Privacy Policy

PURSUANT TO THE ART. 13 OF REGULATION (EU) 679/2016 ("GDPR")

WHO WE ARE

The company STRASSHILL HOLDINGS LIMITED, with registered office in Agapinoros & Arch. Makariou III Ave., 2, IRIS TOWER, 1076, Nicosia, Cyprus, Registration Number: HE 295928 (hereinafter “Strasshill” or the “Company”), in its capacity as data controller with regard to Personal Data collected on the website Catalyx https://catalyx.partners (hereinafter also referred to as the “Site”), pays the utmost attention to the security and confidentiality of Personal Data in the performance of its activities.

This privacy policy (hereinafter “Privacy Policy”) may be subject to periodical amendments, additions or updates, also in consideration of possible changes in the applicable legislation, or measures of the competent Data Protection Authority and/or the European Data Protection Board (“EDPB”). Substantial changes and updates to the Privacy Policy will be brought to the attention of those concerned by updating the link to the Privacy Policy in the footer of the Site.

We invite you to regularly read this Privacy Policy in order to be aware of its latest version and to be informed at all times of how we process your Personal Data.

WHICH PERSONAL DATA MAY BE COLLECTED

Personal data means any information about an individual from which that person can be identified. The following categories of personal data relating to you, which you voluntarily provide, may be collected by the Company in the performance of its activities (the term “Personal Data” shall mean all the categories listed below, jointly considered):

Identification and contact details: information about your first name, surname, telephone number, email address, country;
Professional and company-related information: company name, tax id number, product or website link, revenue model, traction information (including, where voluntarily provided, EBITDA, burn rate, sales or similar metrics);
Site Usage data: IP address, User Agent software and information acquired via cookies (see our Cookie Policy https://catalyx.partners/cookies-policy which regulates the details).

We also collect, use and share aggregated data such as statistical or demographic data which is not Personal Data as it does not directly (or indirectly) reveal your identity. For example, we may aggregate individuals' usage data to calculate the percentage of users accessing a specific Site feature in order to analyse general trends in how users are interacting with our Site to help improve the Site and our service offering.

HOW WE COLLECT YOUR PERSONAL DATA

The Company collects and processes your Personal Data in the following circumstances:

if you visit and navigate the Site;
if you complete and forward the form on the Site;
when carrying out and replying to your support requests and/or reports;
if you submit information as a venture seeking investment or acquisition opportunities;
if you submit a contact request as a potential partner or investor.

We ask you to keep your Personal Data up to date and to inform us of any changes.

WHAT PURPOSES CAN YOUR PERSONAL DATA BE USED FOR

The processing of Personal Data is carried out for the following purposes and is legitimised by the legal bases provided for in the applicable legislation, as described below:

Evaluation of investment and acquisition opportunities.

The Company may process your Personal and Contact Data, to evaluate the ventures, startups and business opportunities submitted through the Site.

Legal basis of the processing: legitimate interest of the Company.

Providing your Personal Data for such purpose is mandatory; failure thereof, would prevent evaluation.

Communications related to investment activity.

The Company may process your Contact details, in particular, your email address and/or telephone number, to communicate with you regarding follow-ups on submitted opportunities, investment or acquisition processes, company milestones relevant to your profile.

Legal basis for processing: legitimate interest of the Company.

You may object, at any time, to the processing of your Contact details for the above purpose. The request for objection can be made by sending an email at the following address privacy@catalyx.partners .

Website functionality and analytics.

Your Personal Data may be processed to ensure the proper functioning, security and improvement of the Site.

Legal basis for processing: legitimate interest of the Company.

Defend a right in the course of judicial, administrative or extra-judicial proceedings and in the context of disputes arising in connection with the services offered.
The Company may process your Personal Data to defend its rights or act or even claim anything against you or any third party.

Legal basis for processing: legitimate interest of the Company to defend its rights in court.

You have the right to object at any time, on grounds relating to your particular situation, to the processing of Personal Data concerning you carried out by the Controller in pursuit of its legitimate interests.

Providing your Personal Data for such purpose is mandatory; failure thereof would prevent the Company from defending its rights.

Purposes relating to obligations provided for by laws, regulations and European legislation, by provisions / requests for authorities entitled to do so by law and/or by supervisory and control bodies.

