Privacy policy

1. Data controller

The controller for the processing described in this policy is Gonzalo Russo, GR Safeguarding, an independent professional project. Contact: info@grsafeguarding.com.

GR Safeguarding is not currently presented on this website as an incorporated company. If a legal entity is formed in the future, this policy will be updated with the relevant details.

2. Data we may process

• Email enquiries: email address, name if provided, message content and metadata required to manage the communication.
• Investor Room: when you access it through Cloudflare Access and a one-time code, the email used, login date and time, IP address, country associated with the IP, access decision and technical authentication data may be logged.
• Technical and security data: information needed to serve the website, prevent abuse, maintain security and diagnose incidents.

3. Purposes and legal bases

• Responding to enquiries, collaboration proposals and requests for information and, where relevant, taking steps before entering a professional relationship.
• Managing and securing access to the Investor Room, preventing unauthorised access and maintaining basic security records.
• Operating, protecting and maintaining the website and its technical services.
• Complying with applicable legal obligations or lawful requests from authorities.

Where the GDPR applies, these purposes may rely on pre-contractual steps, legal obligations and/or legitimate interests relating to professional communication, security and protection of project assets. If consent-based processing is introduced in the future, consent may be withdrawn in accordance with applicable law.

4. Service providers and recipients

GR Safeguarding uses third-party services required to operate the website. These currently include Cloudflare for infrastructure, security, Investor Room protection and email routing, and Google/Gmail as the destination mailbox for professional email. These providers may process data under their own terms, security measures and contractual obligations.

Personal data is not sold and is not currently used for behavioural advertising or commercial visitor profiling.

5. International transfers

Some technology providers operate international infrastructure. Data may therefore be processed outside the country from which you access the site. Where required, processing is subject to the mechanisms and safeguards provided by applicable law and the providers' contractual arrangements.

6. Retention

• Professional communications are kept for as long as needed to respond and manage the relationship and are periodically reviewed, unless legal obligations or legitimate reasons justify retaining relevant correspondence.
• Under the free plan currently used, Cloudflare keeps Access logs visible in the dashboard for approximately 24 hours. If GR Safeguarding exports a record for legitimate follow-up, security or audit purposes, the copy will be retained only as long as necessary and reviewed periodically.
• Technical data retained by service providers is also subject to their retention policies and configurations.

7. Your rights

Depending on the law that applies to you, you may have rights to access, correct, erase, restrict or object to processing, request portability and withdraw consent where consent is the relevant legal basis. You can make a request at info@grsafeguarding.com.

If the GDPR applies, you may also lodge a complaint with the competent data protection authority in your place of residence, work or the place of the alleged infringement.

8. Children

This website is intended for organisations, professionals, partners and investors. It is not designed to collect personal data directly from children or young people. GR Safe Sport is a public initial-guidance tool available at safe.grsafeguarding.com; it does not operate as a reporting or case-management channel and does not ask users to submit personal case narratives in order to use the guidance.

9. Changes

This policy may be updated if website functions, providers, professional activity or legal requirements change. The effective date of the current version is shown at the top of this page.