Legal
Privacy Policy
onadaventures.com — Last updated: September 2026
1. Who is responsible for processing your personal data?
For the purposes of Regulation (EU) 2016/679 (General Data Protection Regulation – "GDPR") and applicable Spanish data protection legislation, the data controller is:
Trading name: Onada Ventures
Business address: Passeig de Gràcia, 19, Barcelona, Spain
Email: info@onadaventures.com
Website: onadaventures.com
For any question regarding the processing of your personal data or the exercise of your data protection rights, you may contact us at the email address above.
2. What personal data do we process?
Depending on how you interact with the website, Onada Ventures may process the following categories of personal data:
Contact information: name, surname, email address, telephone number, company, professional position and any other information you provide when contacting us.
Startup or project information: information submitted by founders, entrepreneurs or companies interested in Onada Ventures' services, programs, investment-readiness activities, venture-building initiatives or investor network. This information may include the identity and contact details of founders and team members, professional profiles and other information included in pitch decks, presentations or documentation voluntarily submitted to Onada Ventures.
Professional and business information: information concerning your company, project, professional activity or potential collaboration with Onada Ventures.
Communications: information contained in emails, forms, messages or other communications exchanged with Onada Ventures.
Technical and usage data: where applicable, information such as IP address, browser type, device information and website usage data collected through necessary or consented cookies or similar technologies.
Please do not provide personal data relating to third parties unless you are authorised to do so.
3. For what purposes do we process your data?
Responding to enquiries and contact requests. To respond to questions, requests for information, collaboration proposals and other communications received through the website or by email.
Evaluating startups and projects. To review information submitted by founders, startups and companies and assess potential participation in Onada Ventures' venture-building, advisory, investment-readiness, investor-network or other initiatives.
Submission of a project does not imply any obligation on Onada Ventures to invest in, advise, introduce to investors or otherwise collaborate with the project.
Managing professional relationships. To manage relationships with clients, startups, founders, investors, partners, mentors, suppliers and other members of the entrepreneurial ecosystem.
Providing requested services. To manage and provide advisory, venture-building, investment-readiness or other services requested from Onada Ventures.
Sending relevant communications. Where legally permitted or where you have provided your consent, to send information about Onada Ventures' activities, events, programs, content or other initiatives that may be relevant to you.
Website operation and security. To ensure the proper functioning, security and integrity of the website and prevent fraudulent or malicious activity.
Compliance with legal obligations. To comply with applicable legal, regulatory, accounting or administrative obligations.
4. What is the legal basis for processing your data?
Depending on the circumstances, the legal basis for processing may be:
Your consent, for example when you voluntarily submit information, subscribe to communications or accept non-essential cookies.
Pre-contractual measures or performance of a contract, where processing is necessary to respond to a request for services, prepare a proposal or manage an existing professional relationship.
Legitimate interests of Onada Ventures, including responding to professional enquiries, evaluating business opportunities and projects, maintaining professional relationships and protecting the security of the website, provided that such interests do not override your fundamental rights and freedoms.
Compliance with legal obligations applicable to Onada Ventures.
Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before its withdrawal.
5. Startup, pitch deck and project submissions
If you submit a pitch deck, business plan, financial information or other project documentation to Onada Ventures, you acknowledge that such information will be reviewed for the purpose of evaluating the project and potential collaboration.
You should only include personal data that is reasonably necessary for that purpose.
Please do not submit sensitive personal information or confidential information that is not necessary for the initial evaluation of your project.
Where documentation contains personal data relating to team members, shareholders, advisers or other third parties, you are responsible for ensuring that you are entitled to provide that information to Onada Ventures.
6. Who may receive your personal data?
Onada Ventures does not sell personal data.
Personal data may be accessed by service providers that support the operation of the website and Onada Ventures' business activities, such as hosting, cloud infrastructure, email, IT, analytics, professional or administrative service providers, where necessary.
Such providers will process personal data only to the extent necessary to provide their services and, where legally required, will be subject to appropriate data-processing obligations.
Information will not be shared with investors, partners or other third parties solely because a startup or project has been submitted through the website. Where Onada Ventures proposes to make an introduction or share project information with third parties, this will be handled as appropriate in the context of the relevant relationship and applicable data protection requirements.
Personal data may also be disclosed where required by law or by a competent public authority.
7. International transfers
Some technology or cloud service providers used by Onada Ventures may process personal data outside the European Economic Area.
Where an international transfer of personal data takes place, Onada Ventures will ensure that an appropriate transfer mechanism is used where required by applicable data protection law, such as an adequacy decision, Standard Contractual Clauses approved by the European Commission or another legally recognised safeguard.
8. How long do we retain your data?
Personal data will be retained only for as long as necessary for the purposes for which it was collected.
- Contact enquiries will generally be retained for the time necessary to respond and manage any subsequent relationship.
- Information relating to an existing client or professional relationship may be retained for the duration of that relationship and subsequently for the periods required to comply with applicable legal obligations or defend legal claims.
- Startup and project submissions may be retained for the period reasonably necessary to evaluate the project and manage potential subsequent discussions.
- Data processed on the basis of consent will be retained until consent is withdrawn, without prejudice to any applicable legal retention requirements.
Once personal data are no longer required, they will be deleted or appropriately blocked where required by law.
9. Your data protection rights
Under applicable data protection law, you may have the right to:
- access your personal data;
- rectify inaccurate or incomplete personal data;
- request the deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- request data portability where applicable;
- withdraw consent at any time where processing is based on consent; and
- not be subject to a decision based solely on automated processing where the legal requirements for that right are met.
You may exercise your rights by contacting info@onadaventures.com.
Please indicate which right you wish to exercise and provide sufficient information to allow us to identify and respond to your request. We may request additional information where reasonably necessary to verify your identity.
You also have the right to lodge a complaint with the competent supervisory authority. In Spain, the supervisory authority is the Agencia Española de Protección de Datos (AEPD).
10. Cookies and similar technologies
The website may use technical cookies necessary for its operation and, where applicable and subject to the legally required consent, analytics or other non-essential technologies.
Further information about the technologies used, their purposes and how you can manage your preferences will be provided in our Cookie Policy.
11. Security
Onada Ventures applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.
However, no internet-based system can guarantee absolute security, and users should take appropriate precautions when transmitting information online.
12. Third-party websites
The website may contain links to third-party websites or services. Onada Ventures is not responsible for the privacy practices of those third parties. Users are encouraged to review the privacy policies of any external websites they visit.
13. Changes to this Privacy Policy
Onada Ventures may update this Privacy Policy where necessary to reflect changes in the website, its activities, applicable legislation or data-processing practices.
The date of the latest update will be indicated at the top of this Privacy Policy.