VAM Investments Group S.p.a.
Business Development
Business Development
The controller processes personal data of professional investors, eligible counterparties and contact persons of third parties (intermediaries, advisers and other market operators) as part of its institutional business development activity, aimed exclusively at professional investors. The processing includes building and managing relationships with current and potential investors; investor relations activities and the presentation of investment opportunities; identifying and developing new deal opportunities (origination); creating and managing strategic partnerships with intermediaries, consultants and other operators; the structured management of contacts and relationships in the company's systems (CRM); organising institutional meetings and events.
Why we process the data and on what legal basis
- Managing relationships with key stakeholders.Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR)
- Retaining data for contact, follow-up and institutional relationship development activities.Legal basis: Legitimate interest of the controller (Art. 6(1)(f) GDPR)
VAM Investments has a legitimate interest in contacting the professional investors with whom it has a relationship, in order to cultivate business relationships and for institutional communications. Investors, as professionals in the sector, can also reasonably expect to be contacted in this context.
Categories of data subjects
- Current and potential investors (natural persons)
- Representatives and contact persons of current and potential investors that are legal persons
Data subjects requiring greater protection: B2B customers and/or suppliers
Categories of personal data
- Identification and contact data (e.g. first name, surname, telephone, email)
- Professional data (e.g. role and profession)
- Investment interests
- Source of the contact
Processors
- Attio Ltd. (Software services)
- Microsoft Ireland Ltd. (Software services)
Transfers to third countries
Some personal data are transferred to countries outside the European Economic Area (EEA). Below you will find, for each transfer, the party involved, the destination country and the safeguard that makes it lawful:
- Microsoft Ireland Ltd. (Software services) — United States (safeguard: EU-US Data Privacy Framework)
The United Kingdom is covered by an adequacy decision of the European Commission. Microsoft has obtained certification under the EU-US DPF, which is covered by an adequacy decision of the European Commission.
Retention period
The data are retained for 5 years from the last significant contact, unless an ongoing relationship is established. The database is reviewed periodically every 12 months.
Consequences of not providing the data
You may object to the processing of these data without any consequences. If you are already an investor of VAM Investments, you will continue to receive service communications relating to your active investments.