1. Data Controller Identification
This Privacy Policy governs the processing of personal data collected via the web portal sortsybeacn.store operated by Sortsybeacn Heritage Media Ltd., registered in Germany under Company Registration No. HRB-892419, with legal offices situated at Königsallee 48, 40212 Düsseldorf, Germany. Our designated Data Protection Officer may be contacted directly at [email protected].
2. Categories of Information Collected
We process personal data only to the minimum extent necessary to deliver high-fidelity architectural content, historical monograph dispatches, and curated route coordination:
- Directly Provided Information: Full name, academic or institutional affiliation, email address, and inquiry details provided voluntarily when completing our contact forms or newsletter subscriptions.
- Technical & Telemetric Data: Truncated IP addresses (anonymized at ingestion), browser engine version, device class, operating system, referring URL, and session dwell times.
- Local Storage Consent Flags: Binary state variables saved within your browser’s `localStorage` to record your cookie consent choice across sessions without tracking personal identifiers.
3. Legal Bases for Processing Under GDPR (Art. 6)
All data processing carried out by Sortsybeacn is anchored in one of the following lawful conditions:
- Consent (Art. 6(1)(a)): Explicit consent given when opting into our analytical cookies or entering your email for Grand Gazette dispatches.
- Contractual / Pre-contractual Measures (Art. 6(1)(b)): Responding to formal curator inquiries and research monograph requests submitted by you.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server network integrity, mitigating cyber attacks, and diagnosing performance bottlenecks across our digital repository.
4. Third-Party Processors & Infrastructure
We work with select GDPR-compliant infrastructure partners who act strictly as data processors under binding Data Processing Agreements (DPAs):
- Cloud Hosting & CDN: European data center nodes with end-to-end TLS 1.3 encryption.
- Static Assets: Unsplash Inc. for content imagery delivery (cached proxy).
- Font Assets: Google Fonts (served with zero user-tracking query strings).
5. International Transfers & Safeguards
Where any transmission of analytical or diagnostic data occurs outside the European Economic Area (EEA), such transfers are governed by the European Commission's Standard Contractual Clauses (SCCs) alongside supplementary technical encryption protocols.
6. Data Retention Period
We retain contact submissions for a period of up to 24 months to satisfy ongoing academic inquiries, after which records are permanently erased or completely anonymized. Newsletter subscription emails remain securely stored until you elect to unsubscribe via the one-click link included in every communication.
7. Your Statutory Rights (GDPR & CCPA/CPRA)
Under applicable European data protection legislation and relevant United States privacy frameworks, you possess the right to:
- Request access to copies of all personal data held concerning you (Art. 15 GDPR).
- Demand rectification of inaccurate or outdated historical records (Art. 16 GDPR).
- Request the complete erasure of your data under the "Right to be Forgotten" (Art. 17 GDPR).
- Restrict or object to ongoing processing (Art. 18 & Art. 21 GDPR).
- Receive your data in a structured, portable, machine-readable format (Art. 20 GDPR).
- Lodge a complaint with a competent supervisory authority, including the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW).
8. Opt-Out & Contacting Our Data Officer
To exercise any of the statutory rights enumerated above, please transmit your written request to:
Sortsybeacn Data Protection Bureau
Königsallee 48, 40212 Düsseldorf, Germany
Email: [email protected]