Privacy Policy

1. Scope and Controller Identification

This Privacy Policy applies to all services, content directories, and inquiry channels operated through Popsvaultieslistcrate.mom. The data controller responsible for the processing of your personal information is:

Popsvaultieslistcrate Media S.r.l.
Company Registration Number: IT-08942150014
Registered Office: Corso Gaetano Scirea 50, 10151 Torino TO, Italy
Data Protection Officer Email: [email protected]

2. Categories of Information Collected

We process personal information under the principles of data minimization and lawfulness under Article 6 of the General Data Protection Regulation (EU GDPR 2016/679):

• Direct Inquiry Data: When submitting forms through our Contact Desk, you provide your name, valid email address, subject of inquiry, and narrative message content.
• Technical and Server Logs: Your IP address, browser user-agent header, referring URL, time of access, and TLS handshake telemetry generated during network requests.
• Client-Side Storage: Preference flags saved to browser localStorage storing your cookie consent selections.

3. Lawful Bases for Processing

We collect and utilize personal data on the following recognized legal grounds:

• Legitimate Interests (Art. 6(1)(f) GDPR): Maintaining web application security, mitigating malicious DDoS traffic, and ensuring accurate server routing.
• Performance of Pre-contractual Inquiries (Art. 6(1)(b) GDPR): Responding to user requests concerning travel advisories, itinerary assistance, and editorial clarifications.
• Consent (Art. 6(1)(a) GDPR): The placement of non-essential analytical cookies when specifically approved via the Cookie Consent Banner.

4. Third-Party Processors & Infrastructure

We do not vend, rent, or trade your personal information to marketing brokers. We share minimal data solely with infrastructure sub-processors essential to web delivery:

• Edge Hosting and Content Delivery Networks: Standard server networks maintaining secure edge caching nodes.
• Domain and SMTP Infrastructure: Relaying inbound and outbound communications securely over transport layer encryption (TLS).

5. International Data Transfers

Where technical data is transferred outside the European Economic Area (EEA), such transfers are governed by standard contractual clauses (SCCs) approved by the European Commission, ensuring equivalent protection standards to European statutory rights.

6. Data Retention Protocols

Inbound editorial and general inquiry messages sent through our contact desk are retained for twenty-four (24) months to facilitate ongoing correspondence and audit verification, after which records are expunged or anonymized. Server weblogs are held for ninety (90) days solely for security monitoring and incident response before automated overwriting.

7. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess explicit statutory entitlements concerning your personal data:

• Right of Access & Portability: Request copies of the personal details we hold regarding your identity.
• Right to Rectification: Request correction of incomplete or incorrect records.
• Right to Erasure ('Right to be Forgotten'): Request permanent deletion of correspondence where no overriding legal obligation requires retention.
• Right to Restrict or Object: Restrict processing or object to processing carried out under legitimate interest grounds.
• California Consumer Privacy Act (CCPA) Disclosures: We do not sell personal information as defined by California civil code. Residents have the right to request disclosure of categories of information collected without discriminatory treatment.

To exercise any statutory right, contact our Data Protection Officer at [email protected]. Inquiries are resolved within thirty (30) calendar days free of charge.

8. Supervisory Authority

Should you believe our processing of your information breaches applicable law, you have the right to lodge a formal complaint with the Italian data protection authority (Garante per la protezione dei dati personali, Piazza Venezia 11, 00187 Roma, garanteprivacy.it) or your local EU member state supervisory entity.