Privacy notice
This notice explains what personal data the InnoLab Portfolio collects when you contact a venture or submit one of our forms (enquiry, founder application, mentor offer, project proposal), why we collect it, and the rights you have over it.
Who is responsible
BME InnoLab is the controller for personal data submitted through this site. The portfolio is hosted on Vercel and carries no tracking beyond privacy-friendly, cookieless analytics.
What we collect
Only what you enter in a form. For an enquiry: your name, email address, an optional organisation, your message, and which venture and kind of interest the enquiry concerns. The enquiry form also offers optional fields for your phone number, job role, and website — these are never required and are collected only if you choose to fill them in.
For the founder application, mentor, and project-proposal forms: the contact details the form asks for and your answers to its questions.
To prevent abuse, your IP address is processed transiently for rate-limiting and an optional bot check. It is not stored alongside your submission.
Why we use it, and our legal basis
We use these details for a single purpose: to route your enquiry or submission to the InnoLab team (and, for venture enquiries, the relevant venture), to review it, and to reply. The legal basis is your consent, given when you tick the consent box before sending.
Optional email updates
Each form also offers separate, optional checkboxes for email updates. There are two separate mailing lists and you receive only the ones you ticked: opportunities for BME researchers and founders (funding calls, proof-of-concept grants, and program deadlines); and portfolio updates (new entries in the portfolio and ways to get involved). The founder application form offers the opportunities list; the mentor and project-proposal forms offer portfolio updates; the enquiry form offers both, so you can choose either or both; and our subscribe page offers both as well. Each is usually sent about once a month, occasionally more when something is time-sensitive. Ticking is never required: leaving the box unticked has no effect on your enquiry or submission. The legal basis is your consent, given specifically for these updates.
We use double opt-in: after you tick the box (or subscribe via our subscribe page), you receive a single confirmation email, and you are subscribed only if you confirm. If you don't confirm, you won't be emailed again.
You can unsubscribe at any time — every update carries a one-click unsubscribe link, or you can contact us (see below). Unsubscribing does not affect your enquiry or submission, and withdrawing marketing consent does not withdraw the consent you gave for us to handle your enquiry.
Who else processes it
When you write to us, a short notification — your name and which form you used, without the content of your message — is emailed to the team through Brevo (Brevo SAS, France). The site and form submissions are served by and transit Vercel. Rate-limiting and the bot check use Upstash and Cloudflare respectively. We do not sell your data or use it for advertising.
If you opt in to email updates, or once we are actively following up on your enquiry, your contact details are also managed in Brevo (Brevo SAS, France), our EU-hosted contact-management and email service.
How long we keep it
The full record of your enquiry or submission is stored durably by InnoLab in private storage (Vercel Blob, Vercel Inc., United States) for up to 24 months from the date of submission, after which it is deleted. This applies to all four forms — enquiry, founder application, mentor offer, and project proposal. You may request erasure at any time — see the Contact section below.
Your email-updates subscription is separate from the submission record: it lasts until you unsubscribe or ask us to delete it, even if the underlying submission has already been deleted after the retention period above. Conversely, if you never confirm the subscription email, we delete the pending subscription after 30 days.
Your rights
Under the GDPR you can ask us to access, correct, or erase your data, withdraw your consent, or object to its use, and we will respond within the statutory time frame. You also have the right to complain to your data-protection authority.
Contact
To exercise any of these rights, or for any question about this notice, contact us at: hello@innolab.bme.hu