Legal
Privacy Policy
Last updated: September 21, 2026
Who is responsible
The controller for personal data processed through this website is Web3 Factory GbR, Möckernstraße 120, 10963 Berlin, Germany, represented by Moritz Schwarzmann. For questions or to exercise your rights, email [email protected].
Visiting the website
Cloudflare provides hosting, content delivery and security for this website. Delivering a page requires processing connection information, including your IP address, requested URL, request time, browser information and response status. This also helps detect abuse and diagnose failures. This necessary processing takes place even if you decline optional analytics or embedded content. Our legal basis is Article 6(1)(f) GDPR: our legitimate interest in providing a reliable and secure website. Fonts and site images are served with the website; no external font service is loaded.
Provider: Cloudflare, Inc., USA. Further information: Cloudflare Privacy Policy.
Contact, investor introductions and deck requests
We process the name, email address and information you choose to send us. Depending on the form, this may include your company, selected service, message, project name, website or deck link, target raise and timeline. We use this information to answer your enquiry and arrange the requested next steps. Providing it is voluntary, but we need contact details to respond. You can also email us directly.
For enquiries about a possible engagement, the legal basis is Article 6(1)(b) GDPR (steps at your request before entering a contract). For other correspondence, we rely on Article 6(1)(f) GDPR and our legitimate interest in responding to business enquiries. Submitting a request does not subscribe you to a marketing mailing list.
Website forms are processed through Cloudflare and sent by Resend to our designated team mailbox. Resend receives the submitted content and delivery details. We do not maintain a separate website database of submissions; correspondence is handled in our email system. Provider: Resend, Inc., USA. See the Resend Privacy Policy. Investor introductions are reviewed by our team; the website does not automatically decide eligibility or forward your project to investors.
Spam protection
When you submit a form with the security check enabled, Cloudflare Turnstile checks whether the request appears automated. It may process your IP address, browser and device information and signals from your interaction with the challenge. It loads when you submit the form, not on the initial page visit. This security processing is separate from optional analytics consent and relies on Article 6(1)(f) GDPR, our legitimate interest in preventing spam and abuse. Where access to device information is strictly necessary for the requested form service, Section 25(2)(2) TDDDG applies. You can contact us by email instead.
Your privacy choice
Optional analytics and embedded content are off until you allow them. The footer’s privacy settings let you change your choice. We store your choice, its version and the decision time in your browser’s local storage under “w3f-consent-v1”. This record has no automatic expiry; it remains until replaced or your browser’s site data is cleared. It is used to respect your choice, not to track you. The legal basis is Article 6(1)(f) GDPR and, for the necessary storage of your requested preference, Section 25(2)(2) TDDDG.
Optional processing relies on Article 6(1)(a) GDPR and, where applicable, Section 25(1) TDDDG. You can withdraw consent without affecting the lawfulness of earlier processing. Withdrawing consent does not automatically erase information already received by a provider; you can contact us to exercise your data rights. You may also clear cookies and site data in your browser.
Calendly, LinkedIn and external links
Calendly booking calendars and LinkedIn posts are embedded only after you allow optional content. Once loaded, the provider receives connection and browser information and may use cookies or associate your visit with an existing account. Calendly also processes the information you enter to arrange an appointment. Providers: Calendly LLC, USA, and LinkedIn Ireland Unlimited Company, Ireland, with possible processing in the USA. See the Calendly Privacy Notice and LinkedIn Privacy Policy.
Direct links to booking pages, social networks, client websites and AI assistants take you to those providers’ websites, where their own privacy notices apply. AI-assistant links contain a prepared prompt about Web3 Factory; we do not include your enquiry or form contents in it.
Recipients and international processing
Data is available to team members handling your request and providers performing the services described above. Providers may process data outside the European Economic Area, including in the USA. Depending on the recipient and service, a transfer requires an applicable adequacy decision or appropriate safeguards such as the European Commission’s standard contractual clauses. The linked provider notices describe their transfer arrangements. Contact us for information about the safeguards applicable to your data or a copy where available.
How long data is kept
The retention period for correspondence is determined by whether your enquiry is still being handled, whether it leads to an engagement, and whether records are needed to comply with legal retention obligations or establish, exercise or defend legal claims. Data should be deleted when these purposes no longer apply. We do not apply a website-wide automatic deletion timer to mailbox correspondence. Hosting, security and delivery records are subject to the relevant provider’s retention arrangements. You can ask us about the records relating to you or request deletion at [email protected].
Your rights
Subject to the conditions in the GDPR, you have rights of access, rectification, erasure, restriction and data portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests. You can withdraw consent at any time. We do not use the website to make automated decisions with legal or similarly significant effects about you.
You may complain to a supervisory authority, in particular where you live, work or believe an infringement occurred. Our local authority is the Berliner Beauftragte für Datenschutz und Informationsfreiheit. You do not have to contact us before making a complaint.
Changes and contact
We update this notice when the website or its processing changes. The date above identifies this version. For privacy enquiries, contact [email protected] or write to Web3 Factory GbR, Möckernstraße 120, 10963 Berlin, Germany.