Privacy Policy

Controller information for riskregen.com. Last updated: 16 September 2026.

1. Controller

Ayanda Ntombela (GRRI / RiskRegen), Germany — contact editorial@riskregen.com. Full postal address: see Impressum.

2. What we process

• Newsletter signup: professional email, role, region preference, topic interests, consent timestamp. Processed via Mailchimp under a data-processing arrangement. Double opt-in confirmation is required before marketing mail is sent.
• Server logs: standard hosting logs retained by the host for security, then deleted or anonymised per host policy.
• Analytics / ads: not active at launch. When enabled, an IAB-certified CMP will gate non-essential cookies.

3. Legal bases (GDPR)

• Newsletter: Art. 6(1)(a) consent — withdraw anytime via unsubscribe link or email.
• Site security / delivery: Art. 6(1)(f) legitimate interests.

4. Retention

Active subscribers: until unsubscribe or deletion request. Unconfirmed signups: purged on Mailchimp’s schedule.

5. Your rights

Access, rectification, erasure, restriction, portability, and objection where applicable. Contact: editorial@riskregen.com.

6. Transfers

Mailchimp may process data in the United States under appropriate transfer safeguards. Details: mailchimp.com/legal.

7. No sale of data

We do not sell subscriber lists. Topic preferences are used only to segment editorial mail from GRRI.