Data protection and confidentiality are important to LEGO® Ventures (“we”, “us” or “our”). This Privacy Policy sets out clear guidelines on LEGO Ventures’ processing of your personal data when you visit our website, https://legoventures.com/, apply for investment funding or in other ways interact with LEGO Ventures.
LEGO Ventures is part of KIRKBI A/S, and KIRKBI A/S is data controller for the processing of your personal data: KIRKBI A/S Koldingvej 2 DK-7190 Billund Business reg. (CVR) no.: 18591235
If you have any questions about our processing of your information, you are always welcome to contact LEGO Ventures at hello@legoventures.com
Below we have listed for which purposes we may process your personal data, when interacting with LEGO Ventures.
If you contact us via our website, email or in other way, we will use your personal data to be able to act on your inquiries etc. We typically process the following personal data about you, including contact details such as name, email, phone number, address, company, position, and the nature/purpose of your inquiry. We use art. 6(1)(f) in the GDPR (the rule on balancing of legitimate interests) as our legal basis. Our legitimate interest is to be able to respond to your inquiries, communicate with you etc. We obtain the personal data, that is collected, directly from you. We will keep your personal data only for the period necessary to fulfil the purposes listed above.
If you attend one of our seminars, webinars, workshops etc., we will use your personal data to be able to act on your registration and communicate with you before, during and after the event in question. For the purpose of a webinar or a workshop we will typically only process the following basic personal data about you: name, email, phone number, company, position, attendance at the session, location, language, catering preferences. We use art. 6(1)(b) in the GDPR as our legal basis, when you register for an event, as the data is necessary to fulfil the contract with you. However, we may also use art. 6(1)(f) in the GDPR (the rule on balancing of legitimate interests) as our legal basis. Our legitimate interest is to administer webinars and workshops and send relevant reminders and evaluation forms. We generally obtain the personal data, that is collected, directly from you, but we can also receive the information from other parties, such as your employer, handling the registration on your behalf. We will keep your personal data for the period necessary to complete the event in question and for the evaluation of such event. If you have paid a fee to attend the event in question, we will keep invoice data during the relevant financial year plus 5 years, as noted in the Danish Bookkeeping Act.
We may record (photos, video and sound) our activities (webinars, workshops etc.) to be able to share them via our website or social media platforms, such as LinkedIn and Twitter. If you attend a virtual event that is being recorded by us, we will always inform all participants of the recording before the event. When we publish recordings from our virtual events, we use art. 6(1)(f) in the GDPR (the rule on balancing of legitimate interests) as our legal basis. Our legitimate interest is to be able to promote our activities in order to share learnings and encourage the idea of learning through play with entrepreneurs and academic institutions via our platforms. If you do not want to be recorded, you can turn off your audio and camera when joining the event in question. We may also record our other events to be able to document the activities for internal learning purposes, as well as sharing them on our website or social media platforms. We process such recordings on the basis of art. 6(1)(a) in the GDPR (consent). However, we may also use art. 6(1)(f) in the GDPR (the rule on balancing of legitimate interests) as our legal basis if we from an overall assessment of the situation and motive find this to be adequate. Our legitimate interest is to be able to share our activities. We generally make our own recordings or use external photographers, but we can also receive photos and other recordings directly from you or other participants in the event. We will keep your personal data (photos and other recordings) for the period necessary to fulfil the purposes described above and no longer than 5 years after the event in question. Please note, that sharing of photos etc. on social media will be according to the terms of use of the relevant social media.
When you use our website, cookies are used to collect personal data about your behaviour. You may read more about this and locate a link to the privacy policies of such third-party providers in the cookie overview, which may be accessed through our cookie policy https://legoventures.com/cookie-policy. We process your personal data in connection with your use of our website as described above and as further described in our cookie overview, which may be access through our cookie policy https://legoventures.com/cookie-policy, based on art. 6(1)(a) in the GDPR (consent). However, we may also use art. 6(1)(f) in the GDPR (the rule on balancing of legitimate interests) in respect of cookies necessary for the website’s functionalities. Our legitimate interest is to provide you the best possible experience on the Website. You may withdraw or change your consent by rejecting cookies in the cookie overview or by blocking cookies in your web browser. Our website may contain links to other websites or to integrated sites. We are not responsible for the contents of the websites of other companies or for the practices of such companies regarding the collection of personal data. When you visit other websites, you should read the owners' policies on the protection of personal data and other relevant policies.
