Privacy Policy

How we collect, use, and protect your personal information Last Updated: 20 August 2026

1. Introduction

This Privacy Policy explains how Crowdpowder B.V. ("we", "us", or "our") collects, uses, and protects your personal information when you use our website and services. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and Dutch data protection laws.

Crowdpowder B.V. is the data controller for the personal data we process. Our registered office is located in the Netherlands.

2. Information We Collect

We collect the following types of personal information:

Contact Information:

- Name and surname

- Email address

- Company name and position

- Phone number

- Business address

Service-Related Information:

- Information about your business and equity structure

- Investment preferences and goals

- Communication preferences

- Service inquiries and selected services

Technical Information:

- IP address and location data

- Browser type and version

- Device information

- Website usage data and analytics

- Cookies and similar tracking technologies

3. How We Use Your Information

We process your personal data for the following purposes:

Service Provision (Legal Basis: Contract Performance):

- Providing equity consulting and crowdfunding services

- Managing client relationships and communications

- Processing service requests and inquiries

Business Operations (Legal Basis: Legitimate Interest):

- Improving our services and website functionality

- Conducting market research and analysis

- Managing our business operations

Marketing (Legal Basis: Consent):

- Sending newsletters and marketing communications (only with your consent)

- Providing information about relevant services and updates

Legal Compliance (Legal Basis: Legal Obligation):

- Complying with financial regulations and reporting requirements

- Meeting anti-money laundering and know-your-customer obligations

- Maintaining records as required by law

4. Data Sharing and Disclosure

We may share your personal information with:

Service Providers:

- IT service providers and cloud hosting services

- Professional advisors (lawyers, accountants, auditors)

- Marketing and communication service providers

Business Partners:

- Crowdfunding platforms and investment partners

- Legal and financial service providers

- Regulatory bodies when required by law

Legal Requirements:

- When required by law, regulation, or court order

- To protect our rights, property, or safety

- In connection with business transfers or mergers

We ensure all third parties are bound by appropriate data protection agreements and comply with GDPR requirements.

5. International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure adequate protection through:

- European Commission adequacy decisions

- Standard Contractual Clauses (SCCs)

- Binding Corporate Rules

- Other appropriate safeguards as required by GDPR

We will always ensure your data receives the same level of protection as within the EEA.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy:

• Client data: 7 years after the end of our business relationship (as required by Dutch law)

• Marketing data: Until you withdraw consent or 3 years of inactivity

• Website analytics: 26 months maximum

• Legal compliance data: As required by applicable laws and regulations

We regularly review our data retention practices and securely delete data when no longer needed.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

Right of Access: Request a copy of your personal data we hold

Right to Rectification: Correct inaccurate or incomplete data

Right to Erasure: Request deletion of your personal data (subject to legal obligations)

Right to Restrict Processing: Limit how we use your data

Right to Data Portability: Receive your data in a structured, machine-readable format

Right to Object: Object to processing based on legitimate interests or for marketing purposes

Right to Withdraw Consent: Withdraw consent for marketing communications at any time

To exercise these rights, contact us at privacy@crowdpowder.eu. We will respond within one month of receiving your request.

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

Essential Cookies: Enable basic website functionality

Analytics Cookies: Understand how visitors use our website (Google Analytics)

Marketing Cookies: Deliver relevant advertisements and measure campaign effectiveness

You can manage cookie preferences through your browser settings. However, disabling certain cookies may affect website functionality.

For detailed information about our cookie usage, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

Encryption of data in transit and at rest

Regular security assessments and updates

Access controls and authentication measures

Staff training on data protection

Incident response procedures

While we strive to protect your data, no internet transmission is completely secure. We cannot guarantee absolute security but will notify you and relevant authorities of any data breaches as required by law.

10. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of significant changes by:

Posting the updated policy on our website

Sending email notifications for material changes

Updating the "Last Updated" date at the top of this policy

Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Information

For questions about this Privacy Policy or our data practices, contact us:

Crowdpowder B.V.

Email: privacy@crowdpowder.eu

General Contact: info@crowdpowder.eu

Website: www.crowdpowder.eu

Data Protection Officer: If you have concerns about our data handling practices, you may also contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens):

Website: autoriteitpersoonsgegevens.nl

Email: info@autoriteitpersoonsgegevens.nl