Skip to content
Ocean One Ventures

Privacy Policy (Datenschutzerklärung)

1. Overview

We take the protection of your personal data seriously and process it only as the law allows: the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG). This notice explains what happens to your data on www.ocean1.vc (the website) and, in section 11, on app.ocean1.vc (the founder platform). Status: November 2026.

2. Controller

Ocean One Ventures GmbH Gänsemarkt 33 20354 Hamburg Germany Represented by: Steffen Maas, Dietlind Wittig

Email: steffenocean1.vc

Web: ocean1.vc

3. Hosting and server log files

The website is hosted by Google Ireland Limited (Firebase Hosting, Gordon House, Barrow Street, Dublin 4, Ireland), which acts as our processor. When you visit a page, your browser transmits technical data that is processed in server log files: IP address, date and time of the request, the file requested, the referrer URL, browser type and version and the operating system. The legal basis is our legitimate interest in a secure and stable website (Art. 6(1)(f) GDPR). The data is used only for operation and security, is not merged with other data and is kept only as long as these purposes require.

4. Contact form and e-mail

If you write to us through a form on the website or by e-mail, we process the data you enter (name, e-mail address, topic, message) to answer your enquiry. The forms transmit your entry over an encrypted connection to the service Web3Forms (web3forms.com), which forwards it to us by e-mail and acts as our processor. The legal basis is Art. 6(1)(b) GDPR where your enquiry concerns a contract or steps before one, and otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We keep the enquiry for six months after it has been dealt with, for follow-up questions, unless statutory retention periods apply. We do not pass it on to third parties other than our processors without your consent.

5. Newsletter

If you subscribe to our newsletter "THE LIGHTHOUSE", we use your e-mail address (and, if you give it, your name) to send it to you. We do this only with your consent (Art. 6(1)(a) GDPR, Section 7(2) No. 3 UWG). You give it by ticking the consent box when you subscribe. We keep the proof of your consent (the consent text shown, your address and the time of subscription). The newsletter is sent through MailerLite, a service provider based in the European Union that acts as our processor. Our newsletters contain a tracking pixel and tracked links: we record per recipient whether and when a newsletter was opened and which links were clicked, to improve our content. The consent you give when subscribing covers this measurement. You can refuse it by blocking the loading of images in your e-mail program (the open is then not recorded), and you can withdraw your consent at any time with effect for the future, using the unsubscribe link in every newsletter or by e-mail to us. We then delete your address from the list, keeping it only on a block list for as long as needed to honour your withdrawal.

6. Pitch deck analysis, waitlists and downloads

Pitch deck analysis: If you upload a pitch deck, the file is transmitted to our servers (Google Cloud, region europe-west1, Belgium), where it is stored together with the analysis, and its content is analysed by an AI model of Google via an interface (API). Please upload only documents you are entitled to share and that contain no more personal data than necessary. To prevent misuse we allow at most five analyses per day and visitor; for this we keep a one-way hash of your IP address (not the address itself) for the day (Art. 6(1)(f) GDPR). If you give us your e-mail address to receive the full result or to be contacted, we process it for that purpose on the basis of your consent or request (Art. 6(1)(a) and (b) GDPR); the entry is transmitted to us through Web3Forms (see section 4). We store the deck and the analysis until the purpose has ceased; you can ask us at any time to delete them. Waitlists and downloads: If you sign up for a waitlist, a programme or the download of a publication, we process the data you enter (such as name and e-mail address) to handle your sign-up, send you the content you asked for and inform you about the launch or programme you signed up for (Art. 6(1)(b) and (a) GDPR). The sign-up is transmitted through Web3Forms. Where you tick a box for further information or the newsletter, that is based on your consent, which you can withdraw at any time.

7. Google Analytics

This website and the Ocean One Founder Platform (app.ocean1.vc) use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), but only if you consent. When you first visit either of them, a banner asks whether you accept analytics cookies. Until you accept, no connection to Google is made for analytics and no analytics cookies are set. If you accept, Google Analytics sets cookies in your browser and Google receives usage data about your visit (for example the pages viewed, approximate location, device and browser information and your IP address). On the founder platform we send Google Analytics only the address of the page without its parameters; we do not send your name, e-mail address, entries or documents. Google Analytics 4 does not store IP addresses in its reports. The cookies are named "_ga" and "_ga_<ID>" and are stored for up to two years. The usage data is retained in Google Analytics for 12 months and then deleted automatically. We have concluded the data processing terms with Google (Art. 28 GDPR). The data is processed by Google and may be transferred to the United States; Google LLC is certified under the EU-US Data Privacy Framework. Google uses this information on our behalf to evaluate the use of the website and the platform, compile reports on their activity and provide other services relating to website activity and internet usage. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). You can withdraw your consent at any time with effect for the future by choosing "Cookie settings" in the footer of the website or of the platform and declining; the Google Analytics cookies are then deleted. The withdrawal does not affect the lawfulness of the processing carried out until then. Your choice is stored in your browser (local storage) so that we do not have to ask again on every visit. For more information on how Google processes data, please visit: https://policies.google.com/privacy

