Apply to the program

Privacy policy

Last updated: 5 October 2026. Versión en español (texto legal de referencia)

1. Who is the data controller

Company name: 42 Ventures SL (trade name: Bolkana)
Tax ID (CIF): B88958723
Address: Calle Doctor Gadea, 11, Bajos, San Juan de Alicante, Alicante, 03550, Spain
Privacy contact: [email protected]

2. What data we process, why, and on what legal basis

  • Contact and programme-application forms (name, email and whatever information about your project you choose to write). To reply to you and assess your application. Legal basis: your consent and pre-contractual measures at your request (GDPR art. 6(1)(a) and (b)). Applications are stored in our customer-relationship tool, hosted on our own servers in the European Union.
  • Newsletter (email and, if you give it, name). To send you communications about Bolkana. Legal basis: your consent (art. 6(1)(a)), which you can withdraw at any time with the unsubscribe link in every email. We use Brevo to send it.
  • Customers of our services (identification, contact and billing data). To provide the contracted service, invoice, and meet commercial and tax obligations. Legal basis: performance of a contract and legal obligation (art. 6(1)(b) and (c)). Invoicing is handled with Holded.
  • Analytics and advertising on the website: only if you accept them in the cookie notice, we use Google Analytics and the Meta pixel to measure visits and the effectiveness of our campaigns. Legal basis: your consent (art. 6(1)(a)), which you can withdraw at any time from the cookie settings. More in our cookie policy (Spanish).
  • Browsing and security: as on any web server, minimal technical data (IP address, date, page requested) are logged to keep the site secure and working. Legal basis: legitimate interest (art. 6(1)(f)).

We make no automated decisions and build no profiles that have legal effects on you. We do not sell your data.

3. Who we share your data with

Only the Bolkana team and the providers that deliver services we need, acting as processors under contract: server hosting in the European Union (Hetzner Online GmbH, Germany), corporate email (Google Workspace), the newsletter (Brevo), invoicing and accounting (Holded) and, only with your consent, analytics and advertising (Google and Meta). We also disclose data where the law requires it (for example, to the tax authorities).

Some of these providers (Google, Meta) may process data outside the European Economic Area. When that happens it is under appropriate safeguards, such as the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

4. How long we keep data

  • Enquiries and applications: as long as needed to handle them and, afterwards, for the limitation periods of any liability.
  • Newsletter: until you unsubscribe.
  • Customers: during the contract and afterwards for as long as commercial and tax law requires (generally six years).
  • Cookies and analytics: as stated in the cookie policy.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw your consent, at any time by writing to [email protected] and saying which right you are exercising. We may ask for a copy of a document proving your identity. If you think we have not handled your data properly you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.

6. Children

Our services and this website are not directed at children under 14 and we do not knowingly collect their data.

7. Changes to this policy

We may update this policy to reflect legal or service changes. The current version is always the one published on this page, with its update date. The Spanish text is the legally binding version.