Privacy Policy
Paul Roman Capital · KvK 97294128 · Maastricht, Netherlands
Last updated: 10 March 2026 · Applicable law: Dutch law (AVG / GDPR)
1. Who we are
Paul Roman Capital is a financial research and education platform operated by Paul Romankiewicz, registered in the Netherlands (KvK 97294128), based in Maastricht.
Contact for privacy matters: paulromancapital@gmail.com
2. What data we collect
We collect and process the following personal data:
Waitlist / contact form
When you submit your email address via our waitlist or contact form, we store your email address and the date of submission. This is the only directly identifying information we collect.
Performance metrics (Vercel Speed Insights)
This website uses Vercel Speed Insights to measure page load performance (Core Web Vitals). This service collects anonymised, aggregated performance data including your approximate geographic region and browser type. No cookies are set and no personal profiles are built. Data is processed by Vercel Inc. (San Francisco, USA) under EU Standard Contractual Clauses.
Server logs
Like all web servers, our hosting provider (Vercel) automatically logs basic request data including IP address, request path, and timestamp. These logs are retained for a maximum of 30 days and are used solely for security and reliability purposes.
3. Legal basis for processing
Under the General Data Protection Regulation (GDPR / AVG):
- Waitlist data: Your explicit consent (Art. 6(1)(a) GDPR), given when you submit your email address. - Performance metrics: Our legitimate interest in ensuring website reliability and performance (Art. 6(1)(f) GDPR). This data is anonymised and cannot be traced back to an individual. - Server logs: Legitimate interest for security purposes (Art. 6(1)(f) GDPR).
4. How we use your data
Your email address is used exclusively to: - Send you updates about the launch of Paul Roman Capital's investment research services - Respond to your direct enquiries
We do not sell, rent, or share your personal data with third parties for marketing purposes. We do not use your data for automated decision-making or profiling.
5. Data retention
- Waitlist emails: Retained until you unsubscribe or request deletion, or until one year after the platform launches, whichever comes first. - Performance metrics: Aggregated and anonymised — no retention limit applies as no personal data is stored. - Server logs: Maximum 30 days.
6. Cookies
This website does not use tracking cookies, advertising cookies, or analytics cookies.
No cookie consent banner is required because no non-essential cookies are set. The only data stored locally in your browser is purely functional (e.g. session state for the user interface) and does not contain personal information.
If we introduce analytics or marketing tools in the future, we will update this policy and implement a proper cookie consent mechanism before doing so.
7. Your rights (GDPR / AVG)
As a data subject under Dutch and EU law, you have the right to:
- Access: Request a copy of the personal data we hold about you. - Rectification: Request correction of inaccurate data. - Erasure: Request deletion of your data ("right to be forgotten"). - Restriction: Request that we limit how we process your data. - Portability: Receive your data in a structured, machine-readable format. - Objection: Object to processing based on legitimate interest. - Withdraw consent: At any time, where processing is based on consent.
To exercise any of these rights, contact us at paulromancapital@gmail.com. We will respond within 30 days.
You also have the right to lodge a complaint with the Dutch supervisory authority: Autoriteit Persoonsgegevens · autoriteitpersoonsgegevens.nl · T +31 70 888 8500
8. Data transfers outside the EU
Vercel Inc. processes data on servers in the United States and other regions. These transfers are covered by EU Standard Contractual Clauses (SCCs) in accordance with Art. 46 GDPR. Vercel is certified under applicable data transfer frameworks.
9. Changes to this policy
We may update this privacy policy from time to time. The date at the bottom of this page reflects when it was last revised. We encourage you to review it periodically. Material changes will be communicated via the website.
Questions about your data?
Contact us at paulromancapital@gmail.com. We will respond within 30 days as required by GDPR.