1. Data controller
Osnova (hereinafter, "Osnova", "we") is responsible for the processing of personal data collected through osnova.life. For privacy inquiries, you may write to the channel indicated in the Contact section.
2. What data we collect
- Contact data that you provide to us: name, email, organization, and message in contact or registration forms.
- Eligibility data that you supply during investor registration: jurisdiction, investor type, and evidence of qualification or accreditation.
- Usage data collected automatically: IP address, device and browser type, pages visited, and data derived from cookies (see Cookie policy).
3. How we use the data
- Handle contact requests, meetings, and investor registration.
- Verify the investor's eligibility and qualification according to their jurisdiction before enabling access to the portal.
- Operate, secure, and improve the site and the investor portal.
- Comply with legal and regulatory obligations (KYC/AML, compliance records).
4. Legal basis for processing
We process your data based on your consent, the performance of pre-contractual measures taken at your request, our legitimate interest in operating and protecting the site, and compliance with applicable legal obligations. The specific basis may vary depending on your jurisdiction.
5. Who we share data with
We share data only with service providers acting on our behalf (hosting, analytics, identity/accreditation verification), under confidentiality agreements, and with authorities when required by law. We do not sell personal data.
6. International transfers
Because we serve investors in the United States, the UAE, and Colombia, your data may be processed outside your country of residence. When this occurs, we will apply the safeguards required by applicable law.
7. Retention
We retain data for as long as necessary for the purposes described and to comply with legal, accounting, and compliance obligations, after which it is deleted or anonymized.
8. Your rights
Depending on your jurisdiction, you may have the right to access, rectify, erase, restrict, or object to the processing, as well as the right to data portability and to withdraw your consent. In Colombia, habeas data rights apply (Law 1581 of 2012). To exercise them, contact us through the Contact channel.
9. Security
We apply reasonable technical and organizational measures to protect data. Sensitive investor information and the terms of live opportunities reside behind the portal's verified access.
10. Changes to this policy
We may update this policy. We will publish the current version on this page along with its update date.