Privacy Policy

1. General Information on Data Processing

This privacy statement describes the collection and use of personal data in connection with the use of our website in accordance with the requirements of the General Data Protection Regulation (“GDPR”). We inform you in the following about the processing of your personal data within the scope of our website www.blueforest.ventures (“website”). Processing activities that are not covered by this privacy statement may be supplemented by further privacy statements that shall apply separately.

1.1 Controller

The responsible controller for the processing of personal data on this website within the meaning of the EU General Data Protection Regulation (GDPR) is:

1.2 Data Protection Officer

Our appointed data protection officer is Moisés Gené. He can be reached via postal mail at:

by e-mail at: moises@blueforest.ventures

1.3 Data Subject Rights and Supervisory Authority

You may exercise the following rights:

• Right to information about your data stored by us and its processing (Art. 15 GDPR)
• Right to rectification of inaccurate personal data (Art. 16 GDPR)
• Right to have your data stored by us deleted (Art. 17 GDPR)
• Right to restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
• Right to portability of data if you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR)
• Right to object to the processing of your data by us (Art. 21 GDPR)

To exercise your rights, you can contact us by email (see above). For identification purposes, please provide your first and last name and your company.

The processing of your request and the identification of your person is based on Art. 6 para 1 lit. c) GDPR. You can file a complaint at any time pursuant to Art. 77 GDPR in conjunction with §19 German Federal Data Protection Act (BDSG) with a supervisory authority, e.g. with the competent supervisory authority of the federal state in which you live or with the authority responsible for us.

Under the following link you will find all supervisory authorities for Germany for non-public bodies: bfdi.bund.de

1.4 Processing of Data, Purpose and Legal Basis

We process your personal data in accordance with the provisions of the GDPR and the BDSG. The processing of personal data is based on the legal basis of Art. 6 para 1 GDPR. Personal data is initially processed by us for the fulfilment of contractual obligations or pre-contractual measures according to Art. 6 para 1 lit. b) GDPR. Furthermore, we process your data based on your consent in accordance with Art. 6 para 1 lit. a) GDPR for certain purposes, in particular:

• to the newsletter dispatch with regular offers
• to receive special information and offers from us
• to support website usage processes with reminder functions and live chats
• for the personalized use of the website
• for analytical purposes and in order to optimize our services

Consent given can be revoked at any time. The revocation of consent is only effective for the future and does not affect the lawfulness of the data processed until the revocation. In addition, we process your data to protect our legitimate interests according to Art. 6 para 1 lit. f) GDPR:

• to ensure the security and stability of our website,
• to contact you, as far as a permanent business relationship with you or your employer exists or is intended (business contacts).

In addition, we will process your data in accordance with Art. 6 para 1 lit. c) GDPR if we are legally obliged to do so, for example to comply with our obligations to keep records under commercial or tax law.

1.5 Storage Duration

We will take all reasonable steps to ensure that your personal data is processed only for the period required by the purpose of processing in each case. If the storage period is not specified below, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage ceases to apply. Personal data will not be deleted if storage is required by law (e.g. § 257 HGB, § 147 AO). Furthermore, we may store your personal data until the expiry of the statutory limitation periods (usually 3 years; in individual cases, however, up to 10 years or longer), if this is necessary for the assertion, exercise or defence of legal claims.

1.6 Data Security

To protect the security of your data during transmission, we use technical and organizational security measures, in particular the encryption of our website to prevent unauthorized access by third parties. Our security measures are continuously improved and adapted according to technological developments.

1.7 Transmission to Service Providers

We use service providers for the provision of our offers. These service providers act only according to our instructions and are contractually obligated to comply with the provisions of Art. 28 GDPR. If not further specified below, the service providers are contracted for the following services:

• Fulfilment of our contractual obligations
• Provision and maintenance of IT systems, tools and related services
• Handling our customer service and managing requests
• Measuring website performance

1.8 Data Transfer outside EU/EEA

Unless otherwise stated below, your data will not be transferred to a third country outside the European Union. Your personal data will only be transferred to third countries if the requirements of Art. 44 – 49 GDPR are met, in particular standard contractual clauses, binding corporate rules and adequacy decisions of the Commission.

1.9 No Obligation to provide Data / no Profiling

There is no legal or contractual obligation to provide us with data. However, some services can only be provided if the required data is provided by you. Your personal data will not be used for profiling or automated individual decision making.

2. Processing Activities

Our website offers different areas with different functionalities for the visitor, which are described in more detail below.

