GRID · Startup Index

Data notice

This page explains what personal data GRID holds, where it comes from, and your rights — including how to object or request erasure, whether or not you've ever interacted with GRID before. Under GDPR Art. 14, we're required to give you this notice even though we did not collect the data directly from you.

Controller

NMA Venture Capital GmbH
Am Sandtorkai 27, 20457 Hamburg, Germany
[email protected]

What we hold, and where it comes from

CategorySourcePersonal data?
Startup/company records — name, website, HQ, sector, fundingEU public grant records (CORDIS), public company directories, migrated legacy dataNo — business/entity data
VC firm records — name, thesis, portfolioThe firm's own public websiteNo — business/entity data
VC investment-professional name, role, and public LinkedIn URLThe firm's own public "Team"/"About" pageYes — this is the only personal data GRID holds without your direct involvement

We do not hold an email address, phone number, or any special-category data for anyone in the above. If you've directly claimed a company profile or applied to a program on GRID, that data is separate — you gave it to us yourself, with an explicit consent checkbox, and isn't covered by this notice.

Purpose and legal basis

GRID operates a directory of active EU startups and VC firms so founders can find the right investors to approach. Naming the investment professional — not just the firm — is the point: a firm-only listing wouldn't tell you who to actually pitch. We rely on legitimate interest (GDPR Art. 6(1)(f)) for this, documented in a full assessment weighing this purpose against your rights.

Recipients

Founders and other GRID users who browse the VC directory. We do not sell this data or share it with any other third party.

Retention

Held until the source page changes on re-crawl, until you object or request erasure below, or until the firm claims and corrects its own listing. We do not currently enforce an automatic maximum retention period — flagged internally as a gap to close, not something we want to leave unstated.

Your rights

You have the right to access, rectify, restrict, or object to this processing, and the right to erasure — use the form below for any of these. You also have the right to lodge a complaint with a supervisory authority (in Germany, your state's Datenschutzbehörde).

Object or request erasure

No claim link needed. If you know the exact company website or your own LinkedIn URL, we can usually resolve this immediately; otherwise we'll review it by hand.

Powered by GRID