Last updated: 21 September 2026
1. Controller
The controller responsible for the processing of personal data on this website is:
Patrice Motlik
Richard-Sorge-Straße 68
10249 Berlin
Germany
Phone: +49 176 62264120
Email: patrice.motlik@shin-coventures.com
Website: shin-coventures.com
2. General information on data processing
We process personal data only where this is necessary to provide our website, communicate with prospects and clients, or deliver our services.
Depending on the purpose, processing is based in particular on:
- Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or the performance of a contract;
- Art. 6(1)(c) GDPR where processing is necessary to comply with a legal obligation;
- Art. 6(1)(f) GDPR where processing is necessary for our legitimate interests and those interests are not overridden by the interests or fundamental rights of the data subject;
- Art. 6(1)(a) GDPR where we expressly request consent for a specific purpose.
We use external service providers where necessary for the operation of our website and the handling of enquiries. Where these providers process personal data on our behalf, such processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.
3. Visiting our website and server data
When you access our website, technical information transmitted by your browser or device is processed. This may include:
- IP address,
- date and time of access,
- page or file requested,
- amount of data transferred,
- browser type and version,
- operating system and device type,
- referring URL where transmitted,
- technical status and error information.
This processing is necessary to deliver the website, maintain its stability and security, and detect or prevent technical faults and misuse.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable operation of our website.
4. Hosting and technical delivery through Webflow
Our website is operated and technically delivered using Webflow.
Provider:
Webflow, Inc.
398 11th Street, 2nd Floor
San Francisco, CA 94103
USA
Webflow provides, among other things, the technical infrastructure for website delivery, content management, hosting and CDN functions, as well as the processing of web forms.
In this context, technical connection data such as IP address, browser and device information and, when a form is used, the information submitted through that form may be processed.
Webflow may process personal data in the United States. According to Webflow, international transfers are supported, among other mechanisms, by the EU-U.S. Data Privacy Framework and additional contractual safeguards including the EU Standard Contractual Clauses contained in its Data Processing Addendum.
Processing relating to the technical provision of the website is based on Art. 6(1)(f) GDPR. Where Webflow processes personal data on our behalf, this takes place pursuant to Art. 28 GDPR.
5. Locally provided fonts
Our website uses, among others, the fonts Playfair Display, Inter and Inter Display.
These fonts are provided through the Webflow infrastructure used by this website. Our website does not establish a connection to Google Fonts or Google webfont services when pages are loaded.
Accordingly, no personal data is transferred to Google solely for the purpose of displaying these fonts.
6. Cookies, analytics and tracking
Based on the current technical configuration, we do not use non-essential analytics, advertising or tracking technologies on this website.
In particular, we currently do not use:
- Google Analytics,
- Google Tag Manager,
- Meta Pixel,
- LinkedIn Insight Tag,
- Hotjar,
- Microsoft Clarity.
Our technical privacy audit also found no non-essential cookies or comparable LocalStorage or SessionStorage entries during ordinary page loads.
We therefore currently do not use a consent-management or cookie banner.
If we introduce technologies in the future that require prior consent, they will only be activated after such consent has been obtained and this Privacy Policy will be updated accordingly.
7. Contact by email or telephone
If you contact us by email or telephone, we process the information you provide. This may include your name, contact details and the content of your enquiry.
The information is processed in order to handle and respond to your enquiry and, where applicable, to prepare further services.
Where your enquiry concerns the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.
For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is the proper handling of enquiries and communication with prospects, business partners and clients.
The information is deleted once the enquiry has been conclusively dealt with and no further communication is reasonably expected, unless statutory retention requirements or other legitimate grounds require longer storage.
8. KŌBŌ enquiry form
The SHIN | KŌBŌ page provides an enquiry form.
When you use this form, we process the information you enter. This currently includes:
- name,
- email address,
- selected area of interest,
- country or region on an optional basis,
- the content of your message.
We use this information to receive, assess and respond to your enquiry and, where appropriate, to prepare further steps relating to it.
Where your enquiry concerns a potential order, engagement or other contractual relationship, processing is based on Art. 6(1)(b) GDPR.
Otherwise, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is to process KŌBŌ enquiries and communicate with interested persons.
The form is transmitted and stored through Webflow Forms. Webflow stores form submissions within its system and makes them available to the website operator for processing. Webflow may process this information in the United States. Webflow refers to the EU-U.S. Data Privacy Framework and Standard Contractual Clauses within its Data Processing Addendum as transfer mechanisms.
Access to form submissions is limited to the persons who need the information to handle the enquiry and to the processors technically involved.
We retain the information for as long as necessary to handle the enquiry. Once the enquiry has been conclusively dealt with, the information is deleted when no further communication is reasonably expected, unless statutory retention obligations or other legal grounds require continued storage.
Please do not submit special categories of personal data within the meaning of Art. 9 GDPR through the free-text field, such as health information, religious or political beliefs or similarly sensitive information, unless this is strictly necessary for your enquiry.
9. External links to Calendly and Instagram
Our website contains links to external services, in particular Calendly for appointment scheduling and Instagram.
These services are not embedded into our website as content or tracking elements. Simply visiting our website therefore does not establish a connection to Calendly or Instagram through these links.
Only when you actively click such a link do you leave our website and access the respective external service. From that point onwards, processing by that provider is generally carried out under its own responsibility and in accordance with its own privacy information.
Calendly states that personal data may be processed in the United States and that transfers from the EEA may rely, among other mechanisms, on the EU-U.S. Data Privacy Framework and Standard Contractual Clauses.
We recommend reviewing the privacy information of the relevant external provider before using its service.
10. Recipients and categories of recipients
We disclose personal data only where this is necessary for the relevant purpose, required by law or otherwise permitted by a lawful basis.
Recipients or categories of recipients may include:
- persons within our organisation who need the information to handle the relevant enquiry,
- Webflow as provider of the website, hosting and form infrastructure,
- IT, communications and email service providers,
- tax advisers, legal advisers or other professional advisers where necessary,
- public authorities or other public bodies where disclosure is legally required.
11. International data transfers
The use of certain technical service providers may involve the processing of personal data outside the European Union or European Economic Area.
This applies in particular to Webflow, which is based in the United States.
Where personal data is transferred to third countries, this takes place only in accordance with Art. 44 et seq. GDPR. Relevant safeguards may include adequacy decisions of the European Commission, such as the EU-U.S. Data Privacy Framework, or appropriate safeguards such as EU Standard Contractual Clauses. Webflow states that it uses corresponding transfer mechanisms.
12. Retention
We generally retain personal data only for as long as necessary for the respective purpose.
The information is subsequently deleted or anonymised unless:
- statutory retention requirements require continued storage,
- it is required for the establishment, exercise or defence of legal claims,
- another legal basis permits continued retention.
For enquiries in particular, the information is deleted after the enquiry has been conclusively handled where no further communication is reasonably expected and none of the above reasons requires continued storage.
13. Your rights
Subject to the applicable legal requirements, you have in particular the right to:
- request access to personal data concerning you,
- have inaccurate personal data rectified,
- request erasure of your personal data,
- request restriction of processing,
- receive personal data in a portable format where the legal requirements are met,
- object to processing based on Art. 6(1)(f) GDPR,
- withdraw consent at any time with effect for the future where processing is based on consent.
You also have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.
14. Data security
We take appropriate technical and organisational measures to protect personal data against loss, manipulation, unauthorised access and other security risks.
Communication between your browser and our website is generally encrypted using HTTPS/TLS.
15. Changes to this Privacy Policy
We may update this Privacy Policy if our website, services, processing activities or applicable legal requirements change.
The current version is available on this website.