Privacy Policy
Your privacy matters. We are committed to protecting your personal data in full compliance with the GDPR and Dutch data protection law.
Last Updated: February 22, 2026
This Privacy Policy ("Policy") describes how Oniks Capital ("Oniks," "we," "us," or "our"), a platform operated from Amsterdam, the Netherlands at www.onikscapital.com (the "Platform"), collects, uses, discloses, retains, and protects your personal data. This Policy applies to all visitors, registered users, Founders, Investors, newsletter subscribers, and any other individuals whose personal data we process.
Oniks is committed to protecting your privacy and processing your personal data in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), the Dutch GDPR Implementation Act (Uitvoeringswet AVG, "UAVG"), and other applicable data protection laws.
1. Data Controller
The data controller responsible for the processing of your personal data is:
For any data protection inquiries, requests, or complaints, please contact us at the email address above.
2. Personal Data We Collect
2.1Data You Provide Directly
Account Registration Data: name, email address, password (hashed), country of residence, user type (Founder or Investor), professional title, and organization name.
Founder Profile Data: startup name, industry/sector, stage of development, founding date, team member information (names, roles, LinkedIn profiles), business description, pitch deck and presentation materials, financial projections and revenue data, funding requirements, equity offered, intellectual property details, market analysis, and any other information voluntarily submitted through the Platform.
Investor Profile Data: investment preferences, sectors of interest, typical investment size/range, geographic focus, portfolio history (if voluntarily provided), accreditation or qualification status, and professional background.
Communication Data: messages, emails, inquiries, and correspondence sent through the Platform or to our support channels, including content of such communications and associated metadata.
Newsletter Subscription Data: email address, name, and communication preferences.
Advisory/Consulting Data: any information provided in connection with advisory, vetting, or consulting services, including additional financial records, corporate documents, contracts, and due diligence materials.
2.2Data Collected Automatically
Technical Data: IP address, browser type and version, operating system, device type, screen resolution, language preference, and time zone setting.
Usage Data: pages visited, features used, clickstream data, referring/exit pages, date and time of access, session duration, and interaction patterns.
Cookie and Tracking Data: information collected through cookies, web beacons, pixel tags, and similar tracking technologies, as further described in Section 8 below.
2.3Data from Third-Party Sources
We may receive personal data about you from third-party sources, including publicly available databases, social media platforms (e.g., LinkedIn), analytics providers (e.g., Google Analytics), business partners, and other Users who provide information about you in the context of introductions or references. We may also receive data from identity verification or fraud prevention services.
3. Purposes and Legal Bases for Processing
Under the GDPR, we process your personal data only when we have a valid legal basis:
Account Management and Service Provision
Article 6(1)(b) GDPRWe process your registration and profile data to create and maintain your account, provide access to Platform features, and facilitate connections between Founders and Investors.
Startup Listing and Investor Matching
Article 6(1)(b) GDPRWe display Founder profiles and startup information to registered Investors and facilitate introductions between Founders and Investors.
Advisory, Vetting, and Consulting Services
Article 6(1)(b) GDPRWe process data provided in connection with paid advisory, vetting, or consulting engagements.
Communication and Support
Article 6(1)(b) & 6(1)(f) GDPRWe process communication data to respond to your inquiries, provide customer support, and communicate about your account.
Newsletter and Marketing
Article 6(1)(a) or 6(1)(f) GDPRWe send newsletters, investment insights, and promotional content about our Services. You may opt out at any time.
Platform Improvement and Analytics
Article 6(1)(f) GDPRWe analyze usage data to improve the Platform's functionality, user experience, and performance.
Security and Fraud Prevention
Article 6(1)(f) & 6(1)(c) GDPRWe process data to detect, prevent, and address fraud, unauthorized access, security incidents, and other harmful activities.
Legal Compliance
Article 6(1)(c) GDPRWe process data to comply with applicable legal obligations, including tax reporting, AML/KYC requirements, regulatory inquiries, legal processes, or governmental requests.
Aggregated Insights and Platform Metrics
Article 6(1)(f) GDPRWe aggregate and anonymize data to produce platform metrics (e.g., total funding needed, number of active startups, geographic distribution). Anonymized data is no longer personal data under the GDPR.
4. Data Sharing and Disclosure
4.1With Other Users
Founder profile information (startup name, industry, stage, team, business description, and pitch materials) may be visible to registered Investors in accordance with the Platform's functionality. Investor profile data (investment preferences, sectors of interest) may be visible to Founders where the Platform facilitates introductions. You control the level of detail visible in your profile through your account settings where applicable.