If you apply for investment funding from LEGO Ventures, we may process personal data about you in order to assess your application. We typically process the following personal data bout you as part of assessing an application for funding: name, email, phone number, company, position, address, country, information regarding the investment, and need of funding. We use art. 6(1)(b) in the GDPR as our legal basis, when we process your application. If you receive any funding from LEGO Ventures, we will also process your personal data on the basis of art. 6(1)(b) in the GDPR as our legal basis, as the data is necessary to fulfil the contract with you. We will furthermore use art. 6(1)(c) of the GDPR (legal obligation), if processing of your data is necessary to act on our obligation to file declarations to relevant authorities, comply with bookkeeping obligations or similar. We will keep your personal data for the period necessary to complete assessment of the application in question and for relevant documentation and monitoring of any award of funding. If you are awarded funding, we will keep your personal data during the relevant financial year plus 5 years, as noted in the Danish Bookkeeping Act.
If you send an application for our Incubation Studio, we may process personal data about you in order to access your application. We typically process the following personal data bout you as part of assessing an application: name, email, LinkedIn profile, country, information on entrepreneurial experience and domain expertise. We use art. 6(1)(b) in the GDPR as our legal basis, when we process your application. If your application for incubation studio is awarded, we may furthermore process your personal data on the basis of art. 6(1)(b) in the GDPR as our legal basis, as the data is necessary to fulfil the contract with you and art. 6(1)(c) of the GDPR (legal obligation) if this is relevant for the project in question. We will keep your personal data for the period necessary to complete assessment of the application in question and for relevant documentation and monitoring of any award of funding or agreements of collaboration. If you are awarded funding, we will keep your personal data during the relevant financial year plus 5 years, as noted in the Danish Bookkeeping Act.
We may share your personal data with independent data controllers if we are legally required to do so. These recipient categories are:
Personal data provided in connection with your application for funding from or collaboration with LEGO Ventures, will be processed by LEGO Ventures’ board and administration and may be shared with management and/or employees in other companies within the LEGO Group in order to assess the strategic and commercial potential of the submitted information. Such disclosure is subject to duties of confidentiality. Your personal data may also be disclosed to our data processors. Such disclosure is subject to data processing agreements, and the data processor may not use the data for other purposes than to perform the processing for us. These data processor categories are:
Furthermore, due to the collaborative nature of social medias, data that you post and other user content, may be accessible by other users of the LEGO Ventures websites and social media channels from around the world.
LEGO Ventures transfers, stores and processes your information (including your personal data and content) both inside and outside of Denmark. Wherever your personal data is transferred, stored or processed by us or by companies carrying out such services on our behalf, we will take reasonable steps to safeguard the privacy of your personal data. In some cases, we will be transferring your personal data to countries outside the EU/EEA. If your personal data are transferred to countries outside the EU/EEA, such transfer will take place on the following legal basis:
We use Monday.com to track projects and store network contacts (Friends of LEGO Ventures). Monday.com is based in the US and may transfer data to its subsidiaries as well as sub-data processors outside the EEA. The transfer mechanism used by Monday.com is Standard Contractual Clauses. We use Microsoft 365 with data storage within the EEA. However personal data may be transferred to or accessed from countries outside the EEA. If this is the case the transfer mechanism is Standard Contractual Clauses.
We generally process personal data that is collected directly from you or from the device you are using. We also refer to the description listed above.
We will retain your personal data for the period necessary to fulfil the purposes as listed above. Data may be processed and stored for a longer period in anonymized form or may be retained for a longer period of time if we are legally required to do so.
You may at any time withdraw any consent that we may have obtained from you. You may withdraw your consent by contacting us using the contact information stated above in clause 2. If you withdraw your consent, such withdrawal does not take effect until the date of withdrawal. It therefore does not affect the legality of our data processing up to the time when you withdraw your consent. If you withdraw your consent, images depicting you will not be used in new material, and images depicting you in website material or similar will be deleted or made anonymous immediately. Photos in printed material may be used while stocks last, after which they will be removed before reprinting. In addition, we will make reasonable efforts to delete already published recordings that are available on media at LEGO Ventures’ disposal.
You have the following rights:
Be aware that there may be conditions or limitations on these rights. It is therefore not certain for example that you have the right of data portability in the specific case - this depends on the specific circumstances of the processing activity. You may exercise your rights by visiting the settings for your account or by contacting us at hello@legoventures.com. If you contact us at hello@legoventures.com we will have to verify your identity for security purposes.
From time to time, we may change this Privacy Policy to accommodate new technologies, industry practices, regulatory requirements or for other purposes. This updated and valid Privacy Policy may be viewed at www.legoventures.com.
If you have any questions for this Privacy Policy, or if you wish to complain about our processing of your personal data, please contact us using the contact information provided in Clause 2 above. You may also complain to: The Danish Data Protection Agency Carl Jacobsens Vej 35 DK-2500 Valby Tel.: +45 33 19 32 00 Email: dt@datatilsynet.dk
//This Privacy Policy was updated 8 July 2021