Privacy statement and Cookie policy

Welcome to the website of Borski Fund Coöperatief U.A., having its registered office at Mauritskade 64, 1092 AD, Amsterdam, registered with the Dutch Chamber of Commerce with number 74431633 (together with its group companies and Borski Management B.V., registered with the Dutch Chamber of Commerce with number 75376695, hereafter jointly: "Borski" or "we" or "us"). Borski invests in female entrepreneurs by offering risk capital and growth capital.

In this privacy statement, Borski, as controller, provides information about how it implements the General Data Protection Regulation (GDPR) and how it processes personal data. The protection of your personal data is important to us.

The privacy statement was last amended on 9^th June 2026.

What are personal data and which data do we process?

In short, personal data refers to any data that directly or indirectly enables the identification of a natural person. Borski may only process personal data where there is a lawful basis for doing so. We process personal data on the basis of one or more of the following legal grounds under the GDPR:

• If it is necessary for the performance of an agreement;
• if the processing is necessary to comply with a legal obligation;
• if Borski has a "legitimate interest" in doing so; or
• if you have given your explicit consent to process your personal data.

Depending on the relationship we collect and process the following personal data:

• personal data (such as first names, last name, date of birth, place/country of birth, gender, nationality, marital status, copy of ID or passport);
• contact details (such as address, telephone number, e-mail address);
• bank and payment details (such as account holder, bank account number / IBAN, bank identification code); or
• information about the assets (such as the source of wealth, source of funds, the amount of the bank account balances, debts, other financial data);
• information required to comply with anti-money laundering, sanctions screening, counter-terrorist financing and know-your-customer obligations.

In relation to our employees and applicants, we collect and process curriculum vitae, work experience, education, (copy) certificates, degrees and references. A BSN number is collected and processed only for employees and investors in Borski to the extent required by law.

We may also process personal data about you that we have obtained from third parties, such as:

• data regarding companies and their representatives collected from the Dutch Chamber of Commerce; or
• data from public accessible sources, including the Credit Registration Office (BKR), bankruptcy registers, newspapers, websites and social media.

Whose personal data do we collect and process?

Borski processes personal data of individuals and organisations with whom it cooperates, whether in the past, present or future. This includes:

• companies in which Borski (potentially) invests or (potentially) provides financing to;
• (potential) co-investors or financers;
• (potential) investors in Borski;
• ultimate beneficial owners of the (potential) (co-)investors (in Borski) or (potential) companies;
• visitors of our website;
• contact persons of our business partners; and
• employees or applicants.

For what purposes does Borski process you data?

Borski currently processes your personal data for the purpose for which they are intended. Depending on the relationship, your personal data will be processed for the following purposes, among others:

• in order to perform under (an) agreement(s) that you have entered into with Borski. The lawful basis is to perform an agreement and to comply with legal obligations;
• in order to reduce risks, for example by verifying that the data of investors / companies and verify their representatives are duly authorised. The lawful basis is to perform an agreement and to comply with legal obligations;
• in order to comply with legal obligations, for example, to identify and verify business contacts. The lawful basis is to comply with legal obligations;
• in order to carry out marketing activities, in particular, keeping interested parties informed by means of newsletters or sending invitations for events. The lawful basis is consent and/or a legitimate basis. This means that we do not process your personal data for this purpose without your consent;
• in order to improve and innovate our services. The lawful basis is consent and/or a legitimate basis. This means that we do not process your personal data for this purpose without your consent;
• in order to reach out to you if required. The lawful basis depends on the reason and may be for the performance of a contract, a legitimate basis, to fulfil a legal obligation and/or if you have given your consent to do so;
• in order to keep and maintain an administration. The lawful basis is to perform an agreement and to comply with legal obligations;
• in order to perform (statistic) research. The lawful basis is consent and/or a legitimate basis. This means that we do not process your personal data for this purpose without your consent;
• in order to enter into and maintain an employee/employer relationship and in this respect to maintain a personnel, financial, time absenteeism and/or salary administration. The lawful basis is to perform an agreement and to comply with legal obligations; and
• in order to a enter and maintain a relationship for the acquisition and execution of assignments and to keep a (financial) administration in relation thereto. The lawful basis is to perform an agreement and to comply with legal obligations.

Providing your personal data to other parties

Borski may share your personal data with third parties where this is necessary for the performance of a contract, compliance with legal obligations, the pursuit of our legitimate interests, or where you have provided your consent if required by law.

As part of our activities, we may share personal data with the following categories of recipients:

• StartGreen Capital and its affiliated entities, where necessary in connection with investment, financing and fund management activities;
• regulators, supervisory authorities and governmental bodies, including the Dutch Authority for the Financial Markets (AFM), the Dutch Central Bank (DNB), the Dutch Tax and Customs Administration and other competent authorities;
• fund administrators, financial administrators and other administrative service providers;
• auditors, accountants and tax advisers;
• legal advisers, notaries and other professional advisers;
• banks, payment service providers and financial institutions;
• providers of anti-money laundering (AML), know-your-customer (KYC), sanctions screening, fraud prevention and identity verification services;
• IT service providers, cloud hosting providers, software providers and other technology service providers supporting our business operations; and
• other service providers engaged by Borski in connection with its business activities.

Where third parties process personal data on our behalf, we enter into data processing agreements where required by law and ensure that appropriate safeguards are implemented to protect your personal data. Such third parties may only process personal data in accordance with our instructions and for the purposes for which the data were disclosed.

Borski does not sell personal data to third parties for commercial purposes.

