Datenschutzerklärung. Last updated 18 July 2026
Welcome to the Game Pitch & Capital platform. The protection of your personal data is a top priority for PIRATEx GmbH. We process your data transparently, securely, and strictly in accordance with the EU General Data Protection Regulation (GDPR).
PIRATEx GmbH
Brabanter Str. 53
50672 Köln
Germany
Email: privacy@piratex.com
Our server automatically stores standard technical information in server log files, such as IP address, browser type, and time of access, strictly for ensuring system stability and security (Art. 6 Abs. 1 lit. f GDPR).
When you submit an application as a startup or investor, we collect the information you provide, including name, email, company details, and pitch information. This data is processed strictly for evaluating and matching you within the Game Pitch & Capital ecosystem (Art. 6 Abs. 1 lit. b GDPR).
To open the gated sections of The Pitch Academy, you can register with your email address. We store your email, the exact consent wording you accepted with its timestamp, and whether your address was confirmed via the sign-in link (double opt-in). The declared trade is stated at sign-up: access is free, and in exchange Game Pitch & Capital may email you about pitch content and GPC events (Art. 6 Abs. 1 lit. a GDPR). Only confirmed addresses receive such emails. You can withdraw this consent at any time via the link in every email or by writing to privacy@piratex.com; withdrawal deletes your membership record, the sign-in links issued to you, and the delivery records of emails we sent you. Application forms additionally record, as a simple yes/no flag, whether the submitter had a Playbook session at the time of submission; this flag contains no identifier and is used only in aggregate to measure whether the Playbook helps applicants (Art. 6 Abs. 1 lit. f GDPR).
We use Umami, a privacy-focused analytics tool that we host entirely on our own infrastructure. It sets no cookies, does not track you across other websites, and shares no data with third parties. It records only aggregated, non-identifying usage such as the pages visited, the referring site, browser type, operating system, device type, and approximate country. Your IP address is used only momentarily to derive an anonymized visitor count and is not stored. We use this to understand how the platform is used and to improve it (Art. 6 Abs. 1 lit. f GDPR). Because no cookies or cross-site tracking are involved, no separate consent is required, and you may object to this processing at any time by contacting us.
We protect the data that truly needs protection. Passwords and secure access tokens are never stored in readable form: they are hashed, so the original value cannot be recovered from our records. Other application data, including contact details and startup and investor profile fields, is stored in readable form so our team can review, search, and process applications inside the admin workflow. Access to that data is limited to authorized team members.
If you explicitly opt in during the application process, your company profile and pitch details will be made available in our gated Investor Lookbook. Access to this lookbook is strictly restricted to vetted, approved investors who have authenticated themselves via secure, expiration-based magic links.
This platform, including its database, runs on server infrastructure that we operate and administer ourselves. We use no third-party cloud analytics, tracking, or content delivery services; all page assets, including images, are served from our own domain. The provider of the underlying servers acts as a processor within the meaning of Art. 28 GDPR and processes technical data (such as IP addresses in connection logs) exclusively on our instructions.
We keep personal data only as long as necessary for the purpose it was collected for; afterwards it is deleted or anonymized (Art. 5 Abs. 1 lit. e GDPR). Server log files are kept only as long as needed for security and are deleted on a short, regular cycle. Application data is kept for the duration of the respective program cycle and any agreed follow-up matching, then deleted or anonymized; deleting your account anonymizes your data immediately. Records of consent (the Pitch Academy) are kept until you withdraw consent, and thereafter only as far as needed to demonstrate that consent was given (Art. 7 Abs. 1 GDPR). Where statutory retention obligations apply (for example under German commercial or tax law), the affected data is blocked for other use and deleted once the obligation expires.
You have the right to:
To exercise any of these rights, please contact us at privacy@piratex.com.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, Germany, ldi.nrw.de. You may also contact the supervisory authority of your habitual residence or place of work.