Privacy policy

Maki Ventures Oy

Last updated: June 2026

1. Introduction

MAKI Ventures Oy (“MAKI.VC”, “we”, “us”, or “our”) collects and processes personal data of users of our online services and website, as well as personal data relating to our investors, portfolio companies, deal flow contacts, and other business partners.

This Privacy Policy applies to personal data we obtain from individuals (“you” or “data subjects”) through our websites, online services, and web-based applications (collectively, the “Services”), as well as in the course of our business activities as a venture capital fund manager.

Some of our services may be subject to a separate privacy policy. If a separate privacy policy applies to a particular service, we will post it on the relevant website or otherwise make it available in connection with that service.

We may update this Privacy Policy from time to time to reflect changes in our data processing practices or applicable law. The current version will always be available on our website. We will not make material changes to this Privacy Policy or reduce your rights without prior notice.

This Privacy Policy covers data processing carried out by MAKI.VC only. We are not responsible for the privacy practices of third parties whose websites or services may be linked from our Services.

2. Controller and Contact Information

Data controller: Maki Ventures Oy

Maria 01, Building 5, entrance B Lapinlahdenkatu 16, 00180 Helsinki, Finland

Contact for data protection inquiries and requests: notices@maki.vc

You may exercise your rights or ask questions about our processing of your personal data by contacting us at the address above. We will respond within the timeframes required by applicable law (generally within one month).

This Privacy Policy is governed by the laws of Finland and applicable EU data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes, relying on the legal bases indicated.

Fund management and investor relations

We process personal data to manage our funds and communicate with existing and prospective limited partners (LPs), including capital call notices, distributions, reporting, and LP portal access.

Legal basis: performance of a contract; our legitimate interests to conduct business and to meet our contractual obligations; compliance with statutory obligations.

Deal flow and portfolio management

We process personal data about founders, executives, and representatives of companies we have invested in or are considering investing in. This includes deal evaluation, due diligence, portfolio monitoring and support, and board-level engagement.

Legal basis: our legitimate interests in conducting our business as a venture capital fund manager.

CRM and network management

We maintain a contact database of our network including investors, founders, advisors, and ecosystem participants. We believe in the “pay it forward” approach, and we may proactively reach out to relevant contacts to make introductions or share opportunities.

Legal basis: our legitimate interests to conduct business and to build our network.

Compliance with legal and regulatory obligations

As an alternative investment fund manager (AIFM) regulated under Finnish and EU law, we are required to collect and retain certain personal data to comply with anti-money laundering (AML) legislation (Finnish Act on Detecting and Preventing Money Laundering and Terrorist Financing, 444/2017), investor classification requirements (professional / non-professional), tax reporting obligations, and financial sector regulations.

Legal basis: compliance with legal obligations.

Website analytics and marketing

We use cookies and similar technologies on our website to understand how visitors interact with our content, improve our Services, and support our marketing activities.

Legal basis: your consent (where required by law); our legitimate interests to develop our business.

Events and community initiatives

We process personal data to organise events, workshops, and community activities relevant to the startup ecosystem.

Legal basis: our legitimate interests to conduct business and to build our network; your consent.

4. Whose Personal Data We Collect

We process personal data about:

  • Limited partners and prospective investors – individuals who have invested or are considering investing in funds managed by MAKI.VC
  • Portfolio company representatives – founders, executives, board members, and employees of companies we have invested in
  • Deal flow contacts – founders and executives of companies we are evaluating for investment
  • Network contacts – investors, advisors, ecosystem partners, and other professionals in our network
  • Website visitors – individuals who visit maki.vc or use our online services
  • Event participants – individuals who attend events organised or co-organised by MAKI.VC

5. Categories of Personal Data

General contact and professional data

We generally process: name, email address, phone number, location (country and city), company name, position and title, company address, and professional background and experience.

Website and usage data

When you visit our website, we collect information such as IP address, browser type, pages visited, time spent, and referral sources, via cookies and analytics tools.

Investor and LP data

For limited partners, prospective investors, and related persons, we collect additional information required for fund management and regulatory compliance, including:

  • National identification numbers / personal identity codes / dates of birth
  • Tax identification numbers and tax residencies / nationalities
  • Copies of identity documents (e.g. passports)
  • Status as a politically exposed person (PEP) or related/affiliated person
  • Beneficial ownership information
  • Bank account details
  • Source of funds and financial standing information
  • Investment experience and objectives
  • Customer due diligence documentation required under AML law

Some of this data may constitute “special category” or sensitive personal data. We process it based on and only to the extent required by our statutory obligations.

