Privacy Notice

1. Controller

Leonidsport B.V., a Dutch private limited company (B.V.) with its registered seat in Amsterdam, is the controller of personal data submitted through this website. Registered office: Strawinskylaan 569, 1077 XX Amsterdam, The Netherlands. Contact: contact@leonidsportbv.com.

2. Data we collect

When you submit an investment idea we process your name, email address, country of residence, professional affiliation and LinkedIn profile (where provided), the content of your submission and any attachments, and technical data such as your IP address for security and abuse prevention.

Fields marked with an asterisk are required to assess and respond to your idea; without them we cannot accept a submission. Other fields and attachments are optional. Please do not include sensitive personal data or personal information about others unless you are entitled to do so.

3. Purpose and legal basis

We use this data to evaluate your submission, to communicate with you about it, and to protect the integrity of the submission process. We rely on our legitimate interests in identifying and evaluating investment opportunities, responding to contributors and preventing misuse (Article 6(1)(f) GDPR). Accepting the Submission Terms or acknowledging this notice is not consent to personal-data processing. If a separate agreement is discussed, necessary pre-contractual steps taken at your request may rely on Article 6(1)(b); legally required processing relies on Article 6(1)(c). We do not use submissions for mailing lists or advertising, or make decisions producing legal or similarly significant effects solely through automated processing.

4. Access and retention

Submissions are accessible only to authorised Leonidsport B.V. personnel. We keep your submission and related personal data, including attachments and review notes, for 12 months from submission, then delete them. We keep specific records longer only where required by law or necessary for a legal claim, and only for as long as necessary for that purpose.

Expired submissions are removed in scheduled daily batches; deletion may therefore take up to a day after the deadline under normal operation. Legal exceptions are recorded and reviewed with an expiry date. Backup copies may remain until the provider's backup cycle expires; deleted data is not used in normal operation. Copies downloaded by authorised personnel remain subject to the same retention rule.

5. Sharing

We do not sell personal data. Authorised personnel and providers supporting website hosting, database services, private file storage, authentication and operational security may process data to provide those services. We use third-party service providers for website hosting, data storage and email delivery, under data-processing agreements. A list of providers and their locations is available on request from contact@leonidsportbv.com. Disclosure may also be necessary to comply with law or establish, exercise or defend legal claims.

If personal data is transferred outside the EEA, we rely on an applicable adequacy decision or other lawful safeguard, such as standard contractual clauses. You can request information about applicable safeguards using the contact address above.

6. Your rights

Subject to the GDPR's conditions, you can request access, correction, erasure or restriction of processing. You can object to processing based on legitimate interests on grounds relating to your situation. Data portability applies where processing is automated and based on consent or a contract. Where we rely on consent for any separate activity, you may withdraw it without affecting the lawfulness of earlier processing.

Send requests to contact@leonidsportbv.com, quoting your submission reference if available. We may ask for proportionate information to verify your identity. We normally respond within one month of receipt. Where permitted for complex or numerous requests, we may extend this by up to two further months and will explain the extension within the first month. You may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

7. Cookies and browser storage

No advertising or analytics tools are intentionally enabled by this website. Necessary browser storage supports authorised administrator sign-in and session management and is cleared when the administrator signs out, subject to the authentication provider's session settings. The submission form does not require an account. Fonts are served with the website, not requested from Google Fonts.

Strictly necessary cookies and similar storage do not require consent. Any future non-exempt tracking must remain disabled until you consent, with an equally accessible refusal choice and an easy way to withdraw consent.