Privacy Policy

Privacy Policy

This Privacy Policy explains how Wakonda Ventures B.V. (brand: dourovista) collects and processes personal data in connection with the ETA Amsterdam website, newsletter, community activities, and events. We handle your information responsibly and in accordance with the GDPR and Dutch privacy regulations. By using this website or sharing your data with us, you agree to the practices described in this Privacy Policy.

Last updated: 28th October 2025

This Privacy Policy explains how Wakonda Ventures B.V. (brand: dourovista) collects and processes your personal data in connection with the ETA Amsterdam website, events, newsletter, and community activities.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and the Dutch Telecommunicatiewet (for cookies and similar technologies).

1. Who we are (Controller)

Wakonda Ventures B.V. (brand: dourovista)
Keizersgracht 520, 1017 EK Amsterdam, The Netherlands
Email: hello@etaamsterdam.com
KvK: 87785870 | VAT: NL864405649B01

For questions about this policy or to exercise your rights, contact us at hello@dourovista.com.

2. What this policy covers

  • Visits to our website and landing pages
  • Use of our forms and newsletter sign-ups
  • Online and in-person events, webinars and recordings
  • Our social media integrations and analytics
  • Payments for any paid services we may introduce

3. How we obtain personal data

  • Directly from you: when you submit a form, subscribe to the newsletter, register for an event, email us, or interact with us at Meetups.
  • Automatically: via cookies and similar technologies (with your consent where required).
  • From third parties: analytics, advertising and social media platforms (subject to your settings and consent).

4. Types of personal data we process

  • Identification and contact: name, email address, phone (optional).
  • Professional details: role, company, interests (if you provide them).
  • Event data: registrations, attendance, recordings (audio/video if you speak on mic or appear on camera).
  • Technical data: IP address, device identifiers, browser/OS, pages viewed, timestamps, referral URLs.
  • Payment data: limited billing details via our payment provider (we do not store full card details).

5. Purposes and lawful bases

PurposeExamplesLawful basis
Website operation & securityload pages, prevent abuse, loggingLegitimate interests (GDPR Art. 6(1)(f))
Cookie consent & preferencesstore/remember consent choicesLegal obligation / Consent (GDPR Art. 6(1)(c)/(a)); Telecommunicatiewet art. 11.7
Analytics & performanceunderstand traffic and improve contentConsent (GDPR Art. 6(1)(a); Telecommunicatiewet art. 11.7)
Marketing & remarketingGoogle Ads, Microsoft AdvertisingConsent (GDPR Art. 6(1)(a))
Newsletter & updatesemail campaigns, community newsConsent (GDPR Art. 6(1)(a)); Soft opt-in for existing customers: Legitimate interests (Art. 6(1)(f)) + Telecommunicatiewet art. 11.7(3)
Event managementregistration, reminders, attendanceContract / Legitimate interests (Art. 6(1)(b)/(f))
Event mediaphotos/recordings used for education/promoLegitimate interests (Art. 6(1)(f)); you may object
Paymentsprocess fees for paid servicesContract (Art. 6(1)(b))
Respond to enquiriesforms, email, phoneLegitimate interests (Art. 6(1)(f))

We do not use automated decision-making that produces legal or similarly significant effects.

6. Cookies and similar technologies

We use cookies and similar technologies in line with Article 11.7 of the Dutch Telecommunicatiewet and GDPR.

  • Strictly necessary cookies (e.g., security, load balancing) – used on the basis of legitimate interests.
  • Non-essential cookies (e.g., analytics, advertising, social media) – used only with your consent.

Cookie management (Cookiebot)

We use Cookiebot by Usercentrics A/S (Havnegade 39, 1058 Copenhagen, Denmark) to display the cookie banner, collect and store consents, and provide a live cookie declaration. When you visit our site, Cookiebot sets a consent cookie and logs your consent choices.
Legal basis: legal obligation/consent (GDPR Art. 6(1)(c)/(a)); Telecommunicatiewet art. 11.7.

You can withdraw consent any time via the cookie banner link or your browser settings.
See the detailed cookie list in the on-page Cookiebot declaration.

7. Services we use (processors and third parties)

We only share personal data where necessary and with appropriate safeguards. Typical recipients include:

Hosting

ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.
Legal basis: legitimate interests (reliable hosting). A Data Processing Agreement (DPA) is in place.

Security

SolidWP (iThemes Media LLC, USA) monitors login attempts and suspicious activity; repeated attacker IPs may be shared with their network protection service.
Legal basis: legitimate interests (site security). International transfers safeguarded (see Section 10).

