Last updated: October 2025

1. Introduction

GestInvest (“we”, “our”, “us”) respects your privacy and is fully committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store, and protect your information when you visit our website, engage with our services, or interact with us in any capacity.

GestInvest complies with the General Data Protection Regulation (EU) 2016/679 (GDPR), as well as all applicable European and national data protection laws.
Our goal is to ensure that your data is handled lawfully, transparently, and securely.

2. Data Controller

The data controller responsible for processing your information is:

GestInvest – Private Capital Advisors
📧 privacy@gestinvest.org

If you have any questions or requests regarding your personal data, you may contact our Data Protection Officer (DPO) at the above address.

3. Data We Collect

We collect and process only the information necessary to provide our services or improve user experience.
This may include:

Personal Identification Data: name, surname, title, email address, phone number.

Professional Data: company name, position, and industry.

Financial or Transactional Data: only where relevant for investor or advisory engagements.

Technical Data: IP address, browser type, device identifiers, website usage analytics.

Communication Data: messages, inquiries, or feedback submitted via contact forms or email.

We do not collect sensitive data (racial origin, political opinions, religious beliefs, health data, etc.) unless explicitly required by law and with your written consent.

4. How We Use Your Data

We process your data for the following purposes:

To respond to inquiries or requests submitted via our website;

To manage professional relationships with clients, investors, and partners;

To perform compliance and due diligence checks where applicable;

To send insights, reports, or newsletters (only with your explicit consent);

To improve our website’s functionality and user experience;

To comply with legal and regulatory obligations.

All processing is performed under one or more lawful bases defined by Article 6 of the GDPR — primarily consent, contract performance, and legitimate interest.

5. Legal Basis for Processing

We process personal data only when at least one of the following applies:

Consent: when you voluntarily provide data via forms or newsletters;

Contract: when processing is necessary to fulfil an advisory or investment relationship;

Legal Obligation: where compliance with AML/KYC or other laws is required;

Legitimate Interest: to maintain business communications and secure our platform.

6. Data Retention

Your data will be retained only for as long as necessary for the purposes it was collected, unless a longer retention period is required by law or regulatory obligations.
When data is no longer needed, it is securely deleted or anonymised.

7. Data Security

GestInvest employs advanced security measures to protect personal data from unauthorised access, alteration, disclosure, or destruction.
These include encrypted storage, firewalls, multi-factor authentication, and restricted access based on professional role.
All third-party service providers (hosting, analytics, CRM, etc.) are bound by strict data protection agreements.

8. Your Rights

Under the GDPR, you have the following rights:

Right to access your personal data;

Right to rectification of inaccurate information;

Right to erasure (“right to be forgotten”);

Right to restriction of processing;

Right to data portability;

Right to object to processing based on legitimate interest;

Right to withdraw consent at any time.

To exercise these rights, please contact: privacy@gestinvest.org
We will respond to your request within 30 days in accordance with GDPR requirements.

9. Data Transfers

GestInvest may process data within or outside the European Economic Area (EEA), but only with partners and service providers that ensure equivalent levels of protection in line with GDPR adequacy standards and Standard Contractual Clauses (SCCs).

10. Third-Party Links

Our website may contain links to external websites.
GestInvest is not responsible for the privacy policies or content of such third parties.
We recommend that you review their respective policies when leaving our site.

11. Cookies

GestInvest uses cookies and similar technologies to enhance user experience and website performance.
You can manage your cookie preferences directly in your browser settings.
For detailed information, please refer to our Cookie Policy (forthcoming section).

12. Policy Updates

This Privacy Policy may be updated periodically to reflect changes in legal requirements or internal practices.
The latest version will always be available on this page, with the date of the last update clearly indicated.