NCA – New Commercial Accelerator – Privacy and Cookies Policy
www.nca.vc (the ‘Website’) is operated by Next Commerce Accelerator GmbH, Am Sandtorkai 27, 20457 Hamburg, Germany (‘NCA’).
If you have any questions about the use of your personal data processed by us during the course of accessing our Website you can contact us using the following E-Mail: pr*****@*ca.vc or send us a letter.
Personal data within the meaning of this Privacy and Cookie Policy means any information relating to an identified or identifiable natural person (‘data subject’), whereas an identifiable natural person is one who may directly or be indirectly identified by using additional data according to Art. 4 n° 1 GDPR. For the purposes of the European General Data Protection Regulation effective 25 May 2018, we are the data controller and as such are legally responsible for keeping in compliance with its provisions as well as all pursuant national legislation. Before GDPR is effective, the references to the GDPR will be for your information, however, we will already comply with the respective requirements.
We reserve the right to change this privacy policy from time to time by changing it on the Website.
1. Personal data processed while accessing the Website
Our Website may be used without entering personal information. Different rules may apply to certain services on our site and are explained separately below. For the general use of our Website, our system needs to automatically process certain personal data. This data includes information about the type of browser and its version used for accessing the Website, the operation system of the used device, your internet service provider including the IP address used for access, date and time of your visit, Websites through which you have accessed our Website (referrer URL) as well as Websites that are accessed from our Website via hyperlink.
This is done for the purpose of protecting our and our users’ legitimate interests by ensuring the stability and security of the Site as well as for marketing and research purposes in accordance with Art. 6 (1) f GDPR. This data is stored separately from any other personal data you may provide as specified below in a pseudonymized fashion. In general, we will keep the processing of your personal data to a minimum as required for the purposes laid out herein and while doing so will comply with all applicable data protection provisions. We will erase your data when processing is no longer required for these purposes provided that we are under no legal obligation to retain your data. In any other case we will erase your personal data after a standard retention period of five years.
2. Personal Data Processed submitted through our application form
The purpose of our Website is to help your business idea grow. To that end, we ask you to provide us with the following personal information in addition to the specifics of your business idea by filling in the respective fields in the application form on our Website. This personal data includes your full name, company’s name, your Website, E-mail-address and phone number(s), and further information about your company’s founders’ personal background (’Application Information’).
We use the Application Information you provide to decide on your business idea’s eligibility for participation in our sponsorship program, and for presenting it to potential investors or business partners together with your contact information after you have been included in our program. In order to do so we will store all the Application Information you have provided us through the Website. After a standard retention period of six years upon inclusion into our sponsorship program, the Application Information will be deleted and/or anonymized so that it cannot be traced back to the applicant(s). We will, however, keep all non-personal Application Information in our database for the purpose of connecting your business with our partners and potential investors. In case of rejection of your application, all data you have provided to us will automatically be deleted two months after having notified you of the rejection.
The abovementioned use of your personal data as part of the Application Information is necessary for entering into and fulfilling a legal contract with you in accordance with Art. 6 (1) b GDPR. Provision of your personal data as specified in this section is a prerequisite for being considered for inclusion in our sponsorship program.
3. Personal data processed when using our Become a Partner contact form
If you want to become a partner of NCA’s business sponsorship program you may provide us with your required personal information via the ‘Become a Partner’ contact form on our Website. This information includes your full name, your company’s name, position within your company as well as your E-mail-address and phone number. Your information will be stored and processed for the purpose of facilitating contact with you and connecting with start-up businesses participating in our sponsorship program upon your request. We will store your information for a standard retention period of six years upon which it will be deleted.
The abovementioned use of your personal data submitted via the ‘Become a Partner’ contact form on our Website is necessary for entering into and fulfilling a legal contract with you in accordance with Art. 6 (1) b GDPR. Provision of your personal data as specified in this section is a prerequisite for being considered for becoming a partner in our sponsorship program.
4. Transfer of personal data processed in accordance with Sections 2 and 3
All personal data processed in accordance with Sections 2 and 3 will be transmitted and stored on cloud servers operated by Citrix Systems Incorporated and located in the U.S.A. Citrix Systems Incorporated has submitted itself to the rules of the Privacy Shield agreement between the EU and the U.S.A., thereby guaranteeing an adequate level of protection of your personal data in accordance with Art. 44 GDPR.
5. Personal data processed in connection with our Newsletter
Our Website offers you the opportunity to subscribe to our newsletter. To receive our newsletter, we require a valid E-mail-address as well as your express consent that you agree with its receipt and any processing of personal information in connection therewith. If you choose to subscribe to our newsletter, we will send you a confirmation E-Mail to the address you have provided on our Website. By checking the appropriate box when subscribing to our newsletter, you consent to our use of your personal data for the purpose of sending you the newsletter in accordance with Art. 6 (1) a GDPR as follows.
When subscribing to our newsletter, we will store your IP address as well as the date and time you subscribed for a standard retention period of two years. This serves to protect us in the event a third party improperly and without your knowledge makes use of your E-mail address to subscribe to our newsletter. This information will not be matched to any information that other components of our Website may process. You may cancel your subscription to the newsletter and revoke your consent to any processing of personal data connection therewith at any time. You will find additional details in the E-mail confirming your subscription as well as in each newsletter, including an unsubscribe hyperlink through which you can easily discontinue receipt of the newsletter.
We use MailChimp to deliver our newsletter to our subscribers. MailChimp is a service provided by The Rocket Science Group, LLC, 512 Means Street, Suite 404, Atlanta, GA 30318, USA. The data stored when you registered for the newsletter (E-mail-address, name, IP address, and time and date of registration) will be sent to a server operated by The Rocket Science Group LLC. The Rocket Science Group LLC have submitted itself to the rules of the Privacy Shield agreement between the EU and the U.S.A., thereby guaranteeing an adequate level of protection of your personal data in accordance with Art. 44 GDPR. Further information about the data protection offered by MailChimp can be found here.
