Privacy
What data we collect, why, and what you can ask us to do with it.
In short
- This website uses no cookies, no analytics and no tracking.
- If you apply, we use your application only to select startups for the Consulting Program and to run it.
- Your application and attachments are stored in the EU, and only our program team can open them.
- We never sell your data or share it with anyone outside the program.
- You can ask us at any time to see, correct or delete your data.
Who is responsible
The controller under the GDPR is:
The Venture Club at ESMT Berlinc/o ESMT Berlin
Schlossplatz 1
10178 Berlin, Germany
TVC@clubs.esmt.org
Your contact person is Andrea Paganelli, at the same address.
When you visit the website
Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you open a page, your browser sends technical data to Vercel's servers: your IP address, the date and time, the page you opened, and your browser and operating system. Vercel needs this data to deliver the website and keep it secure, and keeps it in short-lived server logs.
To display the website, your browser also loads:
- the animation library from cdnjs (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA);
- the startup logos and quotes from our database at Supabase (see below).
Our fonts are stored on our own website, so your browser doesn't contact Google or any other font service. The providers above receive your IP address so they can send the files to your browser. The legal basis is our legitimate interest in a website that works and looks right (Art. 6 (1) (f) GDPR). Cloudflare is based in the USA. Transfers to the USA rely on the EU-U.S. Data Privacy Framework or on the EU Standard Contractual Clauses.
When you apply
The application form asks for your name and role, your email, your startup's name, website, location, stage and team size, and the challenge you want help with. You can also attach a file, such as a pitch deck.
We use this data to review your application, contact you for a call, select the startups and, if you join, run the program with you. The legal basis is that you asked to take part in the program (Art. 6 (1) (b) GDPR).
Your application is stored with Supabase Inc. (970 Toa Payoh North #07-04, Singapore 318992), on servers in the EU (Ireland). Attachments are kept in a private folder. Only the program team can open them, after signing in. If your startup is selected, the students on your consulting team also see your application. Everyone involved treats it as confidential.
We keep applications for as long as we need them to run the program and to keep a record of past cohorts. If you'd like us to delete your application sooner, write to us and we will.
Your rights
You have the right to:
- know what data we hold about you (Art. 15 GDPR);
- have it corrected (Art. 16) or deleted (Art. 17);
- have its use restricted (Art. 18);
- receive it in a common format (Art. 20);
- object to its use where we rely on our legitimate interest (Art. 21).
Write to TVC@clubs.esmt.org and we will reply within one month.
You can also complain to a data protection authority. Ours is the Berliner Beauftragte für Datenschutz und Informationsfreiheit, Alt-Moabit 59–61, 10555 Berlin.
Changes
If the website or the program changes, we update this page.
Last updated: 9 November 2026