Last updated: 29 September 2026
Privacy statement
We handle your personal data with care. This statement explains which data Ormac uses, why we use it, and your choices and rights.
Who is responsible?
Ormac B.V. is responsible for processing personal data for this website and for enquiries and investment proposals you send to us.
Ormac B.V. · KvK 17148427
Contact us
When you submit the application form, our server processes your entries and documents and passes them to Resend for email delivery to Ormac. The website does not keep applications in its own database. If sending is unavailable, the form tells you and you can try again later.
Which data do we use?
When you submit the form or email us, we receive your email address, message and the information and attachments you choose to send. For an investment proposal, this may include your name, role, phone number, company details, financial information, pitch deck, and information about your team or co-investors. Only include personal data necessary for your enquiry or application.
When you visit the website, technical data such as your IP address, requested page and browser information are used to deliver the page. Hosting services may also process this information for security and troubleshooting.
Why do we use this data?
We use contact and application information to answer your enquiry, assess your investment proposal and stay in touch with you. Where you request steps towards a possible agreement, that preparation may be the legal basis. For business contact with company representatives, we rely on our legitimate interest in assessing proposals and handling correspondence.
We use technical data for our legitimate interest in providing a working, secure website. Where the law requires processing or retention, we rely on that legal obligation. If we ask for consent for a separate purpose, you can withdraw it at any time. This website does not use data for advertising profiles or solely automated investment decisions.
How long do we keep data?
We keep correspondence and application information for as long as needed to answer your enquiry, assess your proposal, and handle the resulting discussions or agreements. It is then deleted unless a legal retention requirement or a dispute requires further retention. The relevant criteria are the duration of the assessment, any resulting relationship and applicable legal obligations. You can ask us which retention period applies to your information.
Cookie lifetimes are listed below. Applications are processed temporarily on the server during sending, then retained by the email service and in our mailbox. To limit abuse, the server keeps an attempt counter with a hash of the email address for up to 15 minutes; this counter contains no application or documents.
Email delivery
Resend processes your application content and attachments to deliver the email.
Google Analytics: only with your consent
With your consent, we use Google Analytics 4, provided by Google, to understand how our website is used and where it can be improved. We measure page visits and the number of successfully submitted plans, including the language version. Google processes a cookie identifier and technical information such as browser and device details. Your IP address is also processed when connecting to Google. This is not anonymous data.
The legal basis is your consent. Before you consent, or if you refuse, we do not load Google Analytics or send measurement data to it. Advertising personalisation and Google Signals are disabled in our integration. We do not send names, email addresses, form contents, financial information, attachments or application references to Analytics. Our page measurements exclude URL query parameters and fragments.
Google may process data outside the EEA, including in the United States. The section on processing outside the EEA also applies here. Analytics cookies last up to 180 days. Google Analytics user and event data retention is set to 2 months, without renewal on new activity. This setting does not apply to aggregated standard reports. You can ask Ormac for information about deletion of your data. Withdrawing consent stops future measurement but does not automatically delete data already collected.
Processing outside the EEA
Using international service providers may involve processing outside the European Economic Area. Such transfers may take place only with a valid safeguard, such as an adequacy decision or approved standard contractual clauses and additional measures where needed. Use the contact options on this website for information about the providers, locations and safeguards applicable to your data.
Your privacy rights
You can ask to access, correct or delete your personal data. Depending on the circumstances, you may also request restriction or portability and object to processing based on a legitimate interest. You can withdraw consent without affecting the lawfulness of earlier processing.
For a privacy request, please use the contact options on this website. We may ask for additional information to verify your identity, but do not routinely request a copy of your identity document. We normally respond within one month. If a permitted extension is necessary, we will tell you within that month. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Questions and updates
For questions about your data, please use the contact options on this website. We update this statement when the website or our processing changes. The date above shows when this text was last updated.