8. Local storage and cookies

Apart from Google Analytics after your consent (section 7), the website sets no cookies and uses your browser's local storage only for what you have asked for: your cookie choice (key o1-consent). The language is part of the page address (/de/ is German) and is not stored. If you have passed the download form of a whitepaper, a marker that this browser has done so (key o1-whitepaper-unlocked:<name>), and if you open or close a panel in our research tools, that choice (keys oceanjobs-panel-v2:<panel>). We do not store your name or e-mail address in your browser. These entries are strictly necessary to provide the function you requested (Section 25(2) No. 2 TDDDG) and are not used to track you. You can delete them in your browser at any time; we will then ask again about your cookie choice. The founder platform additionally stores your sign-in session, your language, your display theme and your cookie choice (key o1-consent; see section 11).

9. Fonts, images and external links

The fonts of this website are stored on our own servers; no connection to Google Fonts or another font service is made. Company logos and icons shown in our research tools are fetched by our servers, not by your browser, so your IP address is not transmitted to the logo providers. Our pages link to other websites (for example LinkedIn); no data is transmitted to them until you click such a link, and their privacy notices apply from then on.

10. Recipients and transfers to third countries

Our processors are Google Ireland Limited (hosting, cloud infrastructure, analytics only after consent, AI models), Web3Forms (forwarding of form entries) and MailerLite (newsletter). We have concluded data processing agreements with them under Art. 28 GDPR. Some of these providers are part of groups outside the European Economic Area (in particular Google LLC, USA). Transfers rely on an adequacy decision of the European Commission (EU-US Data Privacy Framework, where the recipient is certified) or on the standard contractual clauses (Art. 45, 46 GDPR). Beyond that, we pass data on only where we are legally obliged to or you have consented.

11. Founder platform (app.ocean1.vc)

Account: To register and sign in we process your e-mail address and the sign-in data of the authentication service of Google (Firebase Authentication). Your sign-in session is stored in your browser; it is strictly necessary for the platform (Section 25(2) No. 2 TDDDG). The platform also stores your language and display theme in your browser. Founder agreement and modules: We process the data you give us and upload (your startup profile, the founder agreement and its signature with time stamp, documents such as your pitch deck, readiness reports, round plans, investor lists and knowledge-base items) to provide the platform to you under the founder agreement (Art. 6(1)(b) GDPR). The data is stored on Google Cloud infrastructure; no browser reads it directly, only our servers do, after checking your sign-in and your access rights. AI analysis and assistant: To score your deck, write the investment note and answer your questions, we send the relevant content to AI models of Google through an interface (API); voice functions use a speech service provider as a further processor. We do not use the platform data of founders to train models and do not give it to other founders. Documents you upload and web pages we fetch are treated as data, never as instructions. Investor data: The investor information the platform shows you comes from our own contacts and from public sources. We store it in a customer-relationship-management service as our processor. For the individuals concerned, the information obligations of Art. 14 GDPR are met by this notice; they can object at any time (Art. 21 GDPR, contact in section 2). 1:1 support requests: If you send a support request, its content (your name, e-mail address, startup, the topics and message you chose and, if you attach it, a summary of your readiness result) is forwarded to us through Web3Forms and stored on the platform, to answer you. E-mails: The platform sends service e-mails (for example the signed agreement) from our own business mailbox (Google Workspace). We keep your data as long as your account or the founder agreement exists and afterwards for as long as statutory retention periods require; you can ask us to delete your account at any time.

12. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where processing rests on your consent, you can withdraw it at any time with effect for the future (Art. 7(3) GDPR); the lawfulness of the processing until then is not affected. To exercise your rights, write to us at the address in section 2. You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is: Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit, Ludwig-Erhard-Str. 22, 20459 Hamburg, Germany (datenschutz.hamburg.de).

13. SSL/TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us. You can recognise an encrypted connection by the "https://" in the address line of your browser and by the lock symbol.

14. Changes

We update this notice when our services or the legal situation change. The current version is always available at www.ocean1.vc/privacy.