Privacy Statement.

Last updated: 21 October 2025

This Privacy Statement describes how Waves Capital Fund Management B.V. (“Waves Capital”, “we”, “our” or “us”) collects and processes personal data in the context of its website and related business activities. We are committed to handling personal data responsibly, securely, and in compliance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

1. Controller Information
Waves Capital Fund Management B.V.
KvK number: 97273457
Email: info@wavescapital.eu

Waves Capital Fund Management B.V. acts as the controller for the processing of personal data described in this Privacy Statement.

2. Categories of Personal Data Collected

We only collect personal data that you voluntarily provide to us through the contact form available on our website or through direct communication. This may include:

  • Identification and contact information, such as your name, email address, and telephone number

  • Company information, including the name of your company, your position, and your company’s website

  • Pitch decks or other documents you choose to submit for review

  • Any other information you include in your message or communications with us

We do not use cookies or similar technologies on our website to collect or track personal information.

3. Purposes of Processing
The personal data provided to Waves Capital is processed solely for the following purposes:

  • To review and respond to your inquiry or submission

  • To assess potential investment opportunities

  • To maintain communication in the context of potential business cooperation or investment discussions

  • To comply with applicable legal and regulatory obligations

Personal data will not be used for marketing, profiling, or automated decision-making purposes.

4. Legal Basis for Processing
Waves Capital processes personal data on the following legal grounds as provided under the GDPR:

  • Article 6(1)(f) GDPR — Legitimate Interests: processing is necessary for the purposes of our legitimate interests in evaluating and maintaining communication regarding potential business or investment opportunities; and

  • Article 6(1)(c) GDPR — Legal Obligation: processing is necessary to comply with legal or regulatory requirements applicable to Waves Capital.

5. Data Retention
Waves Capital retains personal data only for as long as is necessary to fulfill the purposes for which it was collected or as required by applicable law. Unless otherwise required, personal data will be deleted no later than 24 months after the last contact or interaction between you and Waves Capital.

6. Data Sharing and Disclosure
Waves Capital does not sell, rent, or otherwise commercially share personal data. Personal data may be shared only with:

  • Service providers who support our operations (such as secure email or document storage providers), subject to strict confidentiality and data protection obligations; and

  • Regulatory or governmental authorities, if and to the extent required by applicable law or regulation.

All third parties engaged by Waves Capital are contractually bound to handle personal data in accordance with applicable data protection laws.

7. Data Security
Waves Capital applies appropriate technical and organizational measures to ensure a level of security appropriate to the risk, protecting personal data against unauthorized access, loss, misuse, alteration, or disclosure. Access to personal data is limited to authorized personnel who require such access for legitimate business purposes and are bound by confidentiality obligations.

8. Your Rights
As a data subject, you have the following rights under the GDPR:

  • Right of access: to obtain confirmation as to whether we process your personal data and, if so, to receive a copy thereof

  • Right to rectification: to request correction of inaccurate or incomplete data

  • Right to erasure: to request deletion of your personal data in certain circumstances

  • Right to restriction of processing: to request limited processing of your personal data under specific conditions

  • Right to object: to object to processing based on legitimate interests

  • Right to lodge a complaint: to submit a complaint to the competent supervisory authority, which in the Netherlands is the Autoriteit Persoonsgegevens (www.autoriteitpersoonsgegevens.nl)

Requests regarding these rights can be submitted via info@wavescapital.eu. Waves Capital will respond to such requests in accordance with the GDPR and within the applicable statutory timeframes.

9. Updates to This Privacy Statement
Waves Capital may amend this Privacy Statement from time to time to reflect changes in legal requirements or in the way we process personal data. The most recent version will always be available on our website, with the date of the latest revision indicated at the top of this page.

10. Contact Information
For any questions, requests, or complaints regarding this Privacy Statement or the processing of your personal data, you may contact: info@wavescapital.eu