1. Data Controller

The data controller for this portal is Venturallies OÜ, an entity incorporated in the Republic of Estonia (Registration Number: 17107535). For any data protection inquiries, contact our team at compliance@venturallies.com.

2. Scope and Nature of Collection

To comply with international anti-money laundering (AML) protocols and verify investor accreditation categories, Venturallies OÜ utilizes a manual identity verification framework. Upon account registration, users are legally mandated to upload:

• High-resolution government-issued identification (Passports/ID Cards).
• Proof of residential address (Utility bills or bank statements issued within the last 3 months).
• Certified Source of Wealth confirmations (for allocations clearing the €100,000 sophisticated threshold).

3. Purpose and Legal Basis for Processing

We process this personal data under GDPR Article 6(1)(c) (Compliance with legal obligations) and Article 6(1)(b) (Performance of a contract). The information collected is used strictly to vet subscribers against international sanctions lists, confirm identity validity, and process direct corporate bond subscriptions.

4. Data Storage, Security, and Encryption

Venturallies OÜ does not store identity documents on unencrypted local drives or standard, open cloud platforms. All uploaded identification files are completely isolated inside an access-controlled database protected by end-to-end AES-256 cryptographic encryption. Access is strictly limited to authorized compliance directors.

5. Data Retention and Deletion

Pursuant to international financial auditing standards and Estonian accounting laws, identity records and transactional metadata are securely archived for a mandatory retention period of five (5) years following the maturity and closure of the subscriber's corporate bond series. After this period, data is permanently erased from our active databases.