032 Ventures

Privacy Policy

Last updated: 2 August 2026

This policy explains what personal data we process when you visit this website, why we process it, and what rights you have. It covers this website only. The marketplaces we operate are separate services on their own domains, each with its own privacy policy.

§ 1 Controller

032 Ventures GmbH
Rosenstraße 7
71034 Böblingen
Germany

Managing Director: Stefan Nisik
Register court: Amtsgericht Stuttgart, HRB 806402
Email: contact@032-ventures.com

For any question about this policy or about your data, write to the address above. You do not need to give a reason.

§ 2 What this website does not do

We state this first because it removes most of what a privacy policy usually has to cover. This website:

  • sets no cookies and stores nothing in your browser,
  • uses no analytics, tracking, or advertising of any kind,
  • loads no content from third parties. Fonts, images, styles, and scripts are all served from this domain, so your browser never contacts an outside provider while you read these pages,
  • has no contact form and no login. Nothing on these pages submits data to us.

There is therefore no consent banner, because there is nothing to consent to.

One part of our site works differently. The Creator Center at creators.032-ventures.com has accounts, a login, and an application form, so it does process personal data. It is covered separately in § 8. Everything said above applies to the pages you are reading now.

§ 3 Server log data when you visit

Delivering a web page requires a technical exchange between your device and our server. During that exchange the following is processed:

  • your IP address,
  • the date and time of the request,
  • the page or file requested and the amount of data transferred,
  • the response status,
  • the browser type and version and the operating system,
  • the referring page, if your browser sends one.

Purpose: delivering the website, keeping it stable, and defending against attacks and abuse.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is operating a website that works and is not taken down by attacks. This data is not used to identify individual visitors, and it is not combined with any other source.

Retention: log data is kept only for as long as it is needed for these purposes and is then deleted or anonymised.

§ 4 Hosting

This website is hosted on the infrastructure of Cloudflare, which delivers the pages and provides the protection against attacks described in § 3. Cloudflare acts as our processor under a data processing agreement pursuant to Art. 28 GDPR and processes the data described in § 3 exclusively on our instructions.

Because Cloudflare operates a worldwide network, data may be processed outside the European Economic Area, including in the United States. Such transfers are safeguarded by the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR together with additional technical and organisational measures.

Legal basis: Art. 6 (1) (f) GDPR, for the same interest as in § 3.

§ 5 Contacting us by email

If you write to us, we process your email address, your name if you give it, and the content of your message in order to answer you. The same applies to any correspondence that follows.

Legal basis: Art. 6 (1) (b) GDPR where your message concerns a contract or steps taken before entering into one, otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering enquiries addressed to us.

Retention: until your enquiry is resolved and there is no longer any reason to expect it to be raised again. Statutory retention obligations, in particular under commercial and tax law, take precedence and can require us to keep correspondence longer.

Please note that ordinary email is not encrypted end to end. If a matter is sensitive, tell us and we will agree on another channel.

§ 6 Job applications

Applications are sent to us by email, to the address given in the job posting. We process the data you provide, typically your name, contact details, CV, and the documents you attach, in order to assess your application and run the hiring process.

Legal basis: § 26 (1) BDSG together with Art. 6 (1) (b) GDPR, processing for the purpose of deciding on the establishment of an employment relationship.

Retention: if we do not offer you a position, we delete your documents six months after the process ends, a period that allows us to answer claims under the German General Equal Treatment Act (AGG). If you tell us you would like to be kept on file for future openings, we keep them on the basis of your consent under Art. 6 (1) (a) GDPR, and you can withdraw that consent at any time. If we do offer you a position, your documents become part of your personnel file.

§ 7 Links to our marketplaces and other external sites

The marketplace selection on our For Brands and For Creators pages sends you to another website. That selection happens entirely in your browser: nothing is submitted to us, and we do not learn which option you chose.

Once you follow such a link, you leave this website. We have no control over what the site you land on does with your data, and its own privacy policy applies from that point on. This includes the marketplaces we operate, which run as separate services with their own accounts and their own policies.

§ 8 Creator Center (creators.032-ventures.com)

The Creator Center is where creators apply to promote products from the marketplaces we operate. Unlike the rest of this website, it has accounts and a login. If you have not signed up there, none of this section applies to you.

