DATA PROTECTION DECLARATION
FOR THE USE OF OUR WEBSITE

According to Art. 13 and 14 of Regulation (EU) 2016/679 (General Data Protection Regulation "GDPR"), the controller must inform the data subject about the processing of personal data. With this document we inform you about the personal data that we process from you when you visit our website www.onsight.vc.

1. definitions

To make this privacy policy easier to understand, you will find a brief explanation of the terms used below.

1.1 Personal data ("data") is all data that contains information about the personal or factual circumstances of natural persons, such as name, address, email address, telephone number, date of birth, age, gender, social security number, video recordings, photos, etc. Data of legal entities are not subject to the provisions of the GDPR.

1.2 Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1.3 The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.4 Processor is a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

1.5 Recipient is a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

2. person responsible for data processing / our contact details

If you have any further questions, please do not hesitate to contact us, as the controller responsible for the data processing described herein, using the following contact details:

Onsight Ventures Management GmbH
Ing.-Etzel-Straße 17, 6020 Innsbruck
Phone: +43 660 65 00 228
E-mail: investment@onsight.vc

3. purposes and legal basis of the processing

3.1 When you visit our website, we process the following data from you for the following purposes on the basis of the following legal bases:

4th receiver

4.1 We regularly use service providers for the operation of our website, who may also have access to the personal data obtained by us as a result of your use of our website in accordance with our instructions in order to be able to provide the commissioned services.

4.2 We will only transfer your data to third parties if you have given your express consent to this in accordance with Art. 6 para. 1 lit. a GDPR, if this is legally permissible or necessary in accordance with Art. 6 para. 1 lit. b GDPR to fulfill a contractual relationship with you, or if we are legally obliged to do so in accordance with Art. 6 para. 1 lit. c GDPR, or if the transfer is necessary in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests (including the assertion, exercise or defense of legal claims) and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data. to assert, exercise or defend legal claims) and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data.

5. storage duration‍

5.1 In principle, data is only stored for as long as is necessary due to statutory retention obligations. In addition, data may be stored if this is necessary to enforce or defend against third-party claims. Important storage periods can be found below:

6. Services from Google

6.1 General

6.1.1 The provider of the following services is Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Ireland. You can find Google's privacy policy here.

6.1.2 However, some services (such as Google Search or Google Maps) are provided by or transmitted to the following company: Google LLC, 1600 Amphitheatre Pkwy, Mountain View, California 94043-1351, USA Google LLC is based in a third country. Google LLC is entered in the list so that the data transfer to the USA complies with data protection regulations in accordance with Art. 45 GDPR. Further information on the certification of Google LLC can be found here.

6.1.3 Some Google services use cookies. An overview of the cookies used, their purpose and storage duration can be found in the cookie section of this privacy policy. For the use of Google services and the setting of the necessary cookies, your consent within the meaning of Art. 6 para. 1 lit. a GDPR or § 165 para. 3 TKG is obtained before processing. Your consent can be freely revoked at any time.

6.1.4 Prior consent is only not obtained for cookies if the sole purpose is to transmit a message or if this is absolutely necessary so that we can provide you with a service that you have expressly requested.

6.2 Google Analytics 4

6.2.1 Google Analytics is a service for the collection, compilation and evaluation of data on the behavior of visitors to websites. Google uses the data and information obtained to analyze the use of our website, among other things.

6.2.2 By setting the cookie, Google and we are enabled to analyze the use of our website. This cookie causes your internet browser to transmit data to Google for the purpose of online analysis. As part of this technical process, Google gains knowledge of the data subject, the origin of visitors and clicks in order to compile statistics, determine personal interests and enable commission settlements.

6.2.3 Google Analytics 4 does not store IP addresses of visitors to our website. However, Analytics provides rough geographic location data by deriving the following metadata from IP addresses: City (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based counterparts). The IP address data is used exclusively to derive geolocation data and is then immediately discarded. It is not logged, is not accessible and is not used for any other purpose.

6.2.4 In addition, we have configured Google Analytics 4 in accordance with data protection regulations so that Google Signals data is deactivated and no detailed location and device data is collected. Google Analytics 4 data has not been shared with other Google services, such as Google Ads.

6.2.5 User and event data are stored for a period of 3 months if no new activity takes place within this period. If a new activity takes place within this period, the storage period begins anew.

6.2.6 Further information on Google Analytics 4 can be found here.

6.3 Google Maps

6.3.1 On this website, we use Google Maps to visually display geographical information. When Google Maps is used, Google also collects, processes and uses data about the use of the Maps functions by visitors to the website.