The Company may process your Personal Data in order to comply with requests from Judicial Authorities and/or Supervisory Authorities, or to fulfil a legal obligation.
Legal bases for processing: legal obligation.

Providing your Personal Data for such purpose is mandatory; failure thereof would prevent the Company from complying with specific legal obligations.

HOW WE KEEP YOUR PERSONAL DATA SAFE

The Company uses a wide range of security measures to improve protection and maintain the security, integrity and accessibility of your Personal Data.

All of your Personal Data is stored on our secure servers (or on secure paper copies or other durable storage means) or on those of our suppliers, and may be accessed and used based on our standards and our security policies (or equivalent standards for our suppliers).

HOW LONG DO WE STORE YOUR INFORMATION FOR

The Company will keep your Personal Data only for the time necessary to achieve the purposes for which they were collected or for any other related and lawful purpose.
Personal Data collected through the Site will be retained for no longer than three (3) years from the date of collection, unless a longer retention period is required by law or necessary for the establishment, exercise or defence of legal claims.

We restrict access to your Personal Data only to those who need to use it for relevant purposes.
When your Personal Data is no longer required, or when there is no longer any legal basis for storing such Personal Data, it will be irreversibly anonymized or securely destroyed.

WHO WE CAN SHARE YOUR PERSONAL DATA WITH

Your Personal Data may be accessed by duly authorised employees, as well as by external suppliers providing support for the provision of services, if any, designated as data processors, including all IT, hosting, analytics providers. Such parties process Personal Data exclusively on documented instructions from the Company and in compliance with applicable data protection laws.

TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

For the performance of processing operations, your Personal Data may be transferred outside the European Economic Area (hereinafter “Non-European Countries”). In such circumstances, if the non-European countries to which your Personal Data may be transferred are not considered adequate by the European Commission and the cases of exemption under Article 49 of the GDPR do not apply, the Company shall take appropriate safeguards to protect your Personal Data in accordance with applicable law and in particular Article 46 of the GDPR. You have the right to obtain information about the appropriate safeguards adopted for the transfer of Personal Data and the means of obtaining a copy of such Personal Data or the place where it has been made available.

CONTACTS

If you have any questions about this Privacy Policy, including any requests to exercise your legal rights (as provided in paragraph 10), the contact details for the Company, in its capacity as data controller, are the following:

STRASSHILL HOLDINGS LIMITED

registered office: Agapinoros & Arch. Makariou III Ave., 2, IRIS TOWER, 1076, Nicosia, Cyprus, Registration Number: HE 295928

Email: privacy@catalyx.partners .

YOUR PERSONAL DATA PROTECTION RIGHTS AND YOUR RIGHT TO LODGE A COMPLAINT BEFORE THE SUPERVISORY AUTHORITIES

You have the right to:

Obtain confirmation of the existence or non-existence of Personal Data concerning you, obtain access to your Personal Data and obtain a copy thereof (“Subject access request”);
In the event that the processing is carried out by automated means on the basis of consent or contract, to receive your Personal Data in a structured, commonly used and machine-readable format or to request its transmission to another controller without hindrance (Right of portability);
Obtain the rectification of Personal Data processed by us that is inaccurate or the integration of incomplete Personal Data (Right of rectification);
Obtain the deletion of Personal Data processed by us if any of the grounds set forth in Article 17 of the GDPR apply (Right to erasure);
Revoke your consent to the processing at any time if the processing is based on your consent, without prejudice to the lawfulness of the corresponding processing until the time of revocation (Article 7(3) of the GDPR - Right to revoke consent);
Request to limit the processing to certain Personal Data only, if one of the grounds set out in Article 18 of the GDPR exists (Right to restrict processing);
Object in whole or in part to the processing of Personal Data relating to you (so-called Right of Objection);

Requests to exercise the above rights should be addressed to the following address: privacy@catalyx.partners .

The exercise of these rights is free and is not subject to any formal constraints. Should you exercise any of the aforementioned rights, it shall be the responsibility of the Company to verify that you are entitled to exercise them and to reply to you, as a rule, within one month.

COMPLAINTS

In the event that you believe that the processing of your Personal Data is in violation of the provisions of the Data Protection Legislation, you have the right to lodge a complaint with the local competent authority or to take legal action. We would, however, appreciate the chance to deal with your concerns before you approach the competent authority or take legal action so, please contact us in the first instance.

Last updated on January 2026