Privacy Policy
1. Who we are (the controller)
Ventura Global SRL (“Ventura”, “we”, “us”) is the controller of the personal data described in this policy.
2. Scope
This policy explains how we handle the personal data of visitors to venturafounder.com (the “Website”) and of people who contact us or apply for our services. When we operate the assistant service for a client, we process that client’s and their contacts’ data on the client’s behalf as a processor; that processing is governed by the Data Processing Agreement annexed to that client’s service contract, not by this policy.
3. What we collect
- When you visit the Website: basic technical data your browser sends — IP address, browser/device type, pages viewed, and date/time — recorded in server logs by our hosting provider to deliver and secure the site.
- When you apply for access or contact us: your name, email address, and the content of your message (what you’d like taken off your plate). If we correspond further, we keep that correspondence.
- We do not use analytics or tracking cookies (see section 7).
We collect only what you provide or what is technically necessary. We do not buy personal data or build marketing profiles.
4. Why we use it, and our legal basis
- To respond to your enquiry or application and scope a possible engagement — legal basis: steps taken at your request prior to entering a contract, and our legitimate interest in responding to business enquiries (Art. 6(1)(b) and (f) GDPR).
- To operate, maintain and secure the Website — our legitimate interest in a functioning, secure site (Art. 6(1)(f)).
- To comply with legal obligations (e.g. accounting, responding to lawful requests) — Art. 6(1)(c).
Where we rely on legitimate interest, we have weighed it against your rights; you may object (section 9).
5. Who we share it with
We share personal data only with service providers who process it on our behalf under contract, and only as needed:
- Website hosting — Cloudflare, Inc., which serves the Website and runs the serverless function that receives your form submission, and processes basic technical and log data (including IP addresses) through its global content-delivery network.
- Application email delivery — Resend, which sends your “Apply for access” submission (name, email and message) to us by email.
- Email — our email provider, which we use to correspond with you.
We do not sell personal data or share it for others’ marketing. We may disclose data where required by law. (Clients receive a Data Processing Agreement as an annex to their service contract, listing the providers involved in delivering the assistant service. It is available to clients on request.)
Ventura connects to your Google Calendar to read and manage your events, and — if you choose — creates and manages a Google Sheets & Docs workspace in your Drive for your tasks, notes, and decisions. It can only access the files it creates for you, nothing else in your Drive. Ventura’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. International transfers
Where a provider processes personal data outside the European Economic Area, we rely on appropriate safeguards — principally the European Commission’s Standard Contractual Clauses — to protect it. You can ask us for details of the safeguards in place.
7. Cookies
The Website currently uses only strictly necessary cookies (if any) and no analytics, advertising, or tracking cookies. Because of this, we do not display a consent banner. If we introduce analytics or other non-essential cookies in future, we will update this policy and obtain your consent where required.
8. How long we keep it
We keep enquiry and application data for as long as needed to handle your request and, if we do not work together, for up to 12 months afterwards, then delete it — unless a longer period is required by law (e.g. accounting records). Server logs are kept for 30 days.
9. Your rights
Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and — where we rely on consent — to withdraw consent at any time. To exercise any of these, email contact@venturafounder.com.
You also have the right to lodge a complaint with the Romanian supervisory authority: the National Supervisory Authority for Personal Data Processing (ANSPDCP) — B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest; anspdcp@dataprotection.ro; www.dataprotection.ro.
10. Security
We protect personal data with appropriate technical and organizational measures, including encryption of credentials at rest, access controls, and hosting within the European Union.
11. Changes
We may update this policy; the version published here applies, with the “last updated” date shown above.
12. Contact
Questions or requests about your data: contact@venturafounder.com.