Privacy Policy

Last updated: 5 October 2026

1. Introduction

UniPrisma Kft. (registered office: Révay köz 4, 1065 Budapest, Hungary; company registration number at the Company Registry Court of the Metropolitan Court of Budapest: 01-09-448571; hereinafter: the “Data Controller” or “UniPrisma”), operating under the trading name UniVCC (University Venture Capital Coalition), pays particular attention to ensuring that its activities comply with the applicable legal requirements governing personal data.

This includes, in particular, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “General Data Protection Regulation” or “GDPR”), and the provisions of Act CXII of 2011 on the right to informational self-determination and freedom of information.

The purpose of this Privacy Policy is to ensure transparency of the Data Controller’s data processing activities and to inform all individuals whose personal data is processed (the “Data Subjects”) about their rights and about how their data is handled.

This Privacy Policy applies to personal data processed in connection with UniVCC’s activities: operating the website univccoalition.org, responding to enquiries and applications, coordinating the UniVCC coalition, organising events, conducting research and benchmarking, and maintaining relationships with members, partners, prospective limited partners, and other stakeholders of the university venture capital ecosystem.

2. Data Controller

The Data Controller responsible for your personal data is:

Name: UniPrisma Kft.

Registered office: Révay köz 4, 1065 Budapest, Hungary

Company registration number: 01-09-448571 (registered by the Company Registry Court of the Metropolitan Court of Budapest)

Tax number: 26606572-2-42

EU VAT number: HU26606572

Managing Director: Károly Zoltán Szántó

Contact for privacy matters: privacy@univccoalition.org

We are not required to appoint a statutory Data Protection Officer under Article 37 GDPR. Privacy enquiries are handled by Thijmen Meijer, Chief Operating Officer, reachable at the email address above.

3. Principles of data processing

In line with Article 5 GDPR, the Data Controller applies the following principles to all processing of personal data:

Lawfulness, fairness and transparency. The Data Controller processes personal data lawfully, fairly, and in a transparent manner, cooperating with Data Subjects and providing clear information about how their data is handled.

Purpose limitation. Personal data is collected only for specified, explicit, and legitimate purposes, and is not further processed in a manner incompatible with those purposes.

Data minimisation. The Data Controller limits the personal data collected and processed to what is strictly necessary for the purposes identified in this Policy.

Accuracy. The Data Controller takes reasonable steps to keep personal data accurate and up to date, and to promptly correct or delete inaccurate data upon request.

Storage limitation. Personal data is retained only for as long as necessary for the purposes for which it was collected, in line with the retention periods set out in this Policy.

Integrity and confidentiality. The Data Controller protects personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction through appropriate technical and organisational measures.

Accountability. The Data Controller is responsible for complying with the principles above and is able to demonstrate compliance with them.

4. Personal data we collect

Depending on how you interact with UniVCC, we may collect the following categories of personal data.

Identification and contact data

Full name

Job title or role

Organisation name and type

Work email address

Phone number, where provided

LinkedIn profile address, where you provide it

Country of operation

Professional information

Role and seniority

Your organisation’s type (UVC fund, university, technology transfer office, limited partner, partner, or other)

Fund or institutional details you choose to share, such as assets under management, stage focus, geographic focus, vintage year, or investment strategy

Publicly available information about you or your organisation

Visual brand assets: Organisation logo files (PNG, SVG, or similar) provided to us for use in coalition materials

Correspondence and meeting records

Emails, calls, and meeting notes arising from our interactions

Responses to forms you submit to us

Notes and records kept in our customer relationship management system

Where AI-assisted transcription or meeting summary tools are used, the transcribed content of meetings. We currently use Google Meet’s “Take notes for me” (Gemini-powered) and our own meeting assistant, UniVCC Notetaker. When UniVCC Notetaker joins a call, it shows that it is recording, and we ask everyone present for their consent at the start of the call. If anyone objects, we stop the recording.

Where a meeting is recorded with your consent, the audio recording itself, until it has been transcribed. See section 9 for how long recordings are kept.

Document access data (private document links)

Where we share a document with you by a private link and that link asks you to identify yourself before it opens, we record the following.

