Privacy Policy
This policy explains what personal data we collect when you visit crossoceanfund.com, why we collect it, and what rights you have over it. We have written it to describe what this website actually does — nothing more.
Who we are
Cross Ocean Ventures B.V. is the data controller for this website. We are registered in the Netherlands at Herengracht 221, 1016 BG Amsterdam. We also maintain offices in San Diego, USA and Tallinn, Estonia.
For any privacy question or request, contact milan@crossoceanfund.com.
What we collect
We collect personal data in two situations only.
1. When you submit the contact form. The form asks for your name, email address, the subject of your enquiry and your message. If you select "Investment Inquiry" you may also attach a pitch deck (PDF, maximum 10 MB). We receive whatever you choose to put in those fields.
2. When you simply browse the site. Our analytics provider and our hosting provider record technical data automatically: IP address, browser and device type, operating system, referring page, pages viewed, and the date and time of your visit.
We do not run advertising on this website. We do not operate an ad network, we do not sell personal data, and there is no account registration or login.
Why we use it, and on what legal basis
- To respond to your enquiry and evaluate investment opportunities. Legal basis: our legitimate interest in operating our business and in reviewing opportunities sent to us, and — where an investment relationship follows — steps taken at your request prior to entering a contract.
- To understand how the website is used so we can improve it. Legal basis: your consent for analytics cookies; legitimate interest for aggregated, non-identifying statistics.
- To keep the website secure and available, including detecting abuse of the contact form. Legal basis: our legitimate interest in protecting our systems.
Pitch decks and confidentiality
If you send us a pitch deck or business information through this website, please note that we do not treat unsolicited submissions as confidential unless we have separately signed a confidentiality agreement with you. We review a large number of opportunities and may already be evaluating, or may later evaluate, businesses similar to yours. If you need confidentiality, contact us first so we can put an appropriate agreement in place before you send anything.
Cookies and analytics
We use Google Analytics 4 to measure traffic — for example how many people visit, which pages they read, and which sites they arrive from. Google Analytics sets cookies on your device and processes your IP address to do this.
You can prevent this at any time by blocking cookies in your browser settings, using your browser's "Do Not Track" or tracking-protection features, or installing the Google Analytics Opt-out Browser Add-on. Blocking analytics cookies does not affect your ability to use any part of this website.
We do not use advertising cookies, retargeting pixels, social media tracking pixels or cross-site profiling of any kind.
Who else processes your data
We keep the number of third parties deliberately small. The following providers process data on our behalf:
- Cloudflare — website hosting and content delivery. Processes IP addresses in server logs to serve pages and mitigate attacks.
- Google (Analytics) — website traffic measurement.
- Google Workspace (Apps Script, Sheets, Drive, Gmail) — contact form submissions and any attached pitch decks are delivered into our Google Workspace environment, where we store and review them.
We do not share your personal data with anyone else, except where we are legally required to do so, or where it is necessary to establish or defend a legal claim.
International transfers
Cloudflare and Google are US-based providers, so your data may be processed outside the European Economic Area. Where that happens, transfers are covered by the European Commission's Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
How long we keep it
- Contact form submissions and pitch decks: up to 24 months from your last contact with us, unless an ongoing relationship or a legal obligation requires us to keep them longer.
- Analytics data: retained according to our Google Analytics configuration, currently 14 months.
- Server and security logs: short-term only, in line with our hosting provider's standard retention.
Your rights
Under the GDPR you have the right to access your personal data, to have inaccurate data corrected, to have your data erased, to restrict or object to how we process it, to receive your data in a portable format, and to withdraw consent at any time where processing is based on consent.
To exercise any of these rights, email milan@crossoceanfund.com. We will respond within one month. There is no charge for making a request.
If you are unhappy with how we have handled your data, you may lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the supervisory authority in your country of residence.
Children
This website is intended for founders, investors and business professionals. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we will delete it.
Links to other websites
This website links to portfolio company websites, LinkedIn profiles and other third-party pages. Once you follow such a link you are on someone else's website, governed by their privacy policy — not this one. We have no control over how those sites handle your data.
Changes to this policy
We may update this policy as our website or our practices change. The date at the top of this page always reflects the current version. Material changes will be highlighted on this page.