4.2Service Providers
We share personal data with trusted third-party service providers who perform services on our behalf, including hosting and cloud infrastructure providers, email delivery services, analytics providers (e.g., Google Analytics), payment processors, customer support tools, and cybersecurity services. All service providers are bound by data processing agreements that comply with Article 28 of the GDPR.
4.3Professional Advisors
We may share data with our lawyers, accountants, auditors, and other professional advisors in connection with legal, financial, or operational matters.
4.4Legal Requirements
We may disclose personal data where required by law, regulation, legal process, or governmental order, or where we believe in good faith that disclosure is necessary to: (a) comply with legal obligations; (b) protect the rights, property, or safety of Oniks, our Users, or the public; (c) prevent or investigate possible wrongdoing; or (d) enforce our Terms of Service.
4.5Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. We will provide notice of any such transfer and any choices you may have regarding your data.
4.6With Your Consent
We may share your personal data with third parties where you have provided your explicit consent to such disclosure.
4.7No Sale of Personal Data
Oniks does not sell personal data to third parties for their marketing purposes.
5. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). Where we transfer personal data to countries that have not been deemed to provide an adequate level of data protection by the European Commission, we implement appropriate safeguards to protect your data, including: (a) Standard Contractual Clauses (SCCs) approved by the European Commission; (b) adequacy decisions by the European Commission; or (c) other lawful transfer mechanisms recognized under the GDPR. You may request information about the safeguards we apply by contacting us at info@onikscapital.com.
6. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:
Active Account Data
Duration of account + 3 years after closure
Founder Startup Profiles
Duration of listing + 2 years after removal
Transaction & Advisory Records
7 years (Dutch fiscal/commercial law)
Communication Records
3 years from date of communication
Newsletter Subscription Data
Until unsubscribe + 12 months
Technical & Usage Logs
Up to 24 months
After the applicable retention period expires, personal data will be securely deleted or anonymized. Anonymized data may be retained indefinitely for statistical and analytical purposes.
7. Your Rights Under the GDPR
Under the GDPR, you have the following rights with respect to your personal data:
Right of Access
Obtain confirmation as to whether your personal data is being processed and access such data.
Right to Rectification
Request correction of inaccurate personal data and completion of incomplete data.
Right to Erasure
Request deletion of your personal data where it is no longer necessary, you withdraw consent, or the data was unlawfully processed.
Right to Restriction
Request restriction of processing when you contest accuracy or when processing is unlawful.
Right to Data Portability
Receive your data in a structured, machine-readable format and transmit it to another controller.
Right to Object
Object to processing based on legitimate interests, including profiling and direct marketing.
Right to Withdraw Consent
Withdraw consent at any time without affecting the lawfulness of prior processing.
Right to Lodge a Complaint
Lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), Bezuidenhoutseweg 30, 2594 AV The Hague, the Netherlands.
To exercise any of these rights, please contact us at info@onikscapital.com. We will respond within thirty (30) days.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures include, but are not limited to: encryption of data in transit (TLS/SSL) and at rest; access controls and authentication mechanisms; regular security assessments and vulnerability testing; secure hosting infrastructure with reputable cloud providers; employee training on data protection and security; and incident response procedures.
While we take reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and shall not be liable for breaches caused by circumstances beyond our reasonable control.
10. Children's Privacy
The Platform is not directed at individuals under the age of eighteen (18). We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected personal data from a child, we will take reasonable steps to delete such data promptly. If you believe that a child has provided personal data to us, please contact us at info@onikscapital.com.
11. Third-Party Links and Services
The Platform may contain links to third-party websites and services. This Privacy Policy does not apply to those third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing personal data to them.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. Material changes will be communicated by posting the updated Policy on the Platform with a revised "Last Updated" date and, where required by law or where practicable, by email notification. Your continued use of the Platform after the posting of changes constitutes your acceptance of the updated Policy.
13. Automated Decision-Making and Profiling
Oniks does not currently engage in automated decision-making or profiling that produces legal effects or similarly significant effects on Users. If this changes in the future, we will update this Policy and ensure compliance with Article 22 of the GDPR, including providing you with the right to obtain human intervention, express your point of view, and contest the decision.
14. Data Protection Officer
Oniks has not appointed a Data Protection Officer (DPO) at this time, as it does not meet the mandatory appointment criteria under Articles 37–39 of the GDPR. Should this change, this Policy will be updated accordingly. In the meantime, all data protection inquiries should be directed to info@onikscapital.com.
Contact Information
Oniks Capital
Location
Amsterdam, the Netherlands
Website
www.onikscapital.comGeneral Inquiries
info@onikscapital.comPrivacy & Legal
info@onikscapital.com