Privacy Policy

1000X, d.d., Hruševje 82, 6225 Hruševje, Slovenia. Contact: privacy@invest100.now.

When you request a proforma invoice to buy a €100 ticket, we collect: full name (or company name), email address, postal address, and — for legal entities and self-employed persons — VAT / tax ID.

We automatically generate a unique invoice number and payment reference and store the request in our database in order to reconcile the incoming bank transfer.

We also process basic technical data (IP address, browser type, pages visited) that any web server records.

• Issuing the proforma invoice and processing the ticket purchase — performance of a contract (Art. 6(1)(b) GDPR).
• Meeting bookkeeping, tax and anti-money-laundering obligations — legal obligation (Art. 6(1)(c) GDPR).
• Contacting you to complete investor onboarding (KYC) — performance of a contract and legal obligation.
• Website security, prevention of abuse, and aggregated analytics — legitimate interest (Art. 6(1)(f) GDPR).

Accounting and tax records are retained for the period required by Slovenian law (typically 10 years). KYC and AML records are retained for 5 years after the end of the business relationship. Data no longer required is deleted or anonymised.

Personal data may be shared with our accountants, banks, IT and hosting providers, and — where required — with competent authorities. Hosting is provided by Lovable Cloud, whose infrastructure is located within the EU/EEA. We do not sell your personal data.

You have the right to access, rectify, erase, restrict, and port your data, and to object to processing based on legitimate interest. To exercise these rights, contact privacy@invest100.now. You may also lodge a complaint with the Information Commissioner of the Republic of Slovenia (ip-rs.si).