Brimsywonderfl Travel Guides Ltd ("we", "our", or "the Company"), company registration HE 419824, with registered offices at Agias Sofias 18, 28100 Argostoli, Kefalonia, Greece, operates the digital publication accessible via brimsywonderfl.click. We are committed to safeguarding personal data in rigorous compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the Greek Law 4624/2019, and the California Consumer Privacy Act (CCPA).
1. Categories of Personal Data Collected
We adhere strictly to the principle of data minimization. The categories of personal information processed by our servers encompass:
- Directly Provided Information: When you complete our contact field dispatch form, we collect your full name, email address, inquiry topic, and message content. This data is utilized solely to process and respond to your communication.
- Technical and Server Log Data: Each time our servers receive an HTTP request, standardized technical records are generated containing your truncated IP address, browser user-agent string, operating system version, referrer URL, and timestamp. These server logs are maintained strictly for network security and denial-of-service mitigation.
- Client-Side Storage Flags: We store minimal key-value data in your browser’s LocalStorage API to record your cookie consent choice. This entry contains no personally identifiable tracking identifiers.
2. Legal Bases for Processing (GDPR Art. 6)
Our processing operations rest on established legal grounds:
- Consent (Art. 6(1)(a)): For non-essential performance cookies or optional feedback mechanisms, where explicit consent has been registered via our cookie preferences banner.
- Contractual & Pre-Contractual Measures (Art. 6(1)(b)): To respond to inbound reader inquiries or partnership requests submitted via our contact forms.
- Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, prevent fraudulent bot submissions, and ensure page rendering reliability.
3. Third-Party Data Processors
We do not sell, rent, or trade reader personal data. In limited circumstances, technical data passes through vetted service providers acting as Data Processors bound by Article 28 GDPR Data Processing Agreements:
- Hosting and Infrastructure Providers: European cloud server networks ensuring encrypted content delivery and distributed DDoS resistance.
- Transactional Mail Relays: Encrypted SMTP gateways processing inbound and outbound field desk dispatches.
4. Data Retention Periods
We retain personal data only as long as necessary to fulfill the operational purpose for which it was obtained:
- Contact form inquiries: Retained for 180 days following resolution of the query, after which records are permanently purged.
- Server security logs: Automatically rotated and erased within 30 calendar days.
- Cookie preference records in LocalStorage: Persist for 365 days unless manually cleared by the user.
5. Your Statutory Rights (GDPR & CCPA)
Under European and California privacy statutes, you maintain extensive rights regarding your personal information:
- Right of Access (Art. 15): You may request confirmation and copies of any personal data we hold concerning you.
- Right to Rectification (Art. 16): You may instruct us to correct inaccurate or incomplete details.
- Right to Erasure ("Right to be Forgotten", Art. 17): You may request the deletion of your personal data where statutory grounds are satisfied.
- Right to Restrict Processing (Art. 18): You may limit how we process your information under specific legal circumstances.
- Right to Data Portability (Art. 20): You may receive your data in a structured, commonly used, machine-readable format.
- Right to Object (Art. 21): You may object at any time to processing predicated on our legitimate interests.
- Non-Discrimination (CCPA): We will never deny services, charge different prices, or alter content quality should you exercise your privacy rights.
6. Data Protection Officer & Supervisory Authority Contact
To exercise any statutory privacy rights, submit a verifiable request to our designated privacy desk via email at [email protected] or via postal dispatch to: Data Protection Officer, Brimsywonderfl Travel Guides Ltd, Agias Sofias 18, 28100 Argostoli, Kefalonia, Greece.
Should you believe our handling of your personal data violates applicable privacy laws, you possess the right to file a formal complaint with the Hellenic Data Protection Authority (HDPA), Kifissias 1-3, 115 23 Athens, Greece (www.dpa.gr).