Privacy Policy

This site is operated by Verde Partner Capital B.V. (“Verde 2050”, “we”, “us”), a Netherlands‑registered company based in Cascais, Portugal. For any question about this policy or your personal data, write to hello@verde2050.com.

For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, Verde 2050 is the controller of the personal data described below.

This policy describes what personal data we collect through verde2050.com, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to the inquiry form on /contact, the project information request on each project page, and the cookies described in our Cookie Notice.

We only collect what you volunteer through one of the forms below. We do not sell personal data. We do not use it for advertising. We do not profile.

• Inquiry form (/contact) and project information requests (/projects/…). Your name, email, company and phone (optional), the inquiry type you selected, your message, and any documents you choose to attach (for example plot plans). You must tick a consent box confirming you have read this Privacy Policy. Lawful basis: taking steps at your request prior to entering into a commercial relationship, and our legitimate interest in responding to enquiries about our business.
• Anonymous usage analytics (only with your consent). If you accept analytics cookies, we record anonymous events such as project information requests, form submissions and clicks to partner websites (Verde Capital, Taylor Brokers, Instagram). No name, email or IP address is stored with these events.
• Server‑side technical data. When you use the site, our hosting provider automatically logs your IP address, user‑agent and the URL requested for security and abuse‑prevention. These logs are retained for up to 30 days and are not linked to any form you submit.

We share personal data only with the small set of processors listed below, all of which are bound by written agreements requiring them to protect it and use it only on our instructions.

• MongoDB (database). Every form submission is stored in our MongoDB database. Data is at rest in the same region as our application infrastructure.
• Emergent Email Proxy (Resend). Used to send you the confirmation email that follows your submission and to notify the Verde 2050 team by email.
• Telegram Bot API. We receive an internal notification in a private Telegram channel when a new inquiry lands. The notification contains a short summary — typically your name and the type of enquiry — not your full submission.
• GitHub (news feed only). The home page pulls the Get The Plot editions list from a public GitHub repository. No personal data is sent to GitHub in the process.

Some of our processors are established outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on Standard Contractual Clauses or an equivalent GDPR‑recognised safeguard. A copy of the relevant safeguard is available on request.

• Inquiries and attached documents. up to 24 months from your last contact with us, then deleted or fully anonymised.
• Deal submissions. up to 5 years from submission where the opportunity did not proceed, longer where it did and where our records or applicable law require it.
• Investor‑materials requests. for the duration of your relationship with the fund and, once that ends, for the period required by applicable financial‑services record‑keeping rules (typically 5–10 years).
• Server logs. up to 30 days.

Subject to conditions in the GDPR, you have the right to (i) access the personal data we hold about you, (ii) have inaccurate data corrected, (iii) have data erased where we no longer have a lawful basis to keep it, (iv) restrict or object to processing, (v) receive your data in a portable format, and (vi) withdraw any consent you have given. Where we rely on our legitimate interests, you can object at any time and we will stop unless we can demonstrate compelling grounds to continue.

To exercise any of these rights, write to hello@verde2050.com. We aim to respond within 30 days. You also have the right to lodge a complaint with a supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl); in Portugal the Comissão Nacional de Proteção de Dados (cnpd.pt).

The site is served over HTTPS. Access to submissions in the database is restricted to a small number of named personnel, over authenticated connections only. Documents you attach to an inquiry are stored in private object storage and are only accessible to authenticated administrators. If you become aware of a security issue, please write to hello@verde2050.com.

We use a very small number of cookies and local-storage entries. See the Cookie Notice for detail.

We update this policy from time to time. Material changes will be reflected in the “Last updated” date at the top and, where appropriate, notified to you by email.

This policy is an interim version, drafted to reflect what the site actually does today. A counsel‑reviewed version will replace it. If you would like to see the reviewed version when it is published, write to hello@verde2050.com and we will send it.