Privacy policy

Controller

The controller for data processing on this website within the meaning of the GDPR is:

G8Way Ventures GmbH
Apollogasse 4/1
1070 Vienna, Austria
info@calmar.vc

The controller is the entity that decides on the purposes and means of processing personal data. Full company details are in the imprint.

What this website does not do

• No cookies, no local storage, no session storage.
• No analytics, no tracking pixels, no advertising or conversion tools.
• No third-party scripts, no embedded videos, no social media plug-ins.
• Fonts are served from our own servers, so no font provider sees your visit.
• No profiling and no automated decision-making.

This is why the site has no cookie banner: there is nothing to consent to.

Hosting and server log files

This website is hosted by Vercel Inc., United States (privacy policy). When you open a page, the hosting provider automatically records technical information that your browser transmits: the page requested, the time of the request, the browser type and version, the operating system, the referrer URL and the IP address.

This data is needed to deliver the website and to keep it secure and stable. It is processed on the basis of our legitimate interest in an error-free and secure presentation of our website (Art. 6(1)(f) GDPR). It is not merged with other data and not used to identify you.

Membership application form

The application form on the membership pages is the only place where you give us personal data. We process what you enter there: your name, your email address, an optional website link, how you came in touch with Calmar (and, if you were recommended, the name you give us), the membership or intended use you select and, on the startups page, an optional pitch deck.

We use this data solely to review your application and to reply to you. The legal basis is Art. 6(1)(b) GDPR, as the processing takes place at your request and ahead of a possible contract; where no contract is initiated, we rely on our legitimate interest in answering enquiries addressed to us (Art. 6(1)(f) GDPR).

Providing the data is voluntary, but without a name and an email address we cannot process or answer an application.

Who receives the data

An application is passed to three recipients, and to no one else:

FormSubmit

delivers the form to our mailbox by email (formsubmit.co).

Slack

Salesforce, Inc., United States — a copy of the application appears in our internal channel so we can respond quickly (privacy policy).

Vercel Blob

stores a pitch deck, if you attach one, under a link that cannot be guessed and is shared only with the Calmar team (Vercel Inc., United States).

Two of these providers are based in the United States, so your data is transferred there. We do not sell your data, and we do not pass it on for advertising.

How long we keep it

We keep an application for as long as we need it to decide on it and to maintain the contact that follows from it. After that it is deleted, unless statutory retention periods require us to keep it longer.

Contacting us by email

If you write to us at info@calmar.vc or any other address of ours, we process your message and the data it contains in order to answer it — on the basis of Art. 6(1)(b) GDPR if your enquiry relates to a contract, otherwise on the basis of our legitimate interest in answering it (Art. 6(1)(f) GDPR). We keep the correspondence until it has served its purpose and statutory retention periods have expired.

Your rights

Under the GDPR you have the right, at any time and free of charge, to:

• ask what data we hold about you, where it came from and who received it;
• have incorrect data corrected and your data erased;
• have the processing of your data restricted;
• receive your data in a common, machine-readable format;
• object to processing that we base on our legitimate interest;
• withdraw consent you have given, with effect for the future.

Write to info@calmar.vc and we will act on it.

You also have the right to lodge a complaint with a supervisory authority. The competent authority for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, dsb@dsb.gv.at.

Encryption

This site is served over TLS throughout, so what you send us through the form is encrypted in transit. You can recognise it by the https://in the address bar. Please note that email itself is not an encrypted medium.