Privacy policy

Last updated: 26 August 2026.

Who we are

The controller responsible for the processing described in this policy is BNC s.r.o, Lichardova 19, 04001 Kosice, Slovakia. Privacy enquiries and requests can be sent to contact (at) hasta.fund.

Scope

This policy applies to the public Hasta website, email enquiries sent to Hasta and startup information submitted through the external “Pitch to Hasta” form. It does not cover third-party websites reached through other external links.

Website access

When you visit this website, our hosting provider may process technical request data needed to deliver, secure and maintain the service. This may include your IP address, date and time of access, requested page, referrer, browser, operating system, device information and diagnostic or security events.

We process this data where necessary for our legitimate interests in providing a reliable and secure website, preventing misuse and diagnosing technical problems. We do not use technical request data to identify you personally or build advertising profiles.

Email enquiries

If you contact us by email, we process your name, email address, the content of your message and any information you choose to provide. We use it to respond, manage the relationship and take requested steps before a potential business or investment relationship.

The legal basis is our legitimate interest in handling relevant enquiries and, where applicable, taking steps at your request before entering into a contract.

Startup pitches

The “Pitch to Hasta” form is hosted by Tally. It may collect founder contact details, professional profile information, company and website details, location, product and technology information, customer and market information, fundraising details, valuation and deal-structure information, export-control readiness, written answers and an uploaded pitch deck.

We use submitted information to evaluate the company, communicate with its founders, conduct preliminary diligence and decide whether to continue discussions. The legal basis is our legitimate interest in reviewing potential investments and, where applicable, taking steps requested before entering into an investment or related agreement.

Do not submit classified information, export-controlled technical data, special-category personal data or information that you are not authorised to share through the public form.

Service providers and recipients

We use service providers only where needed to operate the website and review communications. These may include Netlify for website hosting, Tally for the startup pitch form, our email provider and professional advisers supporting legal, technical or investment review. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims.

Service providers process data under their own terms and applicable data-processing arrangements. You can read the Netlify privacy policy and the Tally privacy policy.

We do not sell personal data and do not share it for third-party advertising or behavioural profiling.

International transfers

Some service providers or their subprocessors may process data outside Slovakia or the European Economic Area. Where required, transfers must be supported by an adequacy decision, standard contractual clauses or another safeguard recognised under applicable data-protection law.

How long we keep data

We keep personal data only for as long as needed for the purpose for which it was collected. Website security logs are retained according to the hosting provider’s operational and security settings. Enquiry correspondence and pitch information are retained while we assess or manage the relationship, and longer where reasonably needed for legal, regulatory, accounting or dispute-resolution obligations. Data that is no longer needed is deleted or anonymised.

Cookies and analytics

The public Hasta website does not currently use advertising trackers, behavioural analytics or marketing cookies. The external Tally service may use its own storage or cookies when you open the pitch form. Its privacy and cookie information applies on that service.

Your rights

Subject to the conditions in applicable law, you may request access to your personal data, correction, deletion, restriction of processing, data portability or objection to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting earlier lawful processing.

To exercise a right, email contact (at) hasta.fund. We may need enough information to verify your identity and understand the request.

Complaints

You may lodge a complaint with the supervisory authority in your country of residence, place of work or the place of the alleged infringement. In Slovakia, the supervisory authority is the Office for Personal Data Protection of the Slovak Republic.

Security

We apply proportionate organisational and technical measures intended to protect personal data. No internet transmission or storage system can be guaranteed to be completely secure.

Changes to this policy

We may update this policy when the website, service providers or processing activities change. The current version and its last-updated date will remain available on this page.