Legal
How Verana Ventures Ltd collects, uses and protects personal data on this website, under GDPR, LOPDGDD and UK GDPR.
01
The data controller for personal data processed through this website is Verana Ventures Ltd (company number 17027551, registered office at 71 Warwick Avenue, London W9 2PP, United Kingdom). The professional activity is operated by Elaine Aparecida Salvador (NIE/NIF Y4526021-A) from Barcelona, Spain. You can contact us by email at elaine@veranaventures.com for any matter related to your personal data, including to exercise the rights described below.
02
We collect only the personal data necessary to provide and improve this website and to respond to enquiries. Specifically: (a) information you choose to share when you contact us by email or via the contact form — typically your name, email address, organisation, job title and the content of your message; (b) standard technical information your browser sends when accessing the site — IP address, browser type and version, operating system, referring URL, and pages visited, recorded in server access logs; (c) cookie identifiers and your cookie consent decisions, as detailed in our Cookie Policy.
03
We process personal data to: (1) respond to enquiries and manage the professional relationship; (2) operate, secure and protect the website from misuse; (3) keep records of business correspondence; (4) measure aggregate audience analytics where you have given consent; (5) comply with legal obligations to which we are subject.
04
Each processing operation is supported by one of the legal bases set out in Article 6 of the GDPR: (a) your consent (Art. 6(1)(a)) — applies to analytics cookies and to the processing of your contact data based on the consent checkbox in the contact form; (b) pre-contractual and contractual necessity (Art. 6(1)(b)) — applies where your enquiry concerns a potential or existing engagement; (c) legitimate interest (Art. 6(1)(f)) — applies to running a professional advisory business, maintaining business correspondence, and site security; (d) compliance with legal obligation (Art. 6(1)(c)) — applies where retention or disclosure is required by law.
05
We share personal data only with the service providers we need to operate this professional activity, and only to the extent necessary, under a written processor agreement where required: (a) Vercel, Inc. — website hosting, edge delivery and Vercel Web Analytics; (b) email and cloud storage providers used to deliver and store correspondence; (c) CRM or other professional service providers we may use to manage the professional relationship; (d) professional advisers (lawyers, accountants) or competent authorities where disclosure is required by law or to defend our legal rights. We do not sell personal data and we do not share it for third-party advertising.
06
Some service providers, including our hosting and analytics provider, are established outside the European Economic Area and the United Kingdom. Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards under Article 46 GDPR: the European Commission's adequacy decision for the EU-US Data Privacy Framework (where the recipient is certified), the UK extension to the Data Privacy Framework, the European Commission's Standard Contractual Clauses (SCCs) supplemented where required by the UK International Data Transfer Addendum (IDTA), or another safeguard recognised under applicable law. Copies of the relevant safeguards are available on request.
07
We retain personal data only for as long as necessary for the purposes for which it was collected: (a) enquiry correspondence is retained for up to 2 years after our last interaction with you, unless the conversation leads to an engagement (in which case retention follows the terms of that engagement and applicable legal periods); (b) server access logs are retained for up to 30 days for security and abuse prevention; (c) your cookie consent decision is retained for up to 6 months from your last interaction with the banner; (d) records that must be kept under applicable law (e.g. tax records) are retained for the legally required period.
08
Under the GDPR, the LOPDGDD and the UK GDPR you have the following rights in relation to your personal data: access, rectification, erasure ("right to be forgotten"), restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent at any time (without affecting the lawfulness of processing carried out before withdrawal). To exercise any of these rights, contact elaine@veranaventures.com. We may ask for information to verify your identity. We will respond within 30 days of receiving a valid request, extendable by a further 60 days where the request is complex.
09
You have the right to lodge a complaint with a supervisory authority if you believe our processing of your personal data infringes applicable data protection law. The lead authorities you may approach are: in Spain, the Agencia Española de Protección de Datos (AEPD), www.aepd.es; in the United Kingdom, the Information Commissioner's Office (ICO), ico.org.uk; in any other EU/EEA Member State, your local data protection supervisory authority. We would welcome the opportunity to address your concerns directly first, so please consider contacting us before lodging a complaint.
10
We collect personal data directly from you when you contact us or when you visit the website. We do not acquire personal data about you from third-party data brokers or other indirect sources.
11
We do not use this website to take decisions about you based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.
12
This website is not directed to children. We do not knowingly collect personal data from individuals under the age of 16. If you believe we have inadvertently collected such data, please contact us and we will delete it.
13
We may update this notice from time to time to reflect changes in our practices, services or applicable law. The current version is always available at this URL.