6.3.2 The use of Google Maps and the information obtained via Google Maps is subject to the Google Terms of Use https://policies.google.com/terms?gl=DE&hl=de and the Terms and Conditions for Google Maps https://www.google.com/intl/de_de/help/terms_maps.html.

7th Iubenda

7.1 We use Iubenda, a cookie consent management tool, on our website. The service provider is the Italian company iubenda s.r.l., Via San Raffaele, 1 - 20121 Milan, Italy.

7.2 You can find out more about the data processed through the use of Iubenda here.

8. cookies

8.1 Cookies are text files that are stored on your end device in order to recognize it. Cookies may contain information about the use of our offers and services. For cookies, due to the judgment of the ECJ Planet49 GmbHconsent is obtained even if the cookies are not personal.

8.2 Some of the cookies used are only stored until you close our website (session cookies), whereas certain cookies are stored for a longer period of time and you can be recognized (persistent cookies). Some cookies are absolutely necessary for the website to function (essential cookies), others record visits and the origin of the visitor and measure this data without the cookies being able to establish a link to your person (performance cookies). Certain cookies are used for marketing purposes (marketing cookies).

8.3 If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the user experience.

8.4 You can select which cookies you want to allow via the cookie declaration when you visit the app for the first time. Your consent is required for marketing cookies. If you wish to withdraw your consent or change your cookie settings, you can make this change directly in your browser.

9. Newsletter

9.1 Our processor for sending newsletters is Sendinblue GmbH§§ ("Brevo"), Köpenicker Straße 126, 10179 Berlin, Germany. You can find Brevo's privacy policy here. We have concluded a data processing agreement with Brevo.

9.2 If you subscribe to our e-mail newsletter, we will regularly send you information about our offers and consulting services, event invitations and other advertising. Your e-mail address is mandatory for receiving the newsletter. The provision of further data is voluntary and will be used to address you personally.

9.3 We use the double opt-in procedure to register for the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed to us that you consent to receiving the newsletter. We will therefore send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on a corresponding link.

9.4 By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date.

9.5 You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending us a corresponding message. Once you have unsubscribed, your e-mail address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

10. Legal Instruction

10.1 Right to information‍

You have the right to request confirmation as to whether personal data is being processed; if this is the case, you have a right to information about this personal data. The following information is included: the purposes of the processing; the categories of personal data; the recipients or categories of recipients; where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning you or to object to such processing; the existence of the right to lodge a complaint with a supervisory authority; any available information as to the source of the data; the existence of automated decision-making, including profiling.

10.2 Right to rectification

You have the right to obtain from the controller the rectification of inaccurate personal data and the completion of incomplete personal data.

10.3 Right to erasure

You have the right to obtain from the controller the erasure of personal data without undue delay where one of the following grounds applies: The personal data are no longer necessary in relation to the purposes for which they were collected. You withdraw your consent on which the processing was based and there is no other legal basis for the processing. You object to the processing (Art. 21 (1) GDPR) and there are no legitimate grounds for the processing or you object to the processing pursuant to Art. 21 (2) GDPR. The personal data was processed unlawfully. The personal data must be erased for compliance with a legal obligation. The personal data have been collected in relation to the offer of information society services referred to in Article 8(1). The right to erasure does not exist to the extent that processing is necessary for exercising the right of freedom of expression and information; for compliance with a legal obligation; for the performance of a task carried out in the public interest; for reasons of public interest in the area of public health; for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes; for the establishment, exercise or defense of legal claims.

10.4 Right to restriction of processing

You have the right to obtain restriction of processing where one of the following applies: the accuracy of the personal data is contested, for a period enabling the controller to verify the accuracy of the personal data; the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead; the controller no longer needs the personal data, but they are required by you for the establishment, exercise or defense of legal claims; you have objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override yours.
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest.

10.5 Right to data portability

You have the right to receive the personal data that you have provided to a controller in a structured, commonly used and machine-readable format and you have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent or on a contract and the processing is carried out by automated means.
In exercising your right to data portability, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

10.6 Right of objection

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.

10.7 Right to withdraw consent

You have the right to withdraw consent based on Art. 6 (1) (a) or Art. 9 (2) (a) at any time without affecting the lawfulness of processing before its withdrawal.

10.8 Right of appeal

You have the right to lodge a complaint with the Austrian Data Protection Authority, Barichgasse 40-42, 1030 Vienna, T.: 00431521522569, E.: dsb@gsb.gv.at, if you are of the opinion that the processing violates the applicable data protection law.

11 Other information

11.1 The provision of personal data is partly required by law or necessary for the conclusion of a contract. In principle, you are not obliged to provide the data. If you do not provide the data, it is not possible to conclude a contract.

11.2 There is no automated decision-making including profiling in accordance with Article 22 (1) and (4).

‍

‍