the following link you will find all supervisory authorities for Germany for non-
public bodies: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-
node.html

​

1.4 Processing of Data, Purpose and Legal Basis
We process your personal data in accordance with the provisions of the GDPR and
the BDSG.
The processing of personal data is based on the legal basis of Art. 6 para 1 GDPR.
Personal data is initially processed by us for the fulfilment of contractual obligations
or pre-contractual measures according to Art. 6 para 1 lit. b) GDPR.
Furthermore, we process your data based on your consent in accordance with Art. 6
para 1 lit. a) GDPR for certain purposes, in particular:

 

• to the newsletter dispatch with regular offers

• to receive special information and offers from us

• to support website usage processes with reminder functions and live chats

• for the personalized use of the website

• for analytical purposes and in order to optimize our services

Consent given can be revoked at any time. The revocation of consent is only
effective for the future and does not affect the lawfulness of the data processed until
the revocation.
In addition, we process your data to protect our legitimate interests according to Art.
6 para 1 1 f) GDPR,

 

• to ensure the security and stability of our website,

• to contact you, as far as a permanent business relationship with you or your

employer exists or is intended (business contacts).
In addition, we will process your data in accordance with Art. 6 Para 1 lit. c) GDPR if
we are legally obliged to do so, for example to comply with our obligations to keep
records under commercial or tax law.

​

1.5 Storage Duration

We will take all reasonable steps to ensure that your personal data is processed only
for the period required by the purpose of processing in each case. If the storage
period is not specified below, your personal data will be deleted or blocked as soon
as the purpose or legal basis for storage ceases to apply. Personal data will not be
deleted if storage is required by law (e.g. § 257 HGB, 147 AO). Furthermore, we may
store your personal data until the expiry of the statutory limitation periods (usually 3
years; in individual cases, however, up to 10 years or longer), if this is necessary for
the assertion, exercise or defence of legal claims.

​

1.6 Data Security
To protect the security of your data during transmission, we use technical and
organizational security measures, in particular the encryption of our website to
prevent unauthorized access by third parties. Our security measures are
continuously improved and adapted according to technological developments.

​

1.7 Transmission to Service Providers
We use service providers for the provision of our offers. These service providers act
only according to our instructions and are contractually obligated to comply with the
provisions of Art. 28 GDPR. If not further specified below, the service providers are
contracted for the following services:

 

• Fulfilment of our contractual obligations

• Provision and maintenance of IT systems, tools and related services

• Handling our customer service and managing requests

• Measuring website performance

 

1.8 Data Transfer outside EU/EEA
Unless otherwise stated below, your data will not be transferred to a third country
outside the European Union. Your personal data will only be transferred to third
countries if the requirements of Art. 44 – 49 GDPR are met, in particular standard
contractual clauses, binding corporate rules and adequacy decisions of the
Commission.

​

1.9 No Obligation to provide Data/no Profiling

There is no legal or contractual obligation to provide us with data. However, some
services can only be provided if the required data is provided by you. Your personal
data will not be used for profiling or automated individual decision making.

​

2 Processing Activities
Our website offers different areas with different functionalities for the visitor, which
are described in more detail below.

​

2.1 Server Protocols
Nature and purpose of data processing:
When you access our website, information of a general nature is automatically
collected. This information, known as server log files, includes:

• IP address

• Name of the access provider

• Browser type, browser software version and browser language

• Operating system

• Date and time of access

• Access content

• Amount of data transferred

• Access status (successful transmission/error)

• Web page(s) to which the access was redirected

• Visited websites

The processing is carried out for the following purposes:

• Ensuring a trouble-free connection to the website

• Ensuring a smooth use of our website

• Assessment of system security and stability

Legal basis:
The processing is carried out pursuant to Art. 6 para 1 lit. f GDPR, based on our
legitimate interest to host the website and to improve and monitor the security,
stability, and functionality of the website.
Recipients:
Recipients of the data are technical service providers who are responsible for the
operation and maintenance of our website. As processors, the service providers are
obliged to process the data only within the scope of our instructions.

​

Storage duration:
The server log files are deleted after no more than 6 months.

​

2.2 Newsletter
Nature and purpose of data processing:
When registering for our newsletter, you have to provide an email address and your
name. In our newsletter we inform you about our services and products described on
our website. We also store the IP address, the device name, the mail provider as
well as the user’s first and last name and the date of registration. We also analyze
how users consume our newsletter.
Legal basis:
The data processing for sending and analysing our newsletters as described above
is based on your consent (Art. 6 para 1 a GDPR).
Storage duration:
We will process your personal information until you unsubscribe, and your consent is
revoked.
Revocation of consent:
If you do not want to receive any newsletters by us in the future and/or wish to object
to the analysis of your data, please use the “unsubscribe” link in each newsletter.

