Legal
Privacy Policy
Last updated: 21 May 2026
1. Data Controller
The data controller responsible for your personal data is:
Ventures Atelier Sole Proprietorship
HQ
Hezestraat 66
3290 Diest, Belgium
Remote office
Josep de Peray 23 B/1, 08173 Sant Cugat del Vallès, Spain
Tel: +32 477 62 05 37
BCE/KBO: 1018.592.941
No Data Protection Officer (DPO) has been appointed, as our processing activities do not meet the thresholds under GDPR Article 37. For any data protection enquiries, contact us directly at the address above.
2. Data We Collect and Why
We process personal data in the following contexts:
Contact enquiries
- Data
- Name, email address, message content
- Purpose
- Responding to your enquiry and initiating a potential engagement
- Legal basis
- Legitimate interest (GDPR Art. 6(1)(f)) — to respond to business enquiries
- Retention
- 2 years from last contact, or until you request deletion
- Recipients
- Resend, Inc. (email delivery processor — see Section 4)
AI Readiness Audit
- Data
- Website URL you submit, email address
- Purpose
- Performing the audit of the submitted URL and delivering results to you
- Legal basis
- Performance of a contract / pre-contractual steps at your request (GDPR Art. 6(1)(b))
- Retention
- Your email is retained only for the duration of the audit session and report delivery. The submitted URL is processed in real time and not stored.
- Recipients
- Anthropic, PBC (AI analysis — see Section 4 for EEA transfer details); Resend, Inc. (report delivery)
We do not process special category data (GDPR Art. 9) or data relating to criminal convictions (Art. 10).
3. Automated Decision-Making
The AI Readiness Audit uses an automated system (powered by Anthropic's Claude model) to analyse your submitted website URL and produce a scored report. This constitutes automated processing within the meaning of GDPR Article 22.
The audit scores are informational and advisory in nature. They do not produce legal effects or similarly significant effects on you, and no decision is made solely on the basis of the automated output without human review or follow-up.
You may request a human review of any audit result by contacting us at contact@ventures-atelier.com.
4. Processors and International Transfers
We engage the following data processors. Where a processor is located outside the European Economic Area (EEA), we rely on Standard Contractual Clauses (SCCs) adopted under GDPR Article 46(2)(c) as the transfer safeguard.
| Processor | Purpose | Location | Transfer basis |
|---|---|---|---|
| Resend, Inc. | Transactional email delivery | USA | SCCs |
| Anthropic, PBC | AI analysis for audit service | USA | SCCs |
| Vercel, Inc. | Website hosting and infrastructure | USA / EEA | SCCs |
We do not sell, rent, or share your personal data with third parties for their own marketing purposes.
5. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- →Right of access (Art. 15): You may request a copy of the personal data we hold about you.
- →Right to rectification (Art. 16): You may request that inaccurate or incomplete data be corrected.
- →Right to erasure (Art. 17): You may request deletion of your personal data where no overriding legal basis exists.
- →Right to restriction (Art. 18): You may request that we limit how we process your data in certain circumstances.
- →Right to object (Art. 21): You may object to processing based on legitimate interest. We will stop unless we can demonstrate compelling legitimate grounds.
- →Right to data portability (Art. 20): You may request your data in a structured, machine-readable format where processing is based on consent or contract.
To exercise any of these rights, contact us at contact@ventures-atelier.com. We will respond within one month (extendable by two further months for complex requests, with notice).
6. Right to Lodge a Complaint
If you believe your personal data is being processed in violation of GDPR, you have the right to lodge a complaint with the Belgian supervisory authority:
Autorité de protection des données / Gegevensbeschermingsautoriteit (APD/GBA)
Rue de la Presse 35 / Drukpersstraat 35, 1000 Brussels
You may also lodge a complaint with the supervisory authority of the EU member state where you habitually reside or work, or where the alleged infringement occurred.
8. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated directly where we hold your contact details.