The name and email address you enter. We do not verify the address: no message is sent to it and no confirmation code is issued, so this is a record of who stated they opened the document rather than proof of identity.

Which pages of the document you open, and how long each page is displayed

The date and time of each opening, your IP address, and your browser and device information

Technical data (website)

IP address

Browser type and device information

Pages visited and time on site

Referral source

We do not knowingly collect special categories of personal data (such as data revealing racial or ethnic origin, political opinions, religious beliefs, or health data). If you share such data with us voluntarily, we will only process it where we have a valid legal basis under Article 9 GDPR.

5. How we collect your data

We collect personal data through the following channels.

Directly from you

When you submit a form on univccoalition.org

When you begin a form on univccoalition.org but do not complete it — we keep the answers entered up to that point, so we can improve the form and, where you have given us your contact details, follow up with you

When you email us, write to us, or respond to our outreach

When you register for or attend a UniVCC event

When you connect with us on LinkedIn or similar professional networks

When you take part in a meeting, call, or interview with us

When you book a meeting through one of our scheduling pages, shared with you by direct link

When you open a document we have shared with you by private link, and that link asks you to identify yourself before it opens

From publicly available sources

Your organisation’s website

Public professional profiles, including LinkedIn, company registries, and press releases

Public databases relevant to venture capital, including Dealroom, Crunchbase, and Global University Venturing

From third parties

Mutual contacts who introduce you to us

Event organisers, where you have consented to share your details

Referral partners

A colleague at your organisation who has asked you to complete part of a questionnaire on its behalf

A colleague at your organisation who has named you as the person able to approve its participation in the coalition

6. Why we use your data and legal basis

We process your personal data for the purposes below. Each processing activity has a defined legal basis under Article 6 GDPR.

Responding to enquiries and handling applications to join the coalition. When you submit an application, we email you a link to it. Anyone holding that link can read the application and change it until a decision is made. Legal basis: steps taken at your request before entering into membership (Article 6(1)(b) GDPR) and our legitimate interest in answering the people who contact us (Article 6(1)(f) GDPR).

Building and maintaining relationships within the university venture capital ecosystem. Legal basis: our legitimate interest in developing the UniVCC coalition and maintaining relevant professional relationships with UVCs, universities, technology transfer offices, limited partners, and partners (Article 6(1)(f) GDPR). You have the right to object to this processing at any time.

Contacting you about UniVCC activities, including events, research outputs, and membership opportunities. Legal basis: your consent for marketing communications (Article 6(1)(a) GDPR); legitimate interest for direct professional correspondence relevant to your role (Article 6(1)(f) GDPR).

Delivering membership services and fulfilling our agreements with members and partners. Legal basis: performance of a contract to which you or your organisation is a party (Article 6(1)(b) GDPR).

Conducting ecosystem research and benchmarking, including our research questionnaires such as the UVC/RTO fund questionnaire. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Nothing from a questionnaire response is published before the person completing it approves the response. At approval, they choose whether the answers may be published and attributed to their organisation, which is the default, or used only in anonymised aggregate analysis, which combines at least five comparable responses. The contact details given in a questionnaire are not published.

Keeping accurate records of meetings with you, including the use of AI transcription or summary tools. Legal basis: your consent (Article 6(1)(a) GDPR), asked at the start of the meeting. You may withdraw consent at any time, including during the meeting.

Scheduling meetings you book through our scheduling pages. When you book a meeting, we process the name, email address, any guest email addresses, and the optional subject you provide, solely to create the calendar event, send calendar invitations to you and your guests, and hold the meeting. These details are stored in our Google Workspace calendar, and a booking notification is sent to our own internal board. Legal basis: your consent (Article 6(1)(a) GDPR), given when you submit the booking, and steps taken at your request prior to entering into possible cooperation (Article 6(1)(b) GDPR).

Recording who opens documents we share by private link, and which parts of them are read. Where a document is shared outside our organisation, we record the identity entered at the link, the pages opened, and the time spent on each, and we make that record available to the person who sent the link. Legal basis: our legitimate interest in knowing that confidential or commercially sensitive material reached the people it was intended for, in controlling the circulation of documents we hold under licence, and in following up appropriately with those who have read them (Article 6(1)(f) GDPR). Where the document is shared as part of a contract or of steps taken at your request before entering into one, performance of a contract also applies (Article 6(1)(b) GDPR). You have the right to object to this processing at any time. Not every document link asks who you are; where it does, the page tells you what is recorded before you enter anything.