What we store when you sign up: your email address and, if you choose a password rather than a one-time login link, a cryptographic hash of that password. We never see the password itself.

What we store when you apply: your first and last name, your country, a link to the channel or profile you publish on, a description of your reach, and any message you write to us. You decide what to put in the message field, so please do not put anything there that we do not need.

What is added once we approve you: a discount code that identifies you, the date of the decision and who at 032 Ventures made it, and, once you complete payment onboarding, the identifier of your Stripe account and whether that onboarding is finished. If we decline your application, we store the reason so that we can explain it to you.

Legal basis: Art. 6 (1) (b) GDPR. Reviewing your application is a pre-contractual measure taken at your request, and everything after approval serves the agreement between us.

One identity across all our marketplaces

This is the part that deserves its own explanation, because it is a processing operation that does not exist inside any single marketplace and comes about only because we bring the pieces together.

When we approve your application, we create an approved creator record under your email address in each of the marketplaces we operate, all carrying the same discount code. That is what lets you promote products from all of them with one link, one login, and one payment account, instead of applying seven times. It also means that your activity across those marketplaces is linked to one identity held by us. The marketplaces are not separate companies: they are all operated by 032 Ventures GmbH, so this is not a disclosure to a third party, but it is a real combination of data and we would rather name it than bury it.

Legal basis: Art. 6 (1) (b) GDPR, because a single creator account across our marketplaces is what you signed up for and what the agreement is about.

Payments through Stripe

Commission is paid out through Stripe. When you start payment onboarding, you are taken to Stripe and provide your details directly to them, including the identity documents that financial regulation requires. We do not see those documents. What comes back to us is the identifier of your account and whether it is ready to receive money.

Stripe decides for itself how it handles the data you give it in order to meet its own obligations under payment services and anti-money-laundering law, and is a separate controller for that purpose. Its privacy policy is at stripe.com/privacy.

Why only one Stripe account: a Stripe Express account cannot be transferred or merged once created. Setting one up per marketplace would leave you with seven accounts you could never combine, seven onboarding processes, and seven monthly account fees. So there is exactly one, created once.

Reporting to the tax authorities

German law requires operators of digital platforms to report certain sellers and their income to the Federal Central Tax Office once a year (Platform Tax Transparency Act, PStTG, implementing Council Directive (EU) 2021/514, known as DAC 7). If your activity falls within that duty, we are required to report your identifying details and what you earned, and we cannot delete that data on request while the duty and its record-keeping period apply.

Legal basis: Art. 6 (1) (c) GDPR, compliance with a legal obligation.

Processors

The Creator Center runs on Supabase (database, authentication, and server functions) in a data centre in the European Union, and is delivered over Cloudflare like the rest of this site (§ 4). Both act as processors on our instructions under Art. 28 GDPR.

How long we keep it

Application data of applicants we decline is deleted six months after the decision. For approved creators, we keep account and assignment data for as long as the account exists, and delete it when you close it. Records that document payments are kept for ten years under § 147 of the German Fiscal Code (AO), and reporting data for as long as the PStTG requires. Deleting your account therefore removes your profile but not the accounting record of money that has already moved.

§ 9 No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website.

§ 10 Your rights

Under the GDPR you have the following rights in relation to your personal data:

  • Access (Art. 15), to be told whether and what data we process about you and to receive a copy,
  • Rectification (Art. 16), to have inaccurate data corrected and incomplete data completed,
  • Erasure (Art. 17), to have your data deleted where one of the grounds in that article applies,
  • Restriction (Art. 18), to have processing limited instead of deleted,
  • Data portability (Art. 20), to receive data you provided in a structured, commonly used, machine-readable format,
  • Objection (Art. 21), to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR, which includes §§ 3 and 4 above,
  • Withdrawal of consent (Art. 7 (3)), where processing is based on your consent, with effect for the future.

To exercise any of these, write to contact@032-ventures.com. Exercising them costs you nothing.

§ 11 Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR). The authority competent for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

§ 12 Changes to this policy

We update this policy when the website or the way we process data changes, for example when we add a service that did not exist before. The version in force is always the one published here, with the date of the last update shown at the top.