Privacy Policy

1. Introduction & Data Controller Overview

Sortsparkshowcas Media Ltd. ("Sortsparkshowcas", "we", "our", or "us"), operating under registration number GR-94819032-EL in Athens and Piraeus, Greece, is committed to safeguarding the personal data of our visitors, readers, and subscribers. This Privacy Policy sets out our policies regarding the collection, use, disclosure, and protection of personal information under the General Data Protection Regulation (EU GDPR Regulation 2016/679), the Greek Law 4624/2019, the California Consumer Privacy Act (CCPA), and applicable global privacy statutes.

2. Categories of Information We Collect

We process information only where strictly necessary to deliver high-quality editorial content, maintain web security, and fulfill user inquiries. These categories include:

• Directly Provided Information: When you submit our contact forms, request trail itineraries, or correspond with our editorial desk, we collect your full name, email address, topic of inquiry, and message content.
• Technical & Analytical Telemetry: When accessing sortsparkshowcas.com, our servers automatically log internet protocol (IP) addresses, device type, browser specifications, operating system, referring URL paths, timestamps, and aggregate page interaction metrics.
• Preference & Consent Records: We store local records of your cookie consent state, selected display filters (e.g., regional café filter choices), and notification preferences.

3. Legal Bases for Data Processing

Under Article 6 of the EU GDPR, we process personal information strictly under the following lawful grounds:

• Consent: When you voluntarily submit forms, opt-in to newsletters, or accept functional cookies. You have the right to withdraw consent at any time.
• Contractual Necessity: To fulfill explicit service requests, such as delivering customized coffee trail maps or itinerary curations.
• Legitimate Interests: To ensure server performance, detect cyber threats, prevent fraudulent submissions, and analyze readership trends across our Greek coffee dossiers.
• Legal Compliance: To satisfy tax, corporate accounting, or lawful regulatory requirements within the Hellenic Republic and European Union.

4. Third-Party Service Providers & Processors

We do not sell, rent, or trade your personal data to commercial data brokers. We engage carefully vetted third-party infrastructure providers under strict Data Processing Agreements (DPAs):

• Cloud Hosting & Content Delivery: Secure European-based edge servers ensuring ultra-fast load times and HTTPS TLS 1.3 encryption.
• Privacy-Compliant Analytics: Anonymized web telemetry tools configured without cross-site tracking or advertising profiling.
• Transactional Email Services: Secure SMTP relays ensuring safe routing of editorial contact submissions.

5. International Data Transfers

While our core database and infrastructure reside within the European Economic Area (EEA), any ancillary technical transfers outside the EEA are governed by European Commission Standard Contractual Clauses (SCCs) to guarantee equivalent data protection standards.

6. Data Retention Schedule

We retain personal information only for the duration required to satisfy the original processing purpose:

• Contact inquiries and correspondence records: Retained for 24 months from final communication.
• Server security logs: Retained for 90 days and subsequently purged.
• Cookie preferences: Retained for 12 months before re-prompting consent.

7. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess explicit rights regarding your personal information:

• Right of Access: Request a complete copy of all personal records we hold concerning you.
• Right to Rectification: Request correction of inaccurate or incomplete information.
• Right to Erasure ("Right to be Forgotten"): Request permanent deletion of your personal records.
• Right to Restrict Processing: Limit how we process your information in certain scenarios.
• Right to Data Portability: Receive your data in a structured, machine-readable format.
• Right to Object: Object to processing based on legitimate interests or direct communications.

8. Data Protection Officer & Inquiries

To exercise any of your statutory rights or submit a privacy-related question, contact our Data Protection Officer at:

Email: [email protected]
Postal: Data Protection Desk, Sortsparkshowcas Media Ltd., Akti Miaouli 48, Piraeus 185 36, Athens, Greece.