Running our own internal platform. We keep the records described in this Policy on a platform we built and host ourselves, rather than spread across separate tools. It is what our team uses to coordinate the coalition: the contacts we deal with, our correspondence and meetings with them, the events we run, and our research on the ecosystem. Access is restricted to people who need it for their role, and most roles reach only part of it. Legal basis: our legitimate interest in running the coalition in an organised and secure way (Article 6(1)(f) GDPR), and performance of our agreements with members and partners (Article 6(1)(b) GDPR).

Using AI to help us work with these records. We use AI to draft replies for a person to review, to summarise and search our own records, to transcribe meetings, and to suggest updates to a record for a person to accept or reject. Where this involves your personal data, that data is sent to our AI provider solely to produce the result we asked for; it is not used to train anyone’s models, and the providers are named in section 7. Nothing is sent to a member, a partner or anyone else without a person deciding to send it. Legal basis: our legitimate interest in working accurately and efficiently (Article 6(1)(f) GDPR). You have the right to object to this processing.

Building and keeping a picture of the ecosystem, including profiling. To do our work we hold records not only about people who contact us, but about organisations and individuals across university venture capital, assembled from public sources and from our own dealings. We enrich those records automatically — filling in a role or an organisation from public information, grouping related organisations, noting how recently we have been in touch — and our systems suggest who we might follow up with. These are suggestions to our team, not decisions about you: a person decides what happens next, and section 10 explains your right to object and how automated decision-making is limited. Legal basis: our legitimate interest in developing the coalition (Article 6(1)(f) GDPR).

Complying with our legal, accounting, and tax obligations. Legal basis: compliance with legal obligations to which we are subject (Article 6(1)(c) GDPR).

Securing our systems and preventing fraud or abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Displaying your name, organisation, role, and logo in public UniVCC materials, including the univccoalition.org website, the UniVCC LinkedIn page and other social media channels, coalition communications, presentations, reports, events, and ecosystem maps. Legal basis: your consent (Article 6(1)(a) GDPR), captured at the point of joining the coalition or in subsequent correspondence. You can withdraw this consent at any time by writing to hello@univccoalition.org, and we will remove your name and logo from active coalition materials within a reasonable period. Historical references already included in previously published materials, reports, podcasts, or event documentation may remain in place.

Contacting a colleague you have been asked to work with on a questionnaire. Where someone completing one of our questionnaires hands part of it to a colleague at their own organisation, we process that colleague’s name and business email address in order to send them their own section, to show them what has already been answered in it, and to record who answered which part. These details reach us from the person completing the questionnaire rather than from the colleague themselves. Legal basis: our legitimate interest, and that of the respondent’s organisation, in each part of a research questionnaire being answered by the person who actually holds that information (Article 6(1)(f) GDPR). You have the right to object to this processing at any time. Before answering anything, the colleague is shown who asked for their details, what we hold, and this Policy.

Contacting a colleague who can approve your organisation’s participation. Where someone applying to join the coalition tells us they cannot approve participation themselves and names a colleague at their own organisation who can, we process that colleague’s name, role and business email address in order to write to them once about that decision. These details reach us from the applicant rather than from the colleague themselves. Legal basis: our legitimate interest, and that of the applicant’s organisation, in a decision about institutional membership being put to the person who holds the authority to take it (Article 6(1)(f) GDPR). You have the right to object to this processing at any time. The message names who asked, says what we hold and why, and asks for nothing but a reply; where none comes, we do not write again.

Legitimate interest assessment: where we rely on legitimate interest as a legal basis, we have conducted a balancing test to ensure that your rights and freedoms do not override that interest. A copy of the relevant legitimate interest assessment is available on request by contacting privacy@univccoalition.org.

7. Who we share your data with

Your personal data may be shared with the following categories of recipients.