Our newsletter also includes so-called web bugs that allow us to recognize if and when a newsletter has been opened and which links in the E-mail have been clicked by its recipient. This data is processed by us so that we can best align our newsletter to the wishes and interests of our subscribers. Accordingly, the personal data thus collected is used to send personalized newsletters to each recipient. Our use of the data processed in connection with the use of the web bugs is done in accordance with Art. 6 (1) f GDPR, and will be erased after a standard retention period of 2 years.
6. Cookies and third-party software
Our Website uses cookies. Cookies are small text files that are saved on your hard disk which can be allocated to your browser and deliver particular information about your use of our Website. They are useful for making internet devices more effective and more user-optimized. We will inform you about our Website’s use of cookies and other third-party software and ask for your permission in accordance with Art. 6 (1) a GDPR via a banner on our Website which will also refer you to this privacy policy.
A number of cookies we use last only for the duration of your web session and expire when you close your browser or exit the Site and are generally called transient or session cookies. These cookies are stored as session IDs whereby different requests sent by your browser are assigned to the common session until you close the browser or otherwise cancel the session. Other cookies are used to remember you when you return to the Site/Application and will remain for longer. These are generally called persistent cookies which will remain on your device after concluding the session. However, persistent cookies are automatically deleted after a specified period of time. You can adjust the retention period or manually delete cookies from your device via your browser settings at any time. Please be advised that if you disable cookies you may not be able to use our Website’s services to their full extent.
6.1 Google Analytics
Our Website uses Google Analytics. Google Analytics is a service from Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043. USA; ‘Google’) employing cookies that are saved on your computer, allowing Google to analyze your use of the Site. The information generated by the cookie is transferred to a Google server generally located in the USA and stored there. On our Website, IP anonymization is activated, so that the IP address of Google users within member states of the European Union or other contracting parties to the Agreement on the European Economic Area is effectively anonymized before being transferred, thus eliminating any possibility of personally identifying the user in question. In exceptional cases only the full IP address is transferred to a Google server in the USA and abbreviated there. Google uses this information on our behalf in order to analyze the use of the Website, to compile reports on the Website activities, and to provide other services relating to the use of the Site and Internet use for the Website operator. The IP address transferred from your browser through Google Analytics is not merged with other data by Google for profiling purposes. Further information on Google’s use of data can be here.
You can prevent the collection and subsequent transfer of any data (including the anonymized IP address) generated by the Google Analytics cookie relating to use of the Website by Google as well as the processing of this data altogether by Google by either downloading and installing the Browser Plugin available here. Alternatively, you can click here https://developers.google.com/analytics/devguides/collection/analyticsjs/user-opt-out.
6.2 Google Maps
We use Google Maps, a component of Google. Google sets a cookie in order to process the user configuration and data when the page with the integrated ‘Google Maps’ component is displayed. As a general rule, this cookie is not deleted by closing the browser, but rather expires after a certain time, as long as it is not previously manually deleted by you. If you do not agree with this processing of your data, you may choose to deactivate the Google Maps service and thereby prevent the transfer of data to Google. To do this, you must deactivate the JavaScript function in your browser. However, we would like to point out that in this case you will not be able to use “Google Maps” or at least only to a limited extent.
The use of “Google Maps” and the information obtained through “Google Maps” is according to Google’s Terms of Use as well as the additional Terms and Conditions for Google Maps.
6.3 Calendly
We use Calendly for this website, a scheduling and organization tool for finding appointments. The service provider is the American company Calendly LCC, 271 17th St NW, Ste 1000, Atlanta, Georgia, 30363, USA. Calendly also processes data in the USA, among other places. We would like to point out that according to the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. This may be accompanied by various risks to the legality and security of data processing. As a basis for data processing with recipients located in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular the USA) or a data transfer there, Calendly uses standard contractual clauses approved by the EU Commission (= Art. 46. para. 2 and 3 DSGVO). These clauses oblige Calendly to comply with the EU level of data protection when processing relevant data also outside the EU. These clauses are based on an implementing decision of the EU Commission. You can find the decision and the clauses, among others, here: https://germany.representation.ec.europa.eu/index_de
You can learn more about the data processed by using Calendly in the privacy policy at https://calendly.com/privacy.
7. Your rights
With regard to your personal data collected or processed in accordance with this policy you are legally entitled:
(a) to access all the personal information about you controlled by us. On request, we will provide you with a copy of this information free of charge. However, in cases of obviously unfounded and/or excessive requests we reserve the right to charge a reasonable fee taking into account the administrative costs of providing the information or taking the action requested;
(b) to rectify or erase your personal information where appropriate;
(c) to object to the processing of your personal data where such processing is based on our prevailing legitimate interests in accordance to Art 6 (1) f GDPR and to restrict the processing of your personal information whilst we investigate your concern;
(d) where the processing of your personal data is either based on your consent or necessary for the performance of a contract with you, to receive your personal information in a commonly used electronic format or ask we move the data in that format to another provider where your request relates to the data that you gave us directly and where technically possible (data portability);
(e) To withdraw your consent for individual or all processing of your personal data where such processing is based on consent previously given by you with effect for the future.
You furthermore have the right to file a complaint with a data protection supervisory authority at any time.
8. Contacting us
You have the possibility of contacting us on our Website or via the contact information provided at the beginning of this privacy policy. If you decide to do so, we will process the data you supply to us in the contact form for answering your request in accordance with Art. 6 (1) f GDPR. Alternatively, you can contact us by the E-mail-address we provided to you on our Website. We will erase the data you provided for contacting us after your request is resolved.