Privacy Policy

This Privacy Policy explains how Oliver Kaposi & Company collects, uses, stores and shares personal data when you visit our website, create an account, submit buyer acquisition criteria, submit a sell-side mandate, view teaser materials, request an introduction, communicate with us, or otherwise use our private matching platform.

For the purposes of this Privacy Policy, "Oliver Kaposi & Company", "we", "us" or "our" refers to:

• Legal entity: Oliver Kaposi & Company (registration pending)
• Trading name: Oliver Kaposi & Company
• Registered address: Csengery street 30., 1074 Budapest, Hungary
• VAT No.: registration pending
• Company registration number: registration pending
• Contact email: hello@oliverkaposi.com

Oliver Kaposi & Company acts as the data controller for personal data processed through the website and platform, except where we expressly state otherwise.

This Privacy Policy applies to:

• prospective and registered buyers;
• financial sponsors, family offices and strategic acquirers;
• sell-side advisors and other mandate submitters;
• representatives of firms using or seeking access to the platform;
• visitors to our website;
• people who contact us or are included in platform-related communications.

The platform is intended for professional and business use. It is not intended for use by children or private consumers seeking consumer services.

We may collect and process the following categories of personal data:

A. Account and identity data

• name;
• business email address;
• phone number;
• job title;
• firm name;
• firm type;
• country and business location;
• login credentials and account status;
• approval, verification and onboarding status.

B. Buyer profile and acquisition criteria data

• target sectors;
• target geographies;
• transaction size preferences;
• revenue, EBITDA or enterprise value ranges;
• majority/minority or other transaction preferences;
• strategic rationale, acquisition notes or thesis information;
• excluded sectors or other deal preferences;
• information about buyer intent and process readiness.

C. Sell-side mandate data

• non-identifying mandate information;
• sector, geography, revenue, EBITDA, enterprise value and other deal attributes;
• mandate status and confirmation that an opportunity remains live;
• teaser availability and access status;
• advisor notes and process information;
• any personal data included in mandate submissions or related communications.

D. Matching and platform activity data

• match suggestions and match evaluation information;
• teaser views and access logs;
• introduction requests;
• approval, rejection and admin review decisions;
• user actions, timestamps and audit logs;
• messages, support requests and platform communications.

E. Technical and usage data

• IP address;
• browser type and version;
• device information;
• operating system;
• pages viewed;
• session information;
• cookies and similar technologies;
• security logs and access events.

F. Communications data

• emails, forms, meeting notes and other communications with us;
• feedback, requests, complaints or support messages.

We do not intentionally request special category personal data, such as health data, political opinions, religious beliefs or biometric data. Please do not submit such information through the platform.

We collect personal data:

• directly from you when you register, complete forms, submit criteria, submit mandates, request teaser access or contact us;
• from your firm or colleagues where they invite you or submit information on behalf of your firm;
• from sell-side advisors, buyers or other platform participants in connection with a potential match;
• from public business sources where used for professional verification or mandate review;
• automatically through cookies, logs and similar technical tools.

We use personal data for the following purposes:

A. Account creation, onboarding and access control — Purpose: to create, administer, verify and approve user accounts. Legal basis: performance of a contract or steps prior to entering into a contract; legitimate interests in maintaining a trusted private network.

B. Buyer criteria and mandate processing — Purpose: to receive, structure, review and manage buyer acquisition criteria and sell-side mandates. Legal basis: performance of a contract; legitimate interests in operating a private matching platform.

C. Matching and human review — Purpose: to identify potentially relevant matches, review fit, confirm live status, manage teaser access and support controlled introductions. Legal basis: performance of a contract; legitimate interests in providing relevant matching and protecting confidential deal flow.

D. Confidentiality and controlled disclosure — Purpose: to protect buyer intent, seller identity and mandate confidentiality before disclosure. Legal basis: legitimate interests in protecting confidential business information and maintaining platform trust; performance of a contract.

E. Communications and support — Purpose: to respond to enquiries, provide support, send operational messages and manage platform communications. Legal basis: performance of a contract; legitimate interests; legal obligations where applicable.

F. Security, fraud prevention and audit logs — Purpose: to protect the platform, prevent misuse, detect suspicious activity and maintain audit records. Legal basis: legitimate interests; legal obligations.