The UniVCC team: our founders, Károly Zoltán Szántó (CEO and Managing Director) and Thijmen Meijer (COO), and the employees and contractors who work with us. Everyone with access is bound by a strict non-disclosure agreement and can reach only what their role requires.

Our service providers (processors): Each service provider acts on our instructions under a written data processing agreement meeting the requirements of Article 28 GDPR.

Provider	Service	Location of processing
Clever Cloud SAS	Hosting of our website, our forms, our internal platform with its database and backups, our meeting assistant (UniVCC Notetaker), and the private document links described in section 4	France (EU), hosted in Paris; processing takes place entirely within the EU, so no third-country transfer is involved for this processor
Innoloft GmbH	Participant platform (UniVCC Connect)	Germany (EU), hosted in Frankfurt
Google Ireland Limited (Google Workspace)	Email, calendar, document storage; Google Meet “Take notes for me” (Gemini-powered AI meeting summaries)	Ireland (EU), with sub-processors in the United States
Google Ireland Limited (Google Analytics 4)	Website analytics, only after you click Accept on our cookie banner	Ireland (EU), with sub-processors in the United States
Mistral AI SAS	Speech-to-text transcription of meeting recordings made by UniVCC Notetaker	France (EU), processed on Mistral’s EU regional endpoint
Anthropic PBC	AI features on our internal platform, including drafting, summarisation, search and research analysis	United States

Our transcription provider may retain audio and the resulting text for up to 30 days in order to detect misuse of its service. We have opted out of our data being used to train its models.

Additional processors may be engaged from time to time. An up-to-date list is available on request.

Professional advisors: Lawyers, accountants, and other professional advisors bound by professional confidentiality obligations.

Public authorities: Where disclosure is required by law, court order, or regulatory process.

Public coalition materials: Where you have consented, your name, organisation, and logo may be displayed publicly on univccoalition.org, on our social media channels, and in coalition publications, events, and ecosystem materials. This means the information will be accessible worldwide. You can request removal at any time by writing to hello@univccoalition.org.

What we do not do

We do not sell your personal data.

We do not share your personal data with advertising networks.

We do not publish individual-level data without your explicit consent.

8. International data transfers

Some of our service providers, or their sub-processors, are based outside the European Economic Area (EEA), primarily in the United States. When we transfer your personal data outside the EEA, we rely on the safeguards recognised under Chapter V of the GDPR.

EU-US Data Privacy Framework. Where the processor is certified under the Data Privacy Framework, we rely on the adequacy decision of the European Commission of 10 July 2023 (Commission Implementing Decision (EU) 2023/1795).

Standard Contractual Clauses. Where the Data Privacy Framework does not apply, we enter into the Standard Contractual Clauses adopted by the European Commission under Commission Implementing Decision (EU) 2021/914.

Transfer impact assessments. Where required, we conduct transfer impact assessments to confirm that the safeguards provide a level of protection essentially equivalent to that of the GDPR.

You can request a copy of the safeguards applicable to transfers of your personal data by contacting privacy@univccoalition.org.

9. How long we keep your data

We retain personal data only as long as necessary for the purposes set out in this Policy and to meet our legal obligations. Specific retention periods are as follows.

Form submissions and enquiries: up to 3 years from our last contact with you, or sooner if you request deletion.

Incomplete form submissions: 30 days from your last activity, then deleted automatically.

CRM records of active relationships: for the duration of the relationship, plus 3 years after it ends.

CRM records of prospects contacted but not engaged: up to 3 years from the last meaningful contact; sooner if you object.

Records of paid membership: for the duration of membership, plus 8 years, as required by Hungarian accounting and tax law.

Audio recordings of meetings: deleted once the recording has been transcribed and the participants have been identified, and in any event within 90 days of the recording. The audio is kept until then so that the transcript can be checked against it.

Meeting notes and AI-assisted transcripts: for the duration of the relationship, plus 3 years after it ends, consistent with the CRM records they accompany — or sooner if you withdraw consent.

Marketing mailing list entries: until you unsubscribe or withdraw consent.

Event attendance records: up to 3 years after the event.

Document access records for private document links: up to 3 years from the date the link expires or is withdrawn, or sooner if you request deletion.