Preferences and consents

We record your choices regarding direct marketing and cookies.

6. Sources of Personal Data

We collect personal data primarily from the person themselves, whether through direct interactions, forms, our website, or our investor portal. We may also obtain personal data from:

  • Publicly available sources such as LinkedIn, company registers, and news sources
  • Third-party databases and information providers used in our CRM
  • Introducers, co-investors, and others who refer contacts to us
  • Relevant authorities and regulated information providers, where required to comply with financial laws and regulations

7. Third-Party Services and Data Processors

We use third-party service providers who process personal data on our behalf. These companies provide services we use in our business, such as customer relationship management (CRM) software, productivity and communications tools, and services to help us in meeting our obligations related to knowing our customers (KYC). Where we transfer personal data to processors, we ensure appropriate data processing agreements are in place in accordance with GDPR Article 28.

As regards our website, we use Google Analytics to understand how users interact with our website. You can find more information about how Google processes personal data at https://policies.google.com/technologies/partner-sites.

8. Cookie Policy

Our website (maki.vc) uses cookies and similar tracking technologies to operate, analyse, and improve our Services.

Types of cookies we use

  • Strictly necessary cookies – Required for the website to function. These cannot be disabled.
  • Analytics cookies – Help us understand how visitors interact with the site (e.g. pages visited, time on site). We use this information to improve our content and Services.
  • Marketing and tracking cookies – Used to understand the effectiveness of our communications and marketing activities.

You can find more information about the individual cookies we use and manage your cookie preferences via our cookie consent banner. You may also manage cookies through your browser settings, though disabling certain cookies may affect the functionality of our website.

9. Transfers of Personal Data

We may transfer personal data to processors or service providers located outside the EU/EEA. In such cases, we ensure that adequate safeguards are in place, such as:

  • The European Commission has issued an adequacy decision for the recipient country, or
  • Standard Contractual Clauses (SCCs) approved by the European Commission are in place.

We will not sell personal data to third parties. We may share personal data in connection with a merger, acquisition, sale of assets, or similar corporate transaction, subject to appropriate confidentiality obligations.

10. Retention

We retain personal data for as long as necessary for the purposes set out in this Privacy Policy, and for as long as required by applicable law. In practice:

  • LP and investor data is retained for the duration of the fund relationship and for the period required under applicable financial and AML regulations (typically at least 5 years after the end of the business relationship).
  • CRM and network contact data is retained for as long as the contact relationship is active or it is in our legitimate interests to do so.
  • Website analytics data is retained in accordance with the policies of our analytics providers.
  • Deal flow data relating to companies we did not invest in is retained for a reasonable period for business and analytical purposes (such data generally only relates to companies but may include some personal data as well).

When data is no longer needed, we delete or anonymise it in a secure manner.

11. Your Rights

Under the GDPR and applicable Finnish law, you have the following rights in relation to your personal data:

Right of access

You have the right to obtain confirmation of whether we process your personal data and to request a copy of the data we hold about you.

Right to rectification

You have the right to request correction of inaccurate or incomplete personal data.

Right to erasure

You have the right to request deletion of your personal data in certain circumstances (e.g. when it is no longer needed, or you withdraw consent), subject to our legal obligations to retain data.

Right to restriction

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Right to object

You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis. You always have the right to object to the use of your data for direct marketing purposes.

Right to data portability

Where processing is based on your consent or a contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format.

Right to withdraw consent

Where we rely on your consent as a legal basis, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact us at notices@maki.vc. We will respond within one month of receiving your request. In complex cases we may extend this period by a further two months, in which case we will notify you. Please also note that the use of some of the rights may be subject to limitations or certain conditions based on applicable law.

Personal data is not used for making automated decisions.

If you believe our processing of your personal data is inconsistent with applicable data protection law, you have the right to lodge a complaint with the Finnish data protection authority:

Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) tietosuoja.fi — PO Box 800, 00531 Helsinki

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. We will publish updated versions on our website and, where required, notify affected individuals directly.