032 Ventures

Privacy Policy

Last updated: 29 September 2026

This policy explains what personal data we process when you visit this website, why we process it, and what rights you have. It covers this website only. The marketplaces we operate are separate services on their own domains, each with its own privacy policy.

§ 1 Controller

032 Ventures GmbH
Rosenstraße 7
71034 Böblingen
Germany

Managing Director: Stefan Nisik
Register court: Amtsgericht Stuttgart, HRB 806402
Email: contact@032-ventures.com

For any question about this policy or about your data, write to the address above. You do not need to give a reason.

§ 2 What this website does not do

We state this first because it removes most of what a privacy policy usually has to cover. This website:

  • sets no cookies and stores nothing in your browser,
  • uses no analytics, tracking, or advertising of any kind,
  • loads no content from third parties. Fonts, images, styles, and scripts are all served from this domain, so your browser never contacts an outside provider while you read these pages,
  • has no contact form and no login. Nothing on these pages submits data to us.

There is therefore no consent banner, because there is nothing to consent to.

Two parts of our site work differently. The Creator Center at creators.032-ventures.com and the Seller Center at seller.032-ventures.com, together with our Shopify app, have accounts and a login, so they do process personal data. They are covered separately in § 8 and § 8a. Everything said above applies to the pages you are reading now.

§ 3 Server log data when you visit

Delivering a web page requires a technical exchange between your device and our server. During that exchange the following is processed:

  • your IP address,
  • the date and time of the request,
  • the page or file requested and the amount of data transferred,
  • the response status,
  • the browser type and version and the operating system,
  • the referring page, if your browser sends one.

Purpose: delivering the website, keeping it stable, and defending against attacks and abuse.

Legal basis: Art. 6 (1) (f) GDPR. Our legitimate interest is operating a website that works and is not taken down by attacks. This data is not used to identify individual visitors, and it is not combined with any other source.

Retention: log data is kept only for as long as it is needed for these purposes and is then deleted or anonymised.

§ 4 Hosting

This website is hosted on the infrastructure of Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, which delivers the pages and provides the protection against attacks described in § 3. Cloudflare acts as our processor under a data processing agreement pursuant to Art. 28 GDPR and processes the data described in § 3 exclusively on our instructions.

Because Cloudflare operates a worldwide network, data may be processed outside the European Economic Area, including in the United States. Cloudflare is certified under the EU-U.S. Data Privacy Framework, so transfers to it are covered by the European Commission's adequacy decision pursuant to Art. 45 GDPR. Should that certification lapse, the European Commission's Standard Contractual Clauses pursuant to Art. 46 (2) (c) GDPR, agreed with Cloudflare as a fallback, apply instead.

Legal basis: Art. 6 (1) (f) GDPR, for the same interest as in § 3.

§ 5 Contacting us by email

If you write to us, we process your email address, your name if you give it, and the content of your message in order to answer you. The same applies to any correspondence that follows.

Legal basis: Art. 6 (1) (b) GDPR where your message concerns a contract or steps taken before entering into one, otherwise Art. 6 (1) (f) GDPR, our legitimate interest in answering enquiries addressed to us.

Retention: until your enquiry is resolved and there is no longer any reason to expect it to be raised again. Statutory retention obligations, in particular under commercial and tax law, take precedence and can require us to keep correspondence longer.

Please note that ordinary email is not encrypted end to end. If a matter is sensitive, tell us and we will agree on another channel.

§ 6 Job applications

Applications are sent to us by email, to the address given in the job posting. We process the data you provide, typically your name, contact details, CV, and the documents you attach, in order to assess your application and run the hiring process.

Legal basis: § 26 (1) BDSG together with Art. 6 (1) (b) GDPR, processing for the purpose of deciding on the establishment of an employment relationship.

Retention: if we do not offer you a position, we delete your documents six months after the process ends, a period that allows us to answer claims under the German General Equal Treatment Act (AGG). If you tell us you would like to be kept on file for future openings, we keep them on the basis of your consent under Art. 6 (1) (a) GDPR, and you can withdraw that consent at any time. If we do offer you a position, your documents become part of your personnel file.

§ 7 Links to our marketplaces and other external sites

The marketplace selection on our For Brands and For Creators pages sends you to another website. That selection happens entirely in your browser: nothing is submitted to us, and we do not learn which option you chose.

Once you follow such a link, you leave this website. We have no control over what the site you land on does with your data, and its own privacy policy applies from that point on. This includes the marketplaces we operate, which run as separate services with their own accounts and their own policies.

§ 8 Creator Center and Seller Center

The Creator Center (creators.032-ventures.com), the Seller Center (seller.032-ventures.com) and the 032 Creator Center app have accounts and a login, and we process more there than on these pages: your contract details, tax information, payout data and, for brands, proof of insurance. What we process there, why, on what legal basis and for how long is set out in our Partner Privacy Policy (auf Deutsch). If you have not signed up for either centre, that policy does not apply to you.

§ 9 No automated decision-making

We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR on this website.

§ 10 Your rights

Under the GDPR you have the following rights in relation to your personal data:

  • Access (Art. 15), to be told whether and what data we process about you and to receive a copy,
  • Rectification (Art. 16), to have inaccurate data corrected and incomplete data completed,
  • Erasure (Art. 17), to have your data deleted where one of the grounds in that article applies,
  • Restriction (Art. 18), to have processing limited instead of deleted,
  • Data portability (Art. 20), to receive data you provided in a structured, commonly used, machine-readable format,
  • Objection (Art. 21), to object at any time, on grounds relating to your particular situation, to processing based on Art. 6 (1) (f) GDPR, which includes §§ 3 and 4 above,
  • Withdrawal of consent (Art. 7 (3)), where processing is based on your consent, with effect for the future.

To exercise any of these, write to contact@032-ventures.com. Exercising them costs you nothing.

§ 11 Right to lodge a complaint

You may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement (Art. 77 GDPR). The authority competent for us is:

Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Lautenschlagerstraße 20
70173 Stuttgart
Germany

§ 12 Changes to this policy

We update this policy when the website or the way we process data changes, for example when we add a service that did not exist before. The version in force is always the one published here, with the date of the last update shown at the top.