Website technical logs: typically up to 30 days.

Website analytics data in Google Analytics 4, where you accepted analytics: 2 months.

Legal, accounting, and tax records: 8 years, as required by Hungarian law.

Logos and brand assets provided for coalition use: for the duration of your participation, plus a reasonable period to remove them from active materials following withdrawal.

At the end of the applicable retention period, we delete or irreversibly anonymise the data.

10. Your rights

Under the GDPR, you have the following rights in relation to your personal data.

Right of access (Article 15). You can ask us to confirm whether we process your personal data and to obtain a copy, along with information about how we use it.

Right to rectification (Article 16). You can ask us to correct inaccurate or incomplete data about you.

Right to erasure (Article 17). You can ask us to delete your data where one of the grounds in Article 17 applies, for example where the data is no longer needed, you withdraw consent, or you object to processing.

Right to restriction of processing (Article 18). You can ask us to limit how we use your data in specific situations, for example while we verify a correction request or assess an objection.

Right to data portability (Article 20). Where processing is based on consent or contract and carried out by automated means, you can ask us to provide your data in a structured, commonly used, machine-readable format, or to transmit it directly to another controller where technically feasible.

Right to object (Article 21). You can object to processing based on our legitimate interest at any time. You have an unconditional right to object to processing for direct marketing purposes.

Right to withdraw consent (Article 7(3)). Where we process your data based on your consent, you can withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Right not to be subject to solely automated decision-making (Article 22). UniVCC does not make decisions about you using solely automated processing that produce legal or similarly significant effects.

11. How to exercise your rights

To exercise any of the rights above, email privacy@univccoalition.org with a brief description of your request. We will respond within one month of receiving your request, as required by Article 12(3) GDPR. Where requests are complex or numerous, we may extend this period by a further two months and will inform you of any extension within one month of receipt.

Where your request is submitted electronically, we will respond electronically unless you ask otherwise.

We may need to verify your identity before acting on your request, in order to protect your personal data.

Exercising your rights is free of charge. We reserve the right to charge a reasonable fee or to refuse to act where a request is manifestly unfounded or excessive, in accordance with Article 12(5) GDPR.

12. Right to lodge a complaint and judicial remedy

If you believe we are not processing your personal data in accordance with the law, you have the right to lodge a complaint with a data protection supervisory authority. You also have the right to an effective judicial remedy.

Supervisory authority in Hungary

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

Headquarters: 1055 Budapest, Falk Miksa utca 9-11., Hungary

Postal address: 1363 Budapest, Pf. 9., Hungary

Telephone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

Email: ugyfelszolgalat@naih.hu

Website: naih.hu

Other supervisory authorities: You may also lodge a complaint with the supervisory authority of the Member State of your habitual residence, place of work, or place of the alleged infringement, in accordance with Article 77 GDPR.

Judicial remedy: You have the right to apply to the competent court of your place of residence or habitual abode, in accordance with Article 79 GDPR. We would appreciate the chance to address your concerns directly before you contact a supervisory authority or court. If you have any issues with how we handle your data, please write to privacy@univccoalition.org first and we will respond promptly.

13. Cookies and website analytics

Our website sets a first-party cookie that records your choice to accept or decline analytics, for 6 months. Our cookie banner offers Accept and Decline side by side. Only with your consent, given by clicking Accept, do we use Google Analytics 4; until then, and if you decline, it is not loaded and nothing is sent to Google. You can change your choice at any time through the “Cookie settings” link at the bottom of every page. Our forms run on our own website and set no third-party cookies; they save your progress in your browser’s local storage so you can finish a form later, and that entry is deleted when you submit. We do not use advertising cookies, cross-site tracking, or social media trackers. If we introduce marketing tools in future, we will update this Policy and re-prompt your consent through the cookie banner before setting any new non-essential cookies. Full details, including the specific cookies set, their purposes, and how to manage your preferences, are available in our Cookie Policy at univccoalition.org/legal.

