Privacy policy.
Last updated: September 2026
HealthTech Launchpad Studio respects your privacy and is committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and protect personal information when you visit our website, contact us, submit an enquiry, engage with our services or otherwise interact with HealthTech Launchpad Studio.
1. Who we are
The data controller is:
HealthTech Launchpad Studio S.L.
Office:
C/Serra Calderona 40, Campolivar, Paterna, Spain
Email: contact@htlstudio.com
For the purposes of this Privacy Policy, “HTLS”, “HTLStudio”,“we”, “us” or “our” refers to HealthTech Launchpad Studio S.L.
Where another HTLS group company, including an HTLS Ventures or Accelerator entity, acts as an independent or joint controller in relation to a particular activity, you will be informed accordingly.
2. What personal data we collect
Depending on how you interact with HTLS, we may collect the following categories of personal data.
Contact and identification information
This may include:
name;
professional title;
company or institution;
email address;
telephone number;
country or location;
LinkedIn or professional profile information.
Enquiry and business information
When you use our contact form or communicate with us, we may collect information about:
your company or organisation;
the venture, technology or opportunity you are working on;
your fundraising requirements;
investment interests;
partnership enquiries;
commercialisation projects;
your correspondence with HTLS.
Professional information
Where relevant to an engagement, we may process information relating to:
professional experience;
education;
expertise;
employment history;
executive or advisory roles;
professional affiliations.
Startup and investment information
If you approach HTLS regarding fundraising, venture building, acceleration or investment opportunities, we may process information concerning:
founders and management teams;
shareholders;
fundraising rounds;
investors;
financial and commercial information;
business plans;
pitch materials;
regulatory strategy;
intellectual property;
company development milestones.
Where possible, such information should relate to companies rather than identifiable individuals.
Website and technical information
When you visit our website, certain technical information may be collected automatically, such as:
IP address;
browser type;
device information;
operating system;
referring website;
pages visited;
date and time of access;
cookie and analytics identifiers.
The use of cookies and similar technologies is explained separately in our Cookie Policy.
3. Please do not submit confidential medical information through the website
HTLS operates in the healthcare and life-sciences sector, but our public website is not intended for the submission of patient records, medical files or identifiable health information.
Please do not submit:
patient names;
medical records;
diagnostic information;
clinical images containing identifiable information;
genetic information;
or other special-category personal data
through the general website contact form unless HTLS has specifically requested the information and an appropriate secure process and legal basis have been established.
Under the GDPR, health, genetic and certain other types of information receive additional protection as special categories of personal data.
4. How we use your personal data
We may process personal information for the following purposes.
Responding to enquiries
We use information submitted through our website or by email to:
respond to your enquiry;
understand your requirements;
arrange meetings;
assess whether HTLS may be able to assist you.
Legal basis
Our legitimate interests in responding to professional enquiries and developing our business, and where appropriate, taking steps at your request before entering into a contract.
Providing HTLS services
Where you become a client, partner or portfolio company, we may process information required to:
provide venture-building services;
perform due diligence;
support fundraising;
deliver executive deployment;
conduct commercialisation work;
perform scientific, regulatory or commercial assessments;
support accelerator or venture-building activities;
manage the commercial relationship.
Legal basis
Performance of a contract, steps taken before entering into a contract, legitimate interests and, where applicable, compliance with legal obligations.
Evaluating startups and investment opportunities
HTLS may assess information concerning founders, management teams and businesses when considering:
accelerator participation;
venture-building engagements;
fundraising mandates;
potential investment opportunities;
investor due diligence;
institutional commercialisation projects.
Legal basis
Our legitimate interests in assessing potential commercial relationships, investment opportunities and venture engagements.
5. Fundraising and investor introductions
Where HTLS supports a startup with fundraising, we may process relevant professional and business contact information in order to:
identify potentially suitable investors;
facilitate introductions;
manage investor communications;
coordinate fundraising processes;
support due diligence and transaction preparation.
Information may be shared with prospective investors only where relevant to the fundraising process and subject to appropriate confidentiality arrangements where required.
We do not sell personal data to investors or other third parties.
6. Investor and due diligence activities
Where HTLS performs due diligence for an investor, we may receive information from:
the relevant company;
founders and executives;
investors;
advisers;
publicly available professional sources;
data rooms or other authorised sources.
This information may be used to assess areas including:
management;
scientific validity;
clinical strategy;
regulatory pathways;
commercial potential;
market opportunity;
business risk.
Where personal data have not been obtained directly from the individual concerned, the GDPR imposes additional transparency requirements regarding categories, sources and intended processing, subject to applicable exceptions.
7. Universities, research institutions and partners
Where HTLS works with universities, hospitals, accelerators, research organisations or industry partners, we may process professional contact details and information concerning:
researchers;
technology-transfer professionals;
clinicians;
project leads;
executives;
investors;
commercial partners.
This information is processed only where reasonably necessary to evaluate, establish or manage the relevant relationship or project.
8. Communications and marketing
If you subscribe to updates, request information or otherwise consent to receive communications from HTLS, we may send you:
company updates;
HealthTech insights;
event information;
relevant opportunities;
news concerning HTLS activities.
Where consent is required, you may withdraw it at any time.
Spanish LSSI-CE rules generally prohibit unsolicited electronic commercial communications unless the applicable legal requirements are met, and require commercial communications to be identifiable as such.