2.1 Server Protocols

When you access our website, information of a general nature is automatically collected. This information, known as server log files, includes:

• IP address
• Name of the access provider
• Browser type, browser software version and browser language
• Operating system
• Date and time of access
• Access content
• Amount of data transferred
• Access status (successful transmission/error)
• Web page(s) to which the access was redirected
• Visited websites

The processing is carried out for the following purposes:

• Ensuring a trouble-free connection to the website
• Ensuring a smooth use of our website
• Assessment of system security and stability

Legal basis: The processing is carried out pursuant to Art. 6 para 1 lit. f GDPR, based on our legitimate interest to host the website and to improve and monitor the security, stability, and functionality of the website. Recipients of the data are technical service providers who are responsible for the operation and maintenance of our website. As processors, the service providers are obliged to process the data only within the scope of our instructions.

Storage duration: The server log files are deleted after no more than 6 months.

2.2 Newsletter

When registering for our newsletter, you have to provide an email address and your name. In our newsletter we inform you about our services and products described on our website. We also store the IP address, the device name, the mail provider as well as the user’s first and last name and the date of registration. We also analyze how users consume our newsletter.

Legal basis: The data processing for sending and analysing our newsletters as described above is based on your consent (Art. 6 para 1 a GDPR).

Storage duration: We will process your personal information until you unsubscribe, and your consent is revoked.

Revocation of consent: If you do not want to receive any newsletters by us in the future and/or wish to object to the analysis of your data, please use the “unsubscribe” link in each newsletter.

2.3 Contact Us

If you send us an email or contact us via another communication channel, your name, email address and other information (e.g. telephone number) you provide are processed by us in order to work on your inquiry or to be able to contact you. We process the required data to stay in contact with you and schedule (video-) calls and meetings.

Legal basis: The data is processed to carry out pre-contractual measures (Art. 6 para 1 lit. b GDPR) or due to legitimate interests (Art. 6 para 1 lit. f GDPR) to provide you with efficient communication. The recipients of the data are processors on behalf. As processors, the service providers are obliged to process the data only within the scope of our instructions.

2.4 Pitch your Company

When you use our contact form, the following data is collected in the process. Depending on the content of the provided data this data may or may not constitute personal data:

• Name
• Role in the company
• E-mail address
• Telephone number
• Name and legal form of the company
• Place of the company headquarters
• Date of the company foundation
• Business area of the company
• Indication area of the company
• Innovation of the company
• Amount of capital required
• The added value promised by bridgeheads
• Pitch deck and investment proposal of the company
• Website of the company
• Employee and team data

Legal basis: This data is processed based on initiating or communicating under an existing business relationship (Art. 6 para 1 lit. b) GDPR). The recipient is the company that processes the data on our behalf.

Storage duration: This information will be deleted anytime upon your request or latest three years after we have received the information.

2.5 Job Applications

On our website you have the possibility to apply for open positions. In order to accept and evaluate your application we will need to process the following personal information:

• Name
• E-mail address
• Information contained in cover letter and CV (e.g. address, age, sex, picture, career, prior occupations, grades, etc.)

Legal basis: The data is processed on the basis of pre-contractual measures (Art. 6 para 1 lit. b GDPR).

Retention period: In the event that your application was unsuccessful, your application data is deleted after 6 months.

2.6 Consent Management

Our website uses cookies for various processing activities for which your consent is required. In order to obtain and store such consent, we use a so-called “cookie banner”. As part of this, a cookie — a small text file — is set on your terminal device to register your selection/consent. For this purpose, we process your IP address, among other things.

Legal basis: The processing is based on the legal obligation to document compliance with the provisions of the GDPR, Art. 6 para 1 c) GDPR. The recipient is the provider of the cookie banner. The banner is operated by Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

2.7 Website Analytics

This website uses technology based on cookies that helps us better understand how the website is used. We do this by compiling reports about activity on the site that do not identify specific individuals. For this purpose, your IP address is transmitted to a service provider using analysis cookies. For further information, please see the section “Cookies”. The processing is carried out with your consent according to Art. 6 para 1 a) GDPR.

3. Cookies

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in Ireland and stored there. In principle, IP addresses on our website are automatically anonymized by Google by means of shortening. Only in exceptional cases are IP addresses transmitted to Google servers in the USA and anonymized there by means of shortening. In this case the data is transferred based on standard contractual clauses.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: tools.google.com/dlpage/gaoptout

4. Changes to the Privacy Statement

We reserve the right to adapt this data protection declaration so that it always complies with the current legal requirements or to make changes to our offers in the data protection declaration, e.g. when introducing new services. The current version of the data protection declaration applies in each case.