Controller details
- Legal name: CROSSBORDER VENTURES SL
- NIF: B75280867
- Address: Seville, Spain
- DPO contact: contact@cbventures.eu
GOVERNANCE AND COMPLIANCE
Privacy Policy
We handle personal data with transparency, security, and international compliance: LGPD (Brazil), GDPR (European Union), and CCPA (United States).
1. Data controller and contact
The data controller for personal data processed is CROSSBORDER VENTURES SL, registered in Spain with integrated operations through partners in China and the European Union.
Data subject channels
- Dedicated email: contact@cbventures.eu
- Phone: +34 610290098 (Monday to Friday, 9am-6pm CET)
- Postal address: Seville, Spain
2. Personal data we collect
Data collected varies according to interaction with our services. We maintain the principle of minimization, collecting only information necessary for each purpose.
Data provided directly
- Basic identification (name, position, company, country of operation)
- Contact data (corporate email, phone, address)
- Content submitted in forms, proposals and contracts
Data collected automatically
- Navigation and analytics information (truncated IP, language, device)
- Administrative portal access logs with action registry
- Essential, analytical and preference cookies (when authorized)
Third-party data
- Information provided by due diligence and compliance partners
- Public data or data from legitimate sources for validations
- Commercial references shared with prior consent
3. Purposes and legal bases
We process personal data based on grounds provided in LGPD, GDPR and equivalent sectoral legislation. When applicable, we request unambiguous consent.
Purpose
Legal basis
Respond to contacts, prepare proposals and execute consulting contracts
Contract execution (LGPD art. 7, V / GDPR art. 6, b)
Provide supplier onboarding, audits and due diligence
Legal obligation compliance and regular exercise of rights
Send institutional communications and relevant educational content
Consent and legitimate interest with impact assessment
Monitor security, fraud prevention and global compliance risks
Legitimate interest, legal obligation and data subject protection
Fulfill reporting requirements to authorities and regulatory bodies
Legal/regulatory obligation (LGPD art. 7, II / GDPR art. 6, c)
4. Sharing and international transfers
We share data with strategic partners only when necessary, with specific contractual clauses and impact assessments for countries without adequacy decisions.
Third-party categories
- Local partners in China and the European Union for project execution
- Cloud, CRM and analytics tool providers with SCC clauses
- Legal consultants, auditors and public bodies, when required
Applied safeguards
- Data processing agreements (DPAs) with security requirements
- Standard Contractual Clauses and adequacy verification (GDPR, LGPD)
- Periodic audits and vendor privacy due diligence
5. Data subject rights
We ensure, as applicable, rights provided in data protection legislation. We request identity verification to securely respond to requests.
Covered rights
- Confirmation of processing existence and simplified data access
- Correction, update or anonymization of inaccurate data
- Portability to another provider as per regulation
- Deletion of data processed with consent (observing legal terms)
- Opposition to processing and consent revocation
How to exercise your rights
Send your request through indicated channels, describing the request and attaching proof document. We will respond within 15 business days or applicable legal terms.
- Brazil (LGPD): response within 15 days, following ANPD guidance
- European Union (GDPR): response within 30 days, extendable in complex cases
- California (CCPA/CPRA): response within 45 days, with extension possibility
6. Cookies and similar technologies
We use essential cookies for site operation and, with consent, analytical cookies (Google Analytics 4) with anonymized IP. The banner and"Cookie settings" link in the footer allow you to accept, reject or modify at any time.
Cookie types
- Essential: security, authentication, load balancing and accessibility
- Analytical (GA4): measure traffic, events and performance with truncated/anonymous IP
- Functional: language, content preferences and region
How to manage
- Accept or reject in initial banner; modify later in"Cookie settings" in footer
- Browser settings allow deletion or blocking of cookies
- Blocking essential cookies may limit functionality
7. Security, retention and governance
We maintain a governance program combining technical and administrative controls, reviewed periodically in internal and external audits.
Security measures
- Encryption in transit and at rest for sensitive or strategic data
- Role-based access controls and multi-factor authentication
- Continuous incident monitoring with 24/7 response plan
Retention and disposal
- Retention while contractual relationship or legal obligation lasts
- Secure archiving with annual necessity review
- Secure deletion or anonymization at end of purpose
8. Updates to this policy
We may update this policy to reflect legislative changes or governance improvements. We will communicate relevant changes through official channels.
We will maintain the last update date visible and record previous versions for audit. Periodic verification of this page is recommended.
Important notice: We do not offer financial services
CB Ventures operates exclusively as a provider of consulting services in business internationalization and cross-border operations. Under the terms of this policy and our contracts:
- ✓ We do not offer financial intermediation services, payment processing or fund transfers
- ✓ We do not manage, hold in custody or administer third-party resources or funds
- ✓ We are not a financial institution, currency exchange operator or investment manager
- ✓ Our operations are advisory, coordination and strategy in commercial transactions and structuring of international business
- ✓ For transactions involving financial movement, the client must hire regulated and authorized financial institutions