Privacy Policy

1. Privacy at a Glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website.

Data Collection on This Website

Who is responsible?
Data processing is carried out by the website operator. You can find contact details in the imprint.

How Do We Collect Your Data?

Your data is collected when you provide it to us (e.g., contact form) or automatically by our IT systems when you visit the website (technical data such as browser, operating system, time of access).

What Do We Use Your Data For?

Part of the data is collected to ensure error-free provision of the website.

2. Hosting

3. Google Analytics (consent-based)

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

Scope of Processing

After your consent, Google Analytics uses cookies and similar technologies that enable analysis of website usage. The information generated about your use of this website is usually transferred to and stored on a Google server in the USA.

IP Anonymization

We use Google Analytics with IP anonymization enabled. Your IP address is truncated by Google within member states of the EU or other parties to the EEA Agreement before transmission to the USA.

Legal Basis

Processing is based on your consent pursuant to Art. 6 (1) lit. a GDPR and § 25 (1) TTDSG. Consent is voluntary and may be withdrawn at any time with effect for the future, without affecting the lawfulness of processing carried out prior to the withdrawal.

Retention

The retention period for user- and event-level data is limited to 14 months. Your consent decision is stored locally in your browser (localStorage, key nc-consent-v1); no cookies are set for this purpose.

Third-Country Transfers

Data is transferred to the USA. Google LLC is certified under the EU-US Data Privacy Framework. Standard contractual clauses used by Google apply in addition.

4. Google reCAPTCHA

On our contact pages we use "Google reCAPTCHA" (version 3) provided by Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland, to determine whether input submitted via the contact form is made by a human or through abusive automated processing.

Scope of Processing

reCAPTCHA recognizes this based on various information (e.g. IP address, time spent on the website, or mouse movements made by the user). The analysis starts automatically as soon as a contact page is loaded. Data may be transmitted to Google servers in the USA. reCAPTCHA is loaded regardless of your cookie consent choice.

Legal Basis

Use is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR in protecting our contact form against abusive automated access (spam, bots).

Third-Country Transfers

Data is transferred to the USA. Standard contractual clauses used by Google apply in addition.

5. General Information

Data Protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

Responsible Entity

6. Data Collection on This Website

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored for the purpose of processing the inquiry and for follow-up questions. We will not share this data without your consent.

To send and process form submissions, we use the service "Formspree" provided by Formspree, Inc., 21750 Hardy Oak Blvd Ste 104 #26968, San Antonio, TX 78258, USA, as a processor. Formspree processes the submitted data on our behalf and forwards the inquiry to us by email; data may be transferred to the USA in the process. Standard contractual clauses or other appropriate safeguards under Art. 46 GDPR used by Formspree apply. More information: Formspree Privacy Policy .

Processing is based on Art. 6 para. 1 lit. b GDPR (contract fulfillment or pre-contractual measures) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing inquiries).

Server Log Files

The provider automatically collects and stores:

• Browser type and version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources.

7. Pitch Submissions and Enquiries About Acquiring a Holding

Alongside the general contact form we operate two specialised forms that collect considerably more information than a simple contact enquiry. Both are sent via the processor Formspree and protected by Google reCAPTCHA, exactly like the contact form (see sections 4 and 6).

Pitch submissions by startups

Via the form at Submit a Pitch we collect the following information in order to assess a possible investment:

• Contact details of the submitting person: name, email address, optionally phone number
• Company details: company name, website, legal form, year of incorporation and registered office
• Details about the founding team: names, roles, extent of involvement and prior professional experience. This constitutes personal data of third parties – see the note below
• Details about the funding round: capital sought, minimum and maximum ticket size, pre-money valuation, instrument, status of a lead investor, amounts already firmly committed, use of funds and runway
• Whether an eligibility certificate under the German programme „INVEST – Zuschuss für Wagniskapital“, administered by the Federal Office for Economic Affairs and Export Control (BAFA), is in place
• A link to your pitch deck that you provide. We store only the link; the materials themselves remain with the provider you chose, whose privacy terms apply to them. No file upload takes place via this website
• Free-text information about your venture

Enquiries about acquiring a holding

Via the form at Acquire a Stake we collect the following information in order to handle your enquiry:

• Contact details: name, email address, optionally phone number
• Details of the company you represent, your role, and optionally its website
• Details about your interest: the holding concerned, how binding your interest is, your role as an acquirer, and the investment range you indicate
• Free-text information about the background to your enquiry

Legal Basis

Processing is based on Art. 6 para. 1 lit. b GDPR, as the information serves to prepare a possible investment or share purchase agreement (pre-contractual measures taken at your request). In addition we rely on Art. 6 para. 1 lit. a GDPR: both forms require your express consent to the processing of the information submitted. You may withdraw that consent at any time without formality; the lawfulness of processing carried out up to the withdrawal remains unaffected.

Recipients and Disclosure

The information is processed solely within Neuhauss Capital UG (haftungsbeschränkt) and read there by the management. It is disclosed to third parties – co-investors or our portfolio companies, for example – only with your prior agreement. The only processors involved are the service providers named in this policy: Formspree for form delivery and Cloudflare for hosting.

Retention

If your submission or enquiry does not lead to an investment or a transaction, we delete the information submitted no later than twelve months after we conclude our review. If a further working relationship comes about, the retention period follows the respective contractual relationship and the statutory retention obligations, in particular § 147 AO (German Fiscal Code) and § 257 HGB (German Commercial Code). On request we will delete your information earlier, provided no statutory retention obligation prevents it.