Privacy Policy

Allows establishing and ensuring compliance with the rules applicable to the processing of Personal Data and providing the necessary information about the rights of Data Subjects in this regard. CELTIS VENTURE PARTNERS, SOCIEDADE DE CAPITAL DE RISCO, S.A., legal entity number 513 494 537, registered with the Securities Market Commission, with number 127476, headquartered at Avenida Fontes Pereira de Melo, No. 3, 3rd floor 1050-115 Lisbon, within the scope of its activity and in accordance with a transparent Privacy Policy, has implemented efficient and effective measures that ensure the protection and confidentiality of Personal Data, limited to authorized purposes, collected and processed in accordance with the General Data Protection Regulation (EU) 1016/679) and other applicable national legislation, rigorously complying with the rights thereof because we prioritize your privacy. CELTIS VENTURE PARTNERS reserves the right to change its Privacy Policy at any time, proceeding with the respective update on the Company’s website, with the User / Data Subject having direct access to said information.

For any clarification regarding CELTIS‘ Privacy Policy and the exercise of the rights of Data Subjects, please contact us via email: compliance@celtis.pt

Data Controller CELTIS VENTURE PARTNERS, SOCIEDADE DE CAPITAL DE RISCO, S.A. Avenida Fontes Pereira de Melo, No. 3, 3rd floor 1050-115 Lisbon Phone: (+351) 928 117 775 Email: compliance@celtis.pt

Data Protection Officer CELTIS VENTURE PARTNERS, SOCIEDADE DE CAPITAL DE RISCO, S.A. Avenida Fontes Pereira de Melo, No. 3, 3rd floor 1050-115 Lisbon Phone: (+351) 928 117 775 Email: compliance@celtis.pt

Collection and Processing of Personal Data

Generally, the personal data collected and processed by us include full name, photograph, place of birth, nationality, date of birth, number and validity of identification document, marital status, tax identification number, address, email, and phone/mobile number. Additionally, other data may be requested, including educational qualifications, professional status, name of the employer, financial information, investor profile, anti-money laundering risk, and terrorist financing risk.

Personal Data is collected directly from the respective holder via email, telephone contact, and/or contract between both parties, and indirectly through partners or third parties. Once collected, Personal Data is processed in strict compliance with the rules and principles of the General Data Protection Regulation and other applicable legislation.

We guarantee that only the data necessary for each specific purpose is processed, and that they are not available or disclosed to third parties unlawfully.

Personal Data will be retained for the period and according to the purpose for which they were obtained. For this purpose, we organize ourselves and employ technical means to prevent possible intrusions, disclosures, alterations, unauthorized processing, and access, as well as against any unlawful processing. In this perspective, we retain Personal Data for the time necessary to fulfill contractual and legal obligations, ensuring compliance with the duties imposed, notably within the scope of commercial and tax law, banking law, Anti-Money Laundering Law, Securities Code, and also as evidence according to the applicable legal prescription periods. For the purposes described in our Privacy Policy, Personal Data will be retained and maintained for the maximum period prescribed by law and, when the retention period expires, if nothing prevents it, Personal Data will be securely destroyed.

Rights of Data Subjects

In accordance with the principle of transparency, which defines our Privacy Policy, we are committed to ensuring that information and communications related to the processing of Personal Data are easily accessible and understandable, and formulated in clear and simple language. We thus undertake to efficiently provide clarifications on the processing of Personal Data, which will be transmitted through the same means they were requested, unless otherwise requested by the respective Data Subject.

In accordance with the General Data Protection Regulation (GDPR), which conferred several rights to individuals, we ensure that these same rights listed below are duly safeguarded.

The Data Subject, hereinafter referred to as the Subject, has the Right to Access their Personal Data and confirm whether or not they are being processed, in which case they can obtain information: Purpose of data processing, categories of personal data, recipients or categories of recipients to whom the personal data have been or will be disclosed, envisaged retention period or criteria used to determine that period.

In these terms, the Subject may, under the Right to Rectification, request the correction of their data if it is inaccurate or outdated, and may also request that it be completed.

Additionally, the Subject has the Right to Erasure or “Right to be Forgotten,” when the Personal Data are no longer necessary for the purpose for which they were collected, when the consent on which the legitimacy of the Processing is based is withdrawn, when they object to the respective Processing without justifying reasons, when the Personal Data are subject to unlawful processing, or when they have to be erased due to a legal obligation.

Under the new Right to Restriction of Processing, the Subject may determine that, for a certain period, the Processing of Data is restricted in its use, i.e., “frozen,” with the data not being able to be communicated to third parties, transferred internationally, or erased.

Without prejudice to CELTIS VENTURE PARTNERS being obliged to inform the Subject of any rectification, erasure, or restriction of processing it has carried out in accordance with the Right to Notification.

The Subject is also guaranteed the Right to Data Portability, which consists of the right to receive from the Data Controller their data in a structured, commonly used, and machine-readable format, and the right to transmit it to another Controller, in the event that the Processing of the data in question is based on consent or a contract and is carried out by automated means.

The Subject has the right to object – Right to Objection – at any time to the Processing of their Personal Data, for reasons related to their particular situation, whenever it concerns: processing necessary for the performance of tasks carried out in the public interest or in the exercise of official authority; the pursuit of legitimate interests of the controller or a third party; reuse of data for a purpose other than that which justified their initial collection. In this case, we will immediately cease the Processing unless there are compelling legitimate reasons for the Processing that override the interests, rights, and freedoms of the Subject, or for the establishment, exercise, or defense of legal claims.

Last but not least, the Subject is also guaranteed the Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or significantly affects them.