This is a Privacy Notice prepared by IPR.VC Management Oy and its subsidiaries and group of funds (all together IPR.VC). This notice is intended to describe what personal data we may collect and how it is handled and stored. IPR.VC is committed to processing data in accordance with the General Data Protection Regulation of the European Union, the GDPR.
What data we may collect about you?
We collect the following types of personal data from our investors, business counterparties and prospects, employees and other people the organization has a relationship with or may need to contact:
- name
- phone number
- email address
- company address
- employment related information like payment details, tax information
- recruitment related information like CV
- information required in Anti-Money Laundering procedures or other regulations
Any other personal data will be anonymized so that it can no longer be associated with you, in which case it is no longer personal data.
Why do we process personal data?
All data processed by IPR.VC is related to our business and it is collected by lawful bases:
- consent: used for marketing and recruitment;
- contract: in investments, employment, partnerships;
- legal obligation: to comply with AML, tax and other legal requirements relevant for a fund management business;
- or legitimate interests: to contact potential investors.
IPR.VC ensures that personal data is limited to what is necessary in relation to the purposes for which they are processed. We send marketing material only after receiving an explicit consent, and refrain from continuing if the consent is revoked.
How the data is collected?
Personal data is mainly collected from the individual himself or herself. Where the legal basis for the processing of the personal data is a contract or a legal obligation it is mandatory for you to provide the data, or we are not able to offer the service or establish the relationship with you. We may also collect data from public registers maintained by Patent and Registration Office or the Tax Administration in Finland, or similar public entities in other countries mainly of beneficial owners, representatives and managers of investors as well as employees.
With whom may we share your data?
Your personal data may be shared with lawyers, courts, law enforcement authorities, regulatory authorities, financial institutions as well as consultants or other professionals in order to fulfill IPR.VC’s legal or contractual obligations.
Data storage
We are established in Finland. We use reliable cloud-based platforms to store personal data. These platforms may process personal data on our behalf on servers outside the European Economic Area. We provide adequate protection for the transfer of personal data to countries outside of the European Economic Area through agreements with our service providers based on the Standard Contractual Clauses or other similar arrangements in case there is no applicable adequacy decision made by the European Commission. More information regarding the transfers of personal data may be obtained by contacting us on addresses mentioned in this Privacy Notice.
How long will we retain your data?
Your personal data may be retained for as long as necessary to fulfill the purposes for which it was collected including any legal or reporting requirements. We will keep data relevant to our cooperation for five years following the last date of activity unless a longer period is required by law.
Your rights
All individuals who are the subject of personal data held by IPR.VC are entitled to:
- have access to their personal data;
- have their personal data corrected;
- have their personal data erased;
- restrict or object to processing of their personal data;
- right to complain;
- right to revoke consent;
- have their personal data transferred to another party.
Subject access requests from individuals should be made by email. Please contact us using the contact details listed below. We may need to request specific information from you to help us confirm your identity. The estimated delivery time of data requests is 14 days.
You have the right to lodge a complaint with the data protection authority. In Finland, this authority is The Office of the Data Protection Ombudsman (https://tietosuoja.fi/en).
Contact us
If you require any further information, please do not hesitate to contact us at: backoffice@ipr.vc