14. How we protect your data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. These measures include:

Encryption of data in transit (HTTPS, TLS) and at rest

Access controls limiting data access to authorised team members

Strong authentication requirements on all work systems

Firewall, antivirus, and spam protection on the Data Controller’s systems

Password protection on electronic devices

Regular backups and business continuity planning

Vendor due diligence and data processing agreements with all processors

Incident response procedures in the event of a personal data breach

In the event of a personal data breach likely to result in a risk to your rights and freedoms, we will notify the competent supervisory authority within 72 hours and, where the breach is likely to result in a high risk, inform affected individuals without undue delay, in accordance with Articles 33 and 34 GDPR.

We maintain a record of personal data breaches in accordance with Article 33(5) GDPR, including the scope of affected personal data, the range and number of affected Data Subjects, the time, circumstances, and impact of the incident, and the measures taken to resolve it.

15. Children’s data

UniVCC’s activities are directed at professional audiences. We do not knowingly collect personal data from children under the age of 16. If you believe we hold data from a minor, please contact privacy@univccoalition.org and we will delete it promptly.

16. Changes to this Policy

The Data Controller reserves the right to amend this Policy from time to time to reflect changes in our practices, our service providers, or legal requirements. Any updates will be posted on this page with a revised “last updated” date at the top.

For material changes, we will notify you by email where we have your contact details on file, or through a prominent notice on our website, with reasonable prior notice.

17. Contact us

For any questions about this Policy or about how we process your personal data, please contact us.

Email: privacy@univccoalition.org

Post: UniPrisma Kft., Révay köz 4, 1065 Budapest, Hungary

This Policy is governed by Hungarian law. Any disputes arising in connection with this Policy shall be subject to the exclusive jurisdiction of the competent Hungarian courts, without prejudice to your right to lodge a complaint with a supervisory authority or to seek a judicial remedy under the GDPR. Budapest, October 2026

Cookie Policy

Last updated: 5 October 2026

1. Introduction

UniPrisma Kft. (registered office: Révay köz 4, 1065 Budapest, Hungary; company registration number at the Company Registry Court of the Metropolitan Court of Budapest: 01-09-448571), operating under the trading name UniVCC (University Venture Capital Coalition), uses cookies and similar technologies on univccoalition.org.

This Cookie Policy explains what cookies are, which ones we use, why we use them, and how you can manage your preferences. It forms part of our Privacy Policy, available at univccoalition.org/legal.

This Policy is designed to comply with Directive 2002/58/EC on privacy and electronic communications (the ePrivacy Directive), Regulation (EU) 2016/679 (the General Data Protection Regulation, or GDPR), and Act C of 2003 on electronic communications, which transposes the ePrivacy Directive into Hungarian law.

2. What are cookies?

Cookies are small text files stored on your device (computer, tablet, or mobile) when you visit a website. They allow the website to recognise your device and remember information about your visit.

This Policy also covers similar technologies that achieve the same or similar effects, including:

Pixels and web beacons (small images used to track page loads)

Local storage and session storage (data stored in your browser)

Software development kits (SDKs) used in embedded content

Where this Policy refers to “cookies”, the same rules apply to these similar technologies.

First-party and third-party cookies: First-party cookies are set by the website you are visiting (univccoalition.org). Third-party cookies are set by other organisations whose content or services are embedded or used on our website, such as Google Analytics.

Session and persistent cookies: Session cookies are temporary and are deleted when you close your browser. Persistent cookies remain on your device for a set period or until you delete them manually.

3. Why we use cookies

We use cookies to:

Ensure that the website functions correctly

Remember your choice to accept or decline analytics, so that we do not ask you again on every visit

Protect the website and visitors against security threats (where used by us or our providers)

(Only where you accept) Understand how visitors interact with our website so we can improve it (Google Analytics 4)

Remember your answers if you start filling in one of our forms, so that you can leave the page and continue later on the same device

4. Legal basis and consent

Under the ePrivacy Directive and Hungarian law:

Strictly necessary cookies. Can be set without your consent, because they are essential for the website to work or to provide a service you have requested.

All other cookies (and similar technologies) that are not strictly necessary. Generally require your prior, informed, and freely given consent before they are used.

