Privacy policy

Last updated: 2026-05-11

1. Data controller

The data controller is Growth Strategies Management, SL, with registered office at Avd. Passapera, 17 (Esc.B - 1ra - 6a), 17310 Lloret de Mar – Girona, Spain. You can reach us at connect@gsm-ventures.com.

2. Purpose of processing

We process personal data to manage your enquiries, build and maintain commercial relationships, fulfil contracts, send service-related communications, comply with legal obligations, and run this website securely.

3. Legal basis

• Performance of a contract and pre-contractual measures (Art. 6(1)(b) GDPR).
• Your consent, where applicable, for specific communications or cookies (Art. 6(1)(a) GDPR).
• Compliance with our legal obligations (Art. 6(1)(c) GDPR).
• Our legitimate interest in conducting business correspondence and keeping the site secure (Art. 6(1)(f) GDPR).

4. What data we collect

We collect only the data you choose to send us, plus minimal technical data needed to operate the site:

• Contact data: your name, email, organisation, and any message you send via the form, email, WhatsApp, or LinkedIn.
• Technical data: non-identifying information your browser sends to our hosting provider (IP address, user agent, referrer), processed for security and uptime.

We do not run advertising trackers, behavioural pixels, or cross-site fingerprinting on this site.

5. Recipients and processors

We rely on a small set of trusted processors operating under appropriate data processing agreements:

• Vercel Inc. — website hosting and content delivery.
• Resend, Inc. — transactional delivery of contact-form emails.
• Google LLC (Gmail / Workspace) — email correspondence.
• Meta Platforms Ireland (WhatsApp) — when you contact us via WhatsApp.
• LinkedIn Ireland Unlimited Company — when you contact us via LinkedIn.

6. International transfers

Some of these providers may transfer data outside the EU/EEA. Where that is the case, transfers are governed by Standard Contractual Clauses, adequacy decisions, or equivalent safeguards.

7. Retention

Email and messaging correspondence is kept for as long as the business relationship is active, plus a reasonable archival period to meet legal obligations. Server logs are rotated by our hosting provider on a short schedule.

8. Your rights

You have the right to:

• access your personal data,
• request rectification of inaccurate data,
• request erasure of your data,
• object to processing,
• request restriction of processing,
• request portability of your data.

To exercise any of these rights, write to connect@gsm-ventures.com. You also have the right to lodge a complaint with your local supervisory authority — in Spain, the Agencia Española de Protección de Datos (AEPD).

9. Changes to this policy

We may update this policy as our practices or the law evolve. The date at the top reflects the most recent revision.