Change of control

In the event of Borski merging with or being acquired by another company, our privacy policy includes the right to share your data with this company. In this scenario the other company will also comply with the privacy policy at hand.

Your data within or outside the European Union

In principle, we keep your data within the European Union. However, it is possible that in providing our services your data will be processed outside the European Union if one of our service providers is located outside the European Union. In that case, we will observe the strict rules that apply to processing outside the European Union. We will ensure that there is an agreement with the other party that is in line with the current standards approved by the European Commission.

How does Borski protect your personal data?

Borski will take appropriate technical and organisational measures to protect your personal data against loss or any form of unlawful processing. Employees of Borski are required to maintain confidentiality and they may not provide your personal data unlawfully or unnecessarily.

Personal data is retained only for as long as necessary for the purposes for which it was collected. In relation to investors, portfolio companies and business contacts, personal data may be retained for up to five years after the end of the business relationship in order to comply with anti-money laundering legislation. Certain financial, tax and contractual information may be retained for longer periods where required by applicable law.

Your rights

Under the GDPR, you have the following rights regarding the processing of your personal data.

Right of access

You have the right to know whether Borski processes your personal data and, if so, to obtain access to that personal data and information about how it is processed. You may also request a copy of your personal data.

Right to rectification

If the personal data we hold about you is inaccurate or incomplete, you have the right to request that we correct or update it without undue delay.

Right to be forgotten

In certain circumstances you have a right to be forgotten. In the event of a request to be forgotten, we will first check what personal data is necessary for us to guarantee further provision of our services or necessary because we process your personal data on the basis of a statutory obligation. Only data that is not necessary or required can be deleted.

Right to restrict processing

In certain circumstances you have a right to request the restriction or suppression of your personal data.

Right to object to processing

In certain circumstances you have a right to object to the processing of your personal data. Borski may process your personal data on the basis of a legitimate interest. However, you may have a compelling reason for requesting us to terminate the processing. In such case, you have a right to object.

Right to data portability

You have a right to request Borski to transfer your personal data to you. This right applies with respect to personal data that we process on the basis of both your permission or contract. We will transfer your personal data to you to the extent technically possible. This is called "data portability".

Rights related to automated decision-making and profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, where that decision produces legal effects concerning you or similarly significantly affects you, unless such processing is permitted by applicable law.

Right to withdraw consent

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Right to lodge a complaint

If you believe that your personal data has been processed in breach of applicable data protection laws, you have the right to lodge a complaint with the competent data protection supervisory authority or seek a judicial remedy.

If you wish to make use of any of the rights set out above or if you have any questions, please contact Borski by email at info@borskifund.com. We will respond to your request within one month after receipt.

Do you want us to approach you in the context of marketing?

In every marketing communication, we include a link where you can set your mail preferences to exclude the receipt of marketing messages from us. You can also register or unsubscribe for different types of messages from Borski. It is also possible to opt-out completely from all marketing communication. In such case, you will no longer receive any marketing communication.

We will, however, continue to send you messages regarding your agreement with Borski or general information about our services or organisation.

What is the scope of the responsibility of Borski?

Our website contains hyperlinks to other websites. When you click on the hyperlink, you leave our website and you end up on the website of another party. Borski has no control over the websites of third parties that are linked via the hyperlink. A different privacy policy applies to the use of these third-party websites. Borski does not accept any responsibility or liability for (the operation and / or content of) third-party websites. The Privacy Statement of Borski only relates to (personal) data that has been obtained through the website of Borski or otherwise by Borski. We therefore recommend that you carefully read the privacy policies of the other websites so that you know how they handle your personal data.

Cookies on website

With the use of cookies, we can store certain non-identifiable automatic data about the users of our website. Cookies are small text files that are automatically offered to your browser by the website. We use cookies that have a technical functionality. They ensure that the website works properly and that your preferred settings, for example, are remembered. These cookies are used to optimize the website. Cookies can be classified in different ways:

• First-party cookies are set by the domain you are visiting (borskifund.com). Third-party cookies are set by another domain.
• Session cookies are deleted when you close your browser. Persistent cookies remain on your device until they expire, or you delete them.
• Strictly necessary cookies are required for the Website to function or to provide a service you have explicitly requested. All other cookies (functional, analytics, marketing) require your prior consent under EU law.

Cookies we use

We aim to keep our use of cookies to a minimum. The table below describes each cookie or storage item currently set by the Website. The Website does not currently set advertising, marketing or cross-site tracking cookies, and does not embed social-media tracking pixels. If we introduce analytics, embedded video or other non-essential cookies in the future, we will update this policy and request your consent through the cookie banner before those cookies are placed.

Social media

Our website could contain buttons of social media, for example but not limited to, LinkedIn, Facebook, TikTok, or X This privacy statement is not applicable to these social media. The use of social media is your own responsibility. We recommend you read the privacy statements of these social media to understand how they process your personal information. Many social media providers are located outside the European Union and transfers your personal data outside the European Union. As a result, it might be possible that your personal data is not protected the same manner as within the European Union.

Not satisfied?

If you are not satisfied with the processing of your personal data or with the information you have received about it, please contact us at info@borskifund.com.

If you are still not satisfied with the way your complaint has been dealt with, you can submit a complaint to the Dutch Data Protection Authority.

Changes reserved

This privacy statement and cookie policy may be extended or amended in the future. All changes are published on our website. You can find the previous version of the privacy statement and cookie policy here: Past Privacy and Cookie Policy.

Questions or information?

If you have any questions or requests in response to the foregoing, you can contact Borski by e-mail at info@borskifund.com.