Forms

Google Forms / Google Ireland Limited is used for enquiries/registrations. Data you submit are processed on Google’s EU infrastructure; some metadata may be transferred to the US.
Legal basis: contract/legitimate interests; for any cookies, consent.

Analytics & Tagging

  • Google Analytics and Google Tag Manager (Google Ireland Limited). We use IP anonymisation and GA data controls.
  • Legal basis: consent.
  • Transfers may occur to the US via EU Standard Contractual Clauses (SCCs) and/or EU–US Data Privacy Framework (DPF) where the provider is certified.

Advertising / Remarketing (if enabled)

  • Google Ads & Remarketing (Google Ireland Limited)
  • Microsoft Advertising (Microsoft Corporation, USA)
    Legal basis: consent. Data may be used to build interest-based audiences. Transfers safeguarded via SCCs and/or DPF where applicable.

Social media embeds

  • Instagram (Meta Platforms Ireland Limited)
  • LinkedIn (LinkedIn Ireland Unlimited Company)
    These may set cookies or receive data when you interact.
    Legal basis: consent for non-essential cookies; joint controllership may apply for collection/transfer to the platform.

Newsletter & email delivery

We use Kit (by ConvertKit) / kit.com to manage newsletter subscriptions, deliver emails and measure performance (e.g., opens, clicks). The provider is established in the United States.
Legal basis: consent for sign-ups; for existing customers, legitimate interests (soft opt-in) + Telecommunicatiewet art. 11.7(3).
International transfers: protected by SCCs; where the provider is DPF-certified, transfers may rely on the DPF. You can unsubscribe at any time via the link in any email.

Payments (if applicable)

Stripe Payments Europe, Ltd (EU) / Stripe, Inc. (US) processes payments on our behalf. We do not store full card details.
Legal basis: contract. International transfers safeguarded via SCCs and/or DPF where applicable.

Online meetings

Google Meet (Google Ireland Limited) is used for video calls/webinars.
Legal basis: contract/legitimate interests; consent may apply for recording.

DPAs are in place where required. A full list of current sub-processors is available on request.

8. Events, recordings, and media use

We may photograph or record our events (online or in person). By attending, your image/voice may be captured. We use this content for educational and promotional purposes relating to ETA Amsterdam. If you prefer not to be captured, please inform us in advance and avoid camera/microphone participation.

Legal basis: legitimate interests (GDPR Art. 6(1)(f)). You may object (see Section 12).

9. Data retention

We retain personal data only as long as necessary for the purposes set out in this policy or to meet legal obligations.

  • Enquiries: up to 24 months after last contact.
  • Event registrations/attendance: up to 24 months after the event.
  • Newsletter: until you unsubscribe; your email may remain on a suppression list indefinitely to honour your opt-out.
  • Analytics: as per tool settings (configured in Google Analytics).
  • Payment records: per statutory tax and accounting retention periods.

10. International transfers

Some providers are located outside the EEA. Where transfers occur, we rely on:

  • an EU adequacy decision (e.g., EU–US Data Privacy Framework) where the recipient is certified; or
  • the European Commission’s Standard Contractual Clauses (SCCs), plus supplementary measures where required.

Copies of the SCCs are available on request.

11. Your rights

You have the following rights under GDPR:

  • Access to your personal data
  • Rectification of inaccurate data
  • Erasure (“right to be forgotten”)
  • Restriction of processing
  • Portability of data you provided to us
  • Objection to processing based on legitimate interests, including direct marketing
  • Withdrawal of consent at any time (affects future processing only)

To exercise your rights, email hello@dourovista.com. We may need to verify your identity before actioning your request.

You also have the right to lodge a complaint with the Dutch supervisory authority:
Autoriteit Persoonsgegevens (AP)https://autoriteitpersoonsgegevens.nl – Tel: 088 – 1805 250.

12. Security

We implement appropriate technical and organisational measures to protect personal data, including TLS encryption in transit, access controls, and regular maintenance and updates. No method of transmission or storage is 100% secure; we work to minimise risk.

13. Children

Our services are not directed to persons under 18. If you believe a child has provided personal data, please contact us and we will delete it.

14. Third-party links

Our website may contain links to external sites. We are not responsible for their privacy practices. Please review their policies.

15. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date will be revised and, where appropriate, we will notify you of material changes (e.g., via website notice or email).

Contact

Wakonda Ventures B.V. (brand: dourovista)
Keizersgracht 520, 1017 EK Amsterdam, The Netherlands
Email: hello@etaamsterdam.com