Privacy Policy

1. Controller

The controller responsible for the processing of personal data on this website is:

Mavas Legacy
a privately held family office
Cologne
Germany
Email: [privacy@mavas.de]

2. General principles

We process personal data only where this is necessary, lawful and proportionate. In particular, we process data to operate this website, respond to enquiries, review introductions from founders, fund managers and partners, and comply with applicable legal obligations.

3. Website access and server log files

When you access this website, technical information may be automatically processed by our hosting provider and/or web server. This may include:

• IP address
• date and time of access
• requested page or file
• browser type and version
• operating system
• referrer URL, if transmitted by your browser
• amount of data transferred and access status

The purpose of this processing is to deliver the website, maintain technical security, detect misuse and ensure stable operation. The legal basis is our legitimate interest in operating a secure and functional website.

Server log files are generally retained only for as long as necessary for security and operational purposes and are then deleted or anonymised, unless longer retention is required to investigate incidents or comply with legal obligations.

4. Contact by email or contact form

If you contact us by email or through the contact form, we process the personal data you provide. This may include:

• name
• email address
• profile or role, such as founder, fund manager or partner
• geography or market focus
• message content and submitted links or materials
• any additional information you voluntarily provide

We use this information to review and respond to your enquiry, assess whether an introduction or opportunity may be relevant, and manage related communications. The legal basis is our legitimate interest in receiving and assessing business enquiries and, where applicable, taking steps prior to entering into a potential contractual or investment relationship.

Please do not submit special categories of personal data, such as health data, religious beliefs, political opinions or similar sensitive information, unless strictly necessary.

5. Investment-related enquiries

Where founders, fund managers, operators or other parties submit information about a company, fund, investment opportunity or partnership, we may process the information provided for internal review, due diligence preparation, relationship management and documentation of our decision-making process.

The legal basis is our legitimate interest in assessing potential investment and partnership opportunities and, where applicable, taking steps prior to entering into a contractual relationship.

6. Recipients of personal data

Personal data may be accessed by persons within Mavas Legacy who need the information for the purposes described above. We may also use external service providers, such as hosting providers, email providers, IT support providers, form-processing providers or professional advisers, where this is necessary for website operation, communication, legal advice, tax advice or compliance.

Where service providers process personal data on our behalf, we seek to ensure that appropriate data protection agreements are in place.

7. International transfers

Depending on the service providers used, personal data may be processed outside the European Economic Area. Where this occurs, we seek to rely on appropriate safeguards, such as an adequacy decision by the European Commission, standard contractual clauses or other safeguards available under applicable data protection law.

8. Google Fonts

This website currently loads fonts from Google Fonts. When your browser loads these fonts, it may establish a connection to Google servers and transmit technical information such as your IP address, the requested URL and browser-related HTTP headers. Google states that Google Fonts does not set cookies and that information collected by Google Fonts is not used to create end-user profiles or for targeted advertising.

9. Cookies and analytics

This website is intended to operate without analytics, advertising tracking or non-essential cookies.

10. Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. Enquiries and related correspondence may be retained for the period necessary to manage the relationship, review the relevant opportunity, document our assessment and comply with legal, tax, accounting or regulatory obligations.

Where an enquiry does not lead to further contact or cooperation, we generally delete or archive the relevant data after an appropriate period, unless there is a legitimate reason to retain it longer.

11. Your rights

Subject to the conditions set out in applicable data protection law, you may have the right to:

• request access to your personal data
• request rectification of inaccurate personal data
• request erasure of personal data
• request restriction of processing
• object to processing based on legitimate interests
• request data portability, where applicable
• withdraw consent at any time, where processing is based on consent

To exercise your rights, please contact us using the contact details above.

12. Right to lodge a complaint

You have the right to lodge a complaint with a competent data protection supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

13. Security

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Please note that communication by email or web forms may involve security risks, especially if transmitted without end-to-end encryption.

14. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, in particular if the website, service providers or legal requirements change. The version published on this website applies at the time of your visit.

Last updated: 06 / 2026