Privacy Policy

This Privacy Policy describes the principles governing the processing of personal data and the use of cookies in connection with the website https://venturepi.com.

1. Data Controller

The controller of personal data processed in connection with the website is:

Logi Sp. z o.o.
Himalajska 1/1
Poland

Contact details:

e-mail: office@venturepi.com
privacy contact: mu@venturepi.com
marketing contact: marketing@venturepi.com

2. Scope of Personal Data Processed

The Controller may process personal data provided by users through the contact form, by e-mail, by telephone, during meetings or in connection with the provision of services.

Depending on the nature of the contact or cooperation, the following data may be processed in particular:

  • name and surname,
  • e-mail address,
  • telephone number,
  • company name and business details,
  • job title or professional role,
  • content of correspondence,
  • information concerning a startup, scaleup, investment project or company,
  • information contained in pitch decks, business plans, financial materials or other documents voluntarily provided by the user,
  • information concerning investment criteria, financing needs or business development plans,
  • technical information relating to the use of the website.

3. Purposes and Legal Bases for Processing

Personal data may be processed for the following purposes:

  • responding to enquiries submitted through the contact form, by e-mail or by telephone – on the basis of Article 6(1)(f) GDPR, i.e. the Controller's legitimate interest in communicating with persons interested in its services,
  • preparing proposals and discussing the scope of potential cooperation – on the basis of Article 6(1)(b) GDPR,
  • taking steps prior to entering into a contract – on the basis of Article 6(1)(b) GDPR,
  • concluding and performing contracts – on the basis of Article 6(1)(b) GDPR,
  • providing investment, advisory, business development, investment screening, pitch coaching or market-entry services – on the basis of Article 6(1)(b) GDPR,
  • complying with accounting, tax and other legal obligations – on the basis of Article 6(1)(c) GDPR,
  • establishing, exercising or defending legal claims – on the basis of Article 6(1)(f) GDPR,
  • website traffic analysis and statistical measurement through Google services – on the basis of Article 6(1)(a) GDPR where consent is required,
  • sending electronic marketing communications where the recipient has provided the legally required consent – on the basis of Article 6(1)(a) GDPR and applicable electronic communications legislation.

4. Contact Form

The website provides a contact form which may be used to send an enquiry to the Controller.

The form may collect in particular:

  • name,
  • e-mail address,
  • telephone number,
  • message content.

Providing personal data is voluntary. However, data marked as required is necessary to submit the form and receive a response.

Data submitted through the form is processed for the purpose of handling the enquiry, providing information about the Controller's services and, where applicable, discussing potential cooperation.

5. Investment and Business Advisory Services

VenturePI provides services addressed to investors, startups, scaleups, businesses and institutions, including investment screening, investment management, pitch coaching, business advisory and market-entry support.

In connection with such services, the Controller may process information concerning:

  • founders, management team members and company representatives,
  • business activities and the development stage of a company,
  • financial information voluntarily submitted for assessment,
  • investment criteria and financing requirements,
  • business plans, pitch materials and investment documentation,
  • market-entry plans and commercial objectives,
  • other information necessary to perform the agreed service.

Such data is processed only to the extent necessary to evaluate a project, prepare recommendations, provide advisory services or perform the relevant agreement.

6. Documents Submitted for Investment Assessment

Users, founders or business representatives may voluntarily provide documents such as pitch decks, financial projections, business plans or other materials relating to an investment opportunity.

Such documents may contain personal data relating to founders, employees, business partners or other persons.

The person providing such materials should ensure that they are authorised to disclose any personal data contained in them and should avoid submitting information that is not necessary for the requested service.

7. E-mail and Telephone Communication

When a user contacts the Controller by e-mail, the Controller processes the sender's e-mail address and the information contained in the message.

When a user contacts the Controller by telephone, the Controller may process the telephone number and information provided during the conversation where necessary to handle the enquiry or provide the requested service.

8. Marketing Communications

Where the Controller sends newsletters, commercial information or other direct marketing communications by electronic means, such communications are sent only where an appropriate legal basis exists and, where required, after obtaining the recipient's consent.

Consent to receive marketing communications may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.

9. Google Site Kit

The website uses the Site Kit by Google plugin, which enables the integration and management of selected Google services within the WordPress website.

Depending on the services enabled by the Controller, Site Kit may be used to connect the website with services such as:

  • Google Analytics,
  • Google Search Console,
  • Google PageSpeed Insights,
  • Google Tag Manager,
  • Google AdSense or other Google services, where applicable.

The installation of Site Kit itself does not necessarily mean that all of the above services are active. Only services actually configured and enabled by the Controller are used.

Some Google services may process technical information concerning the user's device and use of the website, including:

  • IP address,
  • browser and device information,
  • operating system information,
  • pages visited,
  • date and time of visits,
  • referring source,
  • interactions with the website,
  • technical identifiers and cookie information.

Where the use of a Google service requires consent under applicable law, the service and associated non-essential technologies should be activated only after the user has provided the appropriate consent.

10. Google Analytics

The website may use Google Analytics, a web analytics service provided by Google, in order to understand how users interact with the website and to obtain statistical information concerning website traffic.

Google Analytics may process information including:

  • information about pages visited,
  • approximate location based on technical information,
  • device and browser information,
  • traffic source,
  • session information,
  • interactions with website content,
  • technical identifiers.

