Privacy notice

1. Controller

The controller responsible for data processing on this website is:

Company

Noctua Science Ventures GmbH

Address

Nordbergstraße 1/7/1, 1090 Vienna, Austria

Email

office@noctua.vc

For any question about this notice or your personal data, contact us at office@noctua.vc.

2. What we process and why

Pitch submissions

When you submit a pitch through our form, we process the data you provide — your name, email address, company or project name, affiliated institution, sector, stage, your one-line description, any deck link or uploaded file, and any message. We use this solely to review your pitch, decide whether it is a fit for the fund, and communicate with you about it.

• Legal basis: the processing is necessary to take steps at your request prior to entering into a potential business relationship and is in our legitimate interest in evaluating investment opportunities (Art. 6(1)(b) and (f) GDPR). Where the form asks for your explicit consent, we also rely on Art. 6(1)(a) GDPR.
• Retention: we keep pitch submissions for as long as needed to evaluate the opportunity and maintain a record of our dealflow, and delete or anonymise them when they are no longer required.

Contacting us by email

If you email us, we process your message and contact details to handle your request, on the basis of our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

Server log files

Our hosting provider automatically collects standard technical data (such as IP address, browser type, referring page, and time of access) that your browser transmits. This is necessary to deliver the website securely and reliably and to analyse and prevent misuse, based on our legitimate interest (Art. 6(1)(f) GDPR).

3. Hosting & processors

This website is hosted on Cloudflare Pages (Cloudflare, Inc.). Cloudflare processes technical connection data on our behalf as a processor and provides content delivery and security services. Where we use an email delivery provider to receive pitch notifications, and object storage to receive uploaded decks, these providers act as processors under appropriate data-processing agreements. Where a transfer of data outside the EU/EEA occurs, it is safeguarded by EU Standard Contractual Clauses or an adequacy decision.

4. Cookies & analytics

This website is designed to run without tracking or advertising cookies and does not set non-essential cookies by default. If we introduce privacy-friendly, aggregated analytics in future, we will update this notice and, where required, request your consent first.

5. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15);
• have inaccurate data corrected (Art. 16);
• have your data erased (Art. 17);
• restrict processing (Art. 18);
• data portability (Art. 20);
• object to processing based on legitimate interests (Art. 21); and
• withdraw any consent at any time, without affecting prior processing (Art. 7(3)).

To exercise any of these rights, contact office@noctua.vc. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Österreichische Datenschutzbehörde, dsb.gv.at).

6. Data security

We use appropriate technical and organisational measures, including TLS encryption in transit, to protect your data against unauthorised access, loss or misuse.

7. Changes to this notice

We may update this privacy notice to reflect changes to our processing or legal requirements. The current version always applies and is published on this page.

This notice is a clear, good-faith starting point. Please have it reviewed against your final tooling (email provider, storage, any analytics) and signed off by qualified counsel before launch — see the README checklist.

← Back to imprint