​

2.3 Contact us
Nature and purpose of the processing:
If you send us an email or contact us via another communication channel, your
name, email address and other information (e.g. telephone number) you provide are
processed by us in order to work on your inquiry or to be able to contact you. We
process the required data to stay in contact with you and schedule (video-) calls and
meetings.
Legal basis:
The data is processed to carry out pre-contractual measures (Art. 6 para 1 lit. b
GDPR) or due to legitimate interests (Art. 6 para 1 lit. f GDPR) to provide you with
efficient communication.
Recipient:
The recipients of the data are processors on behalf. As processors, the service
providers are obliged to process the data only within the scope of our instructions.

2.4 Pitch your Company
Nature and purpose of data processing:
When you use our contact form, the following data is collected in the process.
Depending on the content of the provided data this data may or may not constitute
personal data:

• Name

• Role in the company

• E-mail address

• Telephone number

• Name and legal form of the company

• Place of the company headquarters

• Date of the company foundation

• Business area of the company

• Indication area of the company

• Innovation of the company

• Amount of capital required

• The added value promised by bridgeheads

• Pitch deck and investment proposal of the company

• Website of the company

• Employee and team data

Legal basis:
This data is processed based on initiating a or communicating under an existing
business relationship (legal basis Art. 6 para 1 lit. b) GDPR).
Recipients:
Recipient is the company that processes the data on our behalf
Storage duration:
This information will be deleted anytime upon your request or latest three years after
we have received the information.

2.5 Job Applications
Nature and purpose of data processing:
On our website you have the possibility to apply for open positions. In order to

accept and evaluate your application we will need to process the following personal

information:

• Name

• E-Mail Address

• Information contained in cover letter and CV

• e.g. Address, Age, Sex, Picture, Career, Prior Occupations, Grades etc.

Legal basis:
The data is processed on the basis of pre-contractual measures (Art. 6 Para 1 lit. b
GDPR).
Retention Period:
In the event that your application was unsuccessful, your application data is deleted
after 6 months.

​

2.6 Consent Management
Nature and purpose of data processing:
Our website uses cookies for various processing activities for which your consent is
required. In order to obtain and store such consent, we use a so-called “cookie
banner”. As part of this, a cookie – a small text file – is set on your terminal device to
register your selection/consent. For this purpose, we process your IP address,
among other things.
Legal basis:
The processing is based on the legal obligation to document compliance with the
provisions of the GDPR, Art. 6 para 1 c) GDPR.
Retention Period:
Recipient is the provider of the cookie banner. The banner is operated by Borlabs
GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

​

2.7 Website Analytics
Nature and purpose of data processing:
This website uses technology based on cookies that helps us better understand how
the website is used. We do this by compiling reports about activity on the site that do
not identify specific individuals. For this purpose, your IP address is transmitted to a
service provider using analysis cookies. For further information, please see the
section “Cookies”.

Legal basis:
The processing is carried out with your consent according to Art. 6 para 1 a) GDPR.

​

3 Cookies
Google Analytics
This website uses Google Analytics, a web analytics service provided by Google
Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. (“Google”). Google
Analytics uses cookies to help the website analyze how users use the site. The
information generated by the cookie about your use of this website is usually
transmitted to a Google server in Ireland and stored there. In principle, IP addresses
on our website are automatically anonymized by Google by means of shortening.
Only in exceptional cases are IP addresses transmitted to Google servers in the
USA and anonymized there by means of shortening. In this case the data is
transferred based on standard contractual clauses. On behalf of the operator of this
website, Google will use this information for the purpose of evaluating your use of
the website, compiling reports on website activity and providing other services
relating to website activity and internet usage to the website operator. The IP
address transmitted by your browser as part of Google Analytics will not be merged
with other data from Google. You may refuse the use of cookies by selecting the
appropriate settings on your browser, however, please note that if you do this you
may not be able to use the full functionality of this website. You can also prevent the
collection of data generated by the cookie and related to your use of the website
(including your IP address) to Google and the processing of this data by Google by
downloading and installing the browser plugin available at the following
link: https://tools.google.com/dlpage/gaoptout?hl=en
As an alternative to the browser add-on described above or when visiting our
Website on mobile devices, you can prevent tracking by Google Analytics on our
pages by clicking on this link: Opt-out of Google Analytics tracking. This will install an
opt-out cookie on your device and prevent the collection of data by Google Analytics
for this website and for this browser in the future, as long as the cookie remains
installed in your browser.
You can change the Cookie settings here.

​

4 Changes to the Privacy Statement

We reserve the right to adapt this data protection declaration so that it always
complies with the current legal requirements or to make changes to our offers in the
data protection declaration, e.g. when introducing new services. The current version
of the data protection declaration applies in each case.