Every marketing communication will provide an appropriate means to unsubscribe where required.
9. Legal bases for processing
Depending on the circumstances, HTLS relies on one or more of the following legal bases under the GDPR:
Consent
Where you have expressly agreed to a particular use of your information.
Contract
Where processing is necessary to perform a contract with you or to take steps at your request before entering into one.
Legal obligation
Where HTLS must process information to comply with applicable laws or regulatory requirements.
Legitimate interests
Where processing is necessary for legitimate business purposes and those interests are not overridden by your fundamental rights and freedoms.
The GDPR recognises legitimate interests as a lawful basis where appropriate, subject to balancing those interests against the rights and freedoms of the individual.
10. Who we may share personal data with
HTLS may share personal data where necessary with:
HTLS group companies;
professional advisers;
accountants and auditors;
lawyers;
IT, cloud and hosting providers;
CRM and business software providers;
regulatory, scientific or commercial specialists;
investors;
universities and institutional partners;
portfolio or accelerator companies;
service providers assisting with HTLS operations.
We require service providers processing personal data on our behalf to handle such information appropriately and in accordance with applicable data-protection requirements.
We may also disclose information where required by law, court order or competent authority.
11. International transfers
HTLS operates internationally and may work with investors, service providers or partners located outside the European Economic Area.
Where personal data are transferred outside the EEA, HTLS will use an appropriate legal mechanism where required, such as:
an adequacy decision adopted by the European Commission;
Standard Contractual Clauses;
another legally recognised safeguard.
The GDPR requires individuals to be informed where international transfers are intended and, where applicable, of the safeguards relied upon.
12. How long we keep personal data
HTLS retains personal data only for as long as reasonably necessary for the purpose for which it was collected, taking into account legal, contractual, accounting and regulatory obligations.
Typical retention periods may include:
Website enquiries
Normally retained for up to 24 months after the last meaningful interaction, unless a business relationship develops.
Client and partner records
Retained for the duration of the relationship and thereafter for the period required by applicable legal, tax or contractual obligations.
Marketing information
Retained until you unsubscribe, withdraw consent or otherwise object, subject to any limited information required to record that preference.
Due diligence and investment-related information
Retained for as long as reasonably required for the relevant mandate and any associated legal or professional record-keeping requirements.
Where information is no longer required, it will be deleted, anonymised or securely restricted as appropriate.
13. Your data-protection rights
Subject to applicable law, you may have the right to:
Access
Request confirmation as to whether HTLS processes your personal data and obtain access to that information.
Rectification
Ask us to correct inaccurate or incomplete information.
Erasure
Request deletion of personal data where the legal requirements are satisfied.
Restriction
Request that processing be restricted in certain circumstances.
Objection
Object to processing based on legitimate interests and object at any time to processing for direct marketing.
Portability
Receive certain personal data in a structured, commonly used and machine-readable format where the legal conditions apply.
Withdraw consent
Where processing is based on consent, withdraw that consent at any time without affecting processing carried out before withdrawal.
These rights are established under the GDPR and reflected in Spain’s LOPDGDD.
To exercise your rights, contact:
We may request reasonable information necessary to verify your identity before acting on a request.
14. Complaints
If you believe that HTLS has processed your personal data in a manner inconsistent with applicable data-protection law, we encourage you to contact us first so that we can address the matter.
You also have the right to lodge a complaint with the competent supervisory authority.
For HTLS in Spain, this is generally:
Agencia Española de Protección de Datos (AEPD)
Spanish Data Protection Agency (AEPD)
15. Automated decision-making
HTLS does not currently use the public website to make decisions about individuals based solely on automated processing that produce legal or similarly significant effects.
If this changes, this Privacy Policy will be updated and any additional disclosures required by law will be provided.
16. Security
HTLS uses reasonable technical and organisational measures designed to protect personal data against:
unauthorised access;
accidental loss;
destruction;
alteration;
misuse;
unauthorised disclosure.
Access to personal data is limited to individuals and service providers who reasonably require access for legitimate business purposes.
No internet transmission or storage system can be guaranteed to be completely secure.
17. Third-party websites
The HTLS website may contain links to third-party websites, including LinkedIn, partner organisations, universities, investors or portfolio companies.
HTLS is not responsible for the privacy practices of third-party websites.
We encourage you to review their privacy information before providing personal data.
18. Cookies
Our website may use cookies and similar technologies for:
essential website functionality;
security;
analytics;
remembering user preferences;
measuring website performance.
Where required by applicable law, non-essential cookies will not be placed until appropriate consent has been obtained.
Further information should be provided in the separate Cookie Policy and through the site’s cookie-management interface.
19. Children
The HTLS website and services are primarily directed toward businesses, professionals, investors, researchers and institutions.
They are not intended to collect personal data directly from children.
If we become aware that information relating to a child has been submitted through the website without an appropriate legal basis, we will take reasonable steps to address it.
20. Changes to this Privacy Policy
HTLS may update this Privacy Policy from time to time to reflect:
changes to our services;
changes to our corporate structure;
new technologies;
changes to applicable law;
changes to how we process personal data.
The current version will always be published on this website with the date of the latest update.
21. Contact
For questions about this Privacy Policy or the way HTLS processes personal data, please contact:
HealthTech Launchpad Studio S.L.
C/Serra Calderona 40, Campolivar, Paterna, Spain
Email: contact@htlstudio.com