G. Legal, compliance and dispute management — Purpose: to comply with legal obligations, enforce our terms, respond to authorities, protect rights and manage disputes. Legal basis: legal obligation; legitimate interests.

H. Marketing and relationship management — Purpose: to send relevant updates, invitations or information about the platform where permitted. Legal basis: consent where required; legitimate interests for limited B2B relationship communications where permitted by law.

I. Analytics and website improvement — Purpose: to understand website performance and improve the platform. Legal basis: consent where required for non-essential cookies; legitimate interests for strictly necessary technical logs.

The platform may use rules, scoring logic or software-assisted analysis to identify potential matches between buyer criteria and sell-side mandates. Matching output is used as decision support and is subject to human review, admin control and/or platform approval before sensitive information is released.

We do not intend to make legally or similarly significant decisions about individuals solely by automated means. If this changes, we will update this Privacy Policy and provide any additional information required by law.

We may share personal data with:

A. Platform participants — We may share limited information with buyers, sell-side advisors or other relevant counterparties only as part of the controlled matching, teaser access and introduction process. Seller identity and buyer intent are protected until disclosure is justified and approved according to the platform process.

B. Service providers — We may use trusted service providers for hosting, authentication, analytics, email delivery, CRM, document storage, security, support, payment processing or other operational services. These providers process data on our behalf under appropriate contractual safeguards.

C. Professional advisers — We may share data with lawyers, accountants, auditors, insurers, tax advisers or other professional advisers where necessary.

D. Authorities and legal recipients — We may disclose data where required by law, regulation, court order, authority request or to protect legal rights.

E. Business transfers — If our business or assets are reorganised, sold, merged or transferred, personal data may be transferred as part of that transaction, subject to appropriate safeguards.

We do not sell personal data.

Where personal data is transferred outside the European Economic Area, we will use appropriate safeguards where required, such as adequacy decisions, Standard Contractual Clauses, contractual protections or other lawful transfer mechanisms.

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

• account data: for the duration of the account and a reasonable period afterwards;
• buyer criteria and mandate data: while active and for a reasonable audit period after closure, expiry or deletion;
• match, teaser and introduction records: for audit, compliance, dispute and relationship management purposes;
• communications: for as long as needed to respond, maintain records and manage the relationship;
• technical logs: for limited security and operational periods;
• legal records: for the period required or permitted by applicable law.

Specific retention periods may vary depending on the type of data, legal requirements, contractual obligations, dispute risk and operational needs. Where possible, data will be deleted, anonymised or archived when it is no longer needed.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. These measures may include access controls, encryption, audit logs, role-based permissions, secure hosting, confidentiality controls and internal review processes.

No online service can guarantee absolute security. Users are responsible for keeping login credentials confidential and notifying us promptly of suspected unauthorised use.

Subject to applicable law, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict processing;
• object to processing based on legitimate interests;
• request data portability;
• withdraw consent where processing is based on consent;
• lodge a complaint with a data protection authority.

You may exercise your rights by contacting us at hello@oliverkaposi.com or by writing to us at the address above. We may need to verify your identity before responding.

If you are in Hungary, you may also contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH). You may also contact your local supervisory authority if you are located in another EU/EEA country.

Where permitted, we may send professional updates or platform-related communications. You can opt out of non-essential marketing communications at any time. Operational, legal, security and account-related messages may still be sent where necessary.

We use cookies and similar technologies as described in our Cookie Policy. Some cookies are strictly necessary for the website or platform to function. Non-essential cookies, such as analytics or marketing cookies, will be used only where permitted by law and, where required, with your consent.

Our website or platform may contain links to third-party websites or services. We are not responsible for the privacy practices, content or security of those third parties.

We may update this Privacy Policy from time to time. The latest version will be published on our website with the updated date. Material changes may be communicated through the platform or by other appropriate means.

For privacy questions or requests, contact:

• Oliver Kaposi & Company (registration pending)
• Trading as Oliver Kaposi & Company
• Csengery street 30.
• 1074 Budapest
• Hungary
• VAT No.: registration pending
• Email: hello@oliverkaposi.com