Privacy Policy

Last updated: 9 October 2026

1. Controller and contact
   Maria Ksenia Witte, Arise Innovations, Brünnhildestraße 5, 12159 Berlin, Germany. Email: m.witte@arise-innovations.com. This notice describes the processing of personal data on arise-innovations.com, when you contact us and when you request a QUATISE venture assessment, including through our linked Airtable intake.

2. Visiting the website
   When you access the site, technical data such as your IP address, browser and device information, date and time of access, requested pages and error or security logs may be processed to deliver the pages, maintain security and diagnose faults. Our legitimate interest in operating a secure website is the legal basis (Article 6(1)(f) GDPR). The site is hosted on the Wix platform. Wix and its service providers may process this data on our behalf.

3. Inquiries and forms
   If you email us or submit a website form, we process the information you provide, such as your name, email address, organisation, message and any optional details, to respond, arrange a conversation or provide a requested brief. The legal basis is Article 6(1)(b) GDPR where the inquiry concerns a possible contract, or Article 6(1)(f) GDPR for other business correspondence. Required form fields are identified in the form. Without the necessary contact details, we cannot respond or send the requested material. Please avoid submitting sensitive personal data unless it is needed for your inquiry.

4. Airtable intake
   We process the information submitted through the intake form and subsequent correspondence to review the information, identify missing evidence, conduct relevant research, prepare an assessment and follow up with you. This may include your name, business email, role and organisation, as well as information about technology, customers, regulation, infrastructure, milestones, finances and aggregate founder ownership. Business information is personal data only insofar as it relates to an identifiable person. Please do not submit sensitive personal data, unnecessary personal details about other people, trade secrets or material you are not authorised to share. Access to confidential supporting documents can be arranged separately.

   Required fields are marked in the form. Providing information is voluntary, but without necessary contact or assessment information we may be unable to respond or complete the review. Unknown financial values may be left blank. Submitting a does not subscribe you to marketing or authorise publication.

   We may supplement submissions with relevant professional information from company websites, public registers, patent and scientific publications, regulatory sources and other public business sources, or with evidence provided by you or authorised contacts. We distinguish submitted claims, independently checked information and assumptions. Where we obtain personal data about you from another source, we provide the information required by applicable data protection law.

   The legal basis is Article 6(1)(b) GDPR where processing is necessary to take steps at your request before entering into a contract with you or to perform that contract. For business representatives and relevant professional research, we rely on Article 6(1)(f) GDPR: our legitimate interests in responding to business requests, checking evidence and providing a reliable assessment, balanced against your rights and interests. Where we request consent for a separate purpose, Article 6(1)(a) GDPR applies and consent may be withdrawn.

   We use Airtable to host the assessment intake and manage case information. Airtable processes this information on our behalf under the data processing agreement associated with our account. Its use does not mean that submissions are publicly accessible. Airtable may also process technical information associated with accessing its service under its own privacy notice. Details are available at Airtable Privacy Policy and Airtable Subprocessors.

   Assessment information is accessible only to people and service providers who need it for the agreed work. Where an assessment partner or specialist is involved, their access is limited to the relevant case and covered by appropriate confidentiality and data protection arrangements. We identify any separate or joint controller and explain the applicable arrangements before the relevant sharing takes place. An intake submission alone does not authorise disclosure of identifiable submissions or reports to investors, publication or unrelated reuse. Such disclosure requires a separately agreed scope and an appropriate legal basis; a preference to discuss investor sharing is not itself permission to share.

   Software-assisted calculations and, where used, AI-assisted research or drafting support human review. We do not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects. Assessment conclusions are reviewed by a person. You may contact us to correct personal data or ask for clarification. Before introducing an additional AI service that processes personal data, we provide any required supplementary information and establish the applicable processing arrangements.

5. Research updates and newsletter
   We send optional research or marketing emails only when you have opted in. The legal basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time through the unsubscribe link in an email or by contacting us; withdrawal does not affect earlier lawful processing. A newsletter registration link may lead to a form hosted by HubSpot. When you use that external form, its own privacy information also applies. A request for a brief does not itself require a newsletter subscription.

6. Cookies and similar technologies
   The site uses technologies needed for its operation and may use optional analytics or other technologies where you consent through the cookie banner. Necessary technologies support functions such as security and your privacy choices. You can manage or withdraw optional consent through the site’s cookie settings. Your browser can also restrict cookies, although some functions may then be unavailable. Details of the technologies and providers shown in the cookie banner should be consulted for the current configuration. Consent is the legal basis for optional tracking (Article 6(1)(a) GDPR); technically necessary processing rests on Article 6(1)(f) GDPR where applicable.

7. Blog and external services
   If you use available blog comment or interaction features, information you choose to publish may be visible to others. Avoid posting confidential or sensitive information there. Links to external services, including newsletter, publication, social media or purchase pages, take you to other providers. Their privacy notices apply when you visit those services.

8. Recipients and transfers
   We share data with providers only where needed to operate the website, forms, communications and related services, including Wix, Airtable for assessment intake and case management, and, where used, HubSpot. Providers may use subcontractors. We may disclose data when required by law. Processing outside the European Economic Area may occur in connection with these services. Where required, transfers are based on an adequacy decision or appropriate safeguards such as standard contractual clauses. Airtable processing may involve countries outside the EEA, including the United States; the applicable DPA and transfer safeguards govern these transfers. An Airtable account or DPA does not, by itself, mean that data is hosted exclusively in the EU. You can ask us for information about the countries, recipients and safeguards relevant to your data, including a copy of applicable safeguards.

9. Retention
   We keep inquiry and form data for as long as needed to handle the request and any ensuing business relationship, subject to applicable statutory retention duties. Assessment submissions, research records and reports are retained while needed to conduct and review the assessment, resolve follow-up questions and administer an ensuing engagement. After a case is closed, we retain personal data only where still necessary for an identified purpose, such as applicable record-keeping duties or establishing, exercising or defending legal claims, and restrict access accordingly. We do not retain identifiable submissions indefinitely merely for possible investor interest. Newsletter contact data is used until consent is withdrawn or the service ends, subject to records needed to demonstrate consent or comply with the law. Technical and cookie data is retained according to the relevant purpose and provider settings. We delete or anonymise data when its purpose and applicable retention duties end.

10. Your rights
    Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction, portability and information about processing of your personal data. You may object to processing based on legitimate interests for reasons relating to your situation, and to direct marketing at any time. You may withdraw consent with effect for the future. Contact us at the email above to exercise these rights. You may also complain to a data protection supervisory authority, in particular the Berlin Commissioner for Data Protection and Freedom of Information.

11. Children and changes
    This site addresses professional audiences and does not intentionally request personal data from children. If you believe a child has supplied personal data, please contact us. We may update this notice when the site or its processing changes; the current version and date appear on this page.