We show a short notice (cookie banner) when you first visit our website. It asks for your consent to analytics cookies (Google Analytics 4, described in section 5.2), and offers two buttons side by side with the same prominence: Accept and Decline. Nothing optional runs until you click Accept. Declining changes nothing else on the site: every page and form works the same. You can change your choice at any time through the “Cookie settings” link at the bottom of every page, and withdrawing your consent is as easy as giving it (see section 7). Our forms run on our own website and set no third-party cookies; the storage they use to save your progress is described in sections 5.4 and 6. Information about your rights and how to exercise them is in our Privacy Policy. The site footer links to the Legal page, which holds this Cookie Policy and our other legal texts, and carries the “Cookie settings” link.

Where cookies involve the processing of personal data (for example, an IP address), the legal basis under Article 6 GDPR is your consent (Article 6(1)(a)) where we rely on consent for optional analytics, and legitimate interest (Article 6(1)(f)) where we rely on it for strictly necessary cookies.

5. Categories of cookies we use

We group the cookies we use into the following categories.

5.1. Strictly necessary cookies: These cookies and similar storage are essential for the website to function and cannot be switched off in our banner. They are typically set in response to actions you take. No consent is required for strictly necessary cookies under applicable rules, but we describe them for transparency.

5.2. Analytics cookies: Analytics cookies help us understand how visitors use our website. We use one analytics service, Google Analytics 4 (GA4), loaded through our site integration and only after you click Accept on our banner. Before you accept, and if you decline, the GA4 script is not loaded, no analytics cookies are set and no data is sent to Google.

5.3. Marketing and tracking cookies (not currently active): Marketing cookies are used to measure campaigns and sometimes for cross-site profiling. We do not operate dedicated marketing pixels (such as the LinkedIn Insight Tag) on univccoalition.org, and accepting our banner does not enable any advertising-related processing.

5.4. Our forms (first-party local storage): Our forms run on univccoalition.org itself and are not embedded from a third party, so they set no third-party cookies. To avoid making you retype answers, a form saves your progress in your own browser’s local storage under a name beginning frm: (for example, frm:membership). This entry stays on your device, is not a cookie and is never transmitted to us as one. It is removed as soon as you submit the form, and in any case expires 14 days after you last worked on it. You can delete it at any time by clearing site data in your browser.

If we add third-party embeds in future (for example, scheduling or video widgets), they may set their own cookies under the third party’s own policies, and we will list them in section 6.

6. Cookies and similar technologies in use

The table below lists the cookies and similar technologies in use on univccoalition.org at the time this Policy was last updated. This list is kept accurate and will be updated whenever we add, remove, or change a cookie.

First-party cookies:

Cookie name	Provider	Purpose	Duration
analytics	univccoalition.org	Stores your choice to accept or decline analytics, so we do not ask again on every visit. It is kept for the address where you made the choice	6 months

The analytics cookie records only whether you accepted or declined analytics and contains no personal data. Storing your choice is strictly necessary to respect it, so this cookie is set whichever button you click, without asking for consent. When it expires after 6 months, the banner asks you again.

First-party local storage (not cookies):

Name	Provider	Purpose	Duration
frm:<form>	univccoalition.org	Saves your answers and progress in an unfinished form so you can continue later on the same device	Deleted when you submit the form; otherwise expires 14 days after you last worked on it
uvc.formtoken.<page>	univccoalition.org	Session storage. Keeps the private link to a questionnaire section or record open while you move between its pages	Deleted when you close the tab
univcc-booking-manage-token	univccoalition.org	Session storage. Keeps the private link to manage a booking you made, after it is removed from the address bar	Deleted when you close the tab
univcc-travel:<token>	univccoalition.org	Remembers the key that unlocks a private event travel page, so you do not have to enter it again	Until that page’s access expires

We do not currently embed any third-party content that sets cookies on our website.

Analytics cookies (Google Analytics 4):

Cookie name	Provider	Purpose	Duration
_ga	Google Analytics	Client ID / distinction of users	Up to 2 years (typical)
_ga_<container-id>	Google Analytics	Session / property state for GA4	Up to 2 years (typical)

The GA4 script is loaded only after you click Accept on our banner. Before you accept, and if you decline, the cookies above are not set and no data is sent to Google. If you withdraw your consent later, we delete these cookies (see section 7).