Where Google Analytics uses cookies or similar technologies that are not strictly necessary for the operation of the website, they are used only after the user has given the required consent.

The legal basis for processing personal data for analytics purposes is Article 6(1)(a) GDPR where processing is based on the user's consent.

The user may withdraw consent to analytics cookies at any time through the cookie consent mechanism available on the website, without affecting the lawfulness of processing carried out before consent was withdrawn.

11. Google Search Console and PageSpeed Insights

The Controller may use Google Search Console to monitor the technical visibility of the website in Google search results and Google PageSpeed Insights to assess website performance.

These tools are primarily used by the Controller for technical, SEO and website performance analysis.

The use of these administrative tools does not necessarily involve placing analytics or advertising cookies on the devices of ordinary website visitors.

12. Cookies

The website uses cookies and similar technologies where necessary for the proper operation of the website and, subject to user consent where required, for analytics purposes.

Cookies may be divided into the following categories:

  • Necessary cookies – required for the proper and secure operation of the website and its basic functions,
  • Analytics cookies – used to measure website traffic and understand how visitors use the website, including through Google Analytics where enabled and consented to,
  • Other optional cookies – used only if additional services requiring such technologies are implemented in the future and the required consent has been obtained.

Necessary cookies may be used without additional consent where permitted by applicable law.

Analytics and other non-essential cookies are activated only after the user has provided the required consent.

Users may also manage cookies through their browser settings. Blocking necessary cookies may affect the correct operation of certain website functions.

13. Cookie Consent

Where the website uses optional analytics or other non-essential technologies, the user is provided with the possibility to make an appropriate choice regarding their use.

Consent should be freely given, specific, informed and unambiguous.

The user may withdraw or modify consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

14. Data Processed by Google

Google services used on the website may be provided by Google Ireland Limited and other Google group entities.

Depending on the service used, Google may process data in accordance with its own privacy rules and may act as an independent controller or service provider, depending on the circumstances.

Data processed through Google services may be transferred outside the European Economic Area where permitted by applicable law and subject to appropriate safeguards required by Chapter V of the GDPR.

15. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

In particular:

  • data relating to enquiries is retained for the time necessary to respond and conclude the correspondence and, where justified, for the period necessary to protect against potential claims,
  • data relating to proposals and negotiations is retained for the duration of discussions and for an appropriate period after they end,
  • data relating to contracts is retained for the duration of the contractual relationship and subsequently for the period resulting from applicable legal requirements and limitation periods,
  • accounting and tax documentation is retained for the period required by law,
  • marketing data is retained until consent is withdrawn or an objection is made, unless another legal basis permits further retention,
  • analytics data is retained in accordance with the retention settings configured in the relevant Google service.

16. Recipients of Personal Data

Personal data may be disclosed or entrusted to entities supporting the Controller only to the extent necessary for the operation of the website and performance of services.

Recipients may include in particular:

  • hosting and server infrastructure providers,
  • e-mail service providers,
  • IT and website maintenance providers,
  • accounting, legal and auditing service providers,
  • banks and payment service providers where relevant,
  • authorised employees, consultants and business partners involved in providing the requested service,
  • Google Ireland Limited and relevant Google group entities in connection with Google services enabled on the website,
  • public authorities where disclosure is required by law.

17. Hosting and Server Logs

The hosting infrastructure may automatically record technical information concerning access to the website.

Such information may include:

  • IP address,
  • date and time of the connection,
  • browser and operating system information,
  • requested page or resource,
  • information relating to errors and security incidents.

Server logs are processed for technical, administrative, diagnostic and security purposes.

18. Social Media and External Services

The website may contain links to external websites and social media services, including LinkedIn.

When a user follows an external link, further processing of personal data is governed by the privacy rules of the relevant external service provider.

The presence of an external link does not in itself mean that tracking technologies of the relevant external provider are active on the VenturePI website.

19. International Data Transfers

Some technology, communication or business service providers used by the Controller may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, such transfer is carried out on the basis of a mechanism permitted under applicable data protection law, such as an adequacy decision, Standard Contractual Clauses or another mechanism permitted under Chapter V of the GDPR.

20. Rights of Data Subjects

Subject to the conditions provided by the GDPR, individuals whose personal data is processed have the right to:

  • access their personal data,
  • rectify inaccurate personal data,
  • request deletion of personal data,
  • request restriction of processing,
  • receive and transfer personal data where the right to data portability applies,
  • object to processing based on the Controller's legitimate interests,
  • withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

Requests concerning personal data may be sent to: mu@venturepi.com or office@venturepi.com.

21. Right to Lodge a Complaint

If a person believes that their personal data is being processed unlawfully, they have the right to lodge a complaint with the competent supervisory authority.

For a Controller established in Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

22. Automated Decision-Making and Profiling

The Controller does not use personal data submitted through the contact form to make decisions based solely on automated processing that produce legal effects or similarly significantly affect the individual.

Website analytics used for statistical purposes does not constitute automated decision-making producing legal or similarly significant effects for users.

23. Data Security

The Controller applies appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Access to personal data is limited to persons and entities for whom such access is necessary to perform their duties or provide services to the Controller.

24. Changes to this Privacy Policy

This Privacy Policy may be updated where the operation of the website, the scope of services, the technologies used or applicable legal requirements change.

The current version of the Privacy Policy is published on the website https://venturepi.com.