7. Managing your cookie preferences

The first time you visit univccoalition.org, you will see a short cookie banner headed “Cookies on this site”. It asks for your consent to analytics cookies (Google Analytics 4, described in section 5.2), links to this Policy, and offers two buttons of equal prominence: Accept and Decline. The banner stays until you choose. Once you have chosen, it confirms your choice, and where you can change it, until you click Hide. We remember your choice for 6 months in the analytics cookie described in section 6, and then ask again. Until you click Accept, and if you click Decline, Google Analytics 4 is not loaded.

Your choice applies to the address where you made it. Our forms are also served at forms.univccoalition.org, which asks you separately and keeps its own choice; to change your choice there, use Cookie settings on that address.

Through our cookie banner: You can change your choice at any time. Use the “Cookie settings” link at the bottom of every page, or the “Change cookie settings” button at the end of this Cookie Policy, to open the banner again, then click Accept or Decline. Withdrawing your consent takes one click on Decline, just as giving it takes one click on Accept. If you decline after having accepted, we immediately stop Google Analytics from sending anything further, do not load it on later pages, and delete the Google Analytics cookies (_ga and _ga_<container-id>) already set on univccoalition.org. Withdrawing your consent does not affect the lawfulness of processing based on your consent before you withdrew it (Article 7(3) GDPR). Data that Google Analytics has already received is kept for 2 months, the retention period set in our Google Analytics account, and is then deleted.

Through your browser:

Google Chrome: https://support.google.com/chrome/answer/95647

Mozilla Firefox: https://support.mozilla.org/kb/cookies-information-websites-store-on-your-computer

Apple Safari: https://support.apple.com/guide/safari/manage-cookies-sfri11471/mac

Microsoft Edge: https://support.microsoft.com/microsoft-edge

Note: blocking all cookies and site data may prevent parts of the website from working correctly. In particular, our forms will not be able to save your progress, so you would need to complete a form in one sitting.

Opt-outs and settings for specific services:

Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout

Google (cookies overview): https://policies.google.com/technologies/cookies

Some of the cookies described in this Policy involve the processing of personal data (for example, your IP address or a randomly generated identifier linked to your device). This processing is described in more detail in our Privacy Policy, available at univccoalition.org/legal.

Your rights under the GDPR, including the right to access, rectification, erasure, restriction, portability, objection, and withdrawal of consent, apply to any personal data processed through cookies. See the Privacy Policy for how to exercise these rights.

8. International transfers

Some third-party cookie providers are based outside the European Economic Area (EEA), primarily in the United States. Where personal data is transferred outside the EEA through cookies, this is governed by the transfers framework set out in our Privacy Policy, including reliance on the EU-US Data Privacy Framework and Standard Contractual Clauses where applicable.

9. Changes to this Policy

We may update this Cookie Policy from time to time to reflect changes in the cookies we use, in the services embedded on our website, or in legal requirements.

We will ask for your choice again through the cookie banner when we add a new kind of optional cookie, and in any case 6 months after your last choice. Otherwise, the new version will apply from the stated effective date.

10. Contact us

For any questions about this Cookie Policy or about how we use cookies, please contact us:

Email: privacy@univccoalition.org

Post: UniPrisma Kft., Révay köz 4, 1065 Budapest, Hungary

This Policy is governed by Hungarian law and should be read alongside the UniVCC Privacy Policy at univccoalition.org/legal. Budapest, October 2026

Change cookie settings

Legal notice

Information pursuant to Act CVIII of 2001 on electronic commerce services and information society services.

Service provider

UniPrisma Kft.
Révay köz 4, 1065 Budapest, Hungary

Company registration number: 01-09-448571
Registered by the Company Registry Court of the Metropolitan Court of Budapest
Tax number: 26606572-2-42
EU VAT number: HU26606572
Managing Director: Károly Zoltán Szántó

Contact

Email: hello@univccoalition.org

Hosting provider

Clever Cloud SAS
4 rue Voltaire
44000 Nantes, France
www.clever-cloud.com
Hosting location: Paris, France

UniVCC (University Venture Capital Coalition) is an initiative operated by UniPrisma Kft.