1. Data Controller Identification
The entity determining the purposes and means of processing your personal data is:
Popsvaultieslistcrat Floral Archive Ltd.
Company Registration Number: 14892015
Registered Office: Via del Sole 42, 50123 Firenze FI, Italy
Designated Privacy Officer Email: [email protected]
2. Categories of Data Collected
We only collect personal information that is necessary for the provision of our digital publishing services, inquiries, and website security. These categories comprise:
- Inquiry Records: Full name, electronic mail address, subject matter, and message content submitted voluntarily through our contact forms.
- Technical & Telemetry Data: Truncated IP addresses, browser engine user-agent strings, referring web pages, operating system parameters, and standard server log access timestamps.
- Consent Preferences: Local storage flags recording user preferences regarding functional cookies and script executions.
3. Legal Bases for Processing
We process personal information under the lawful bases defined in Article 6 of the General Data Protection Regulation:
- Contractual Performance: Processing communications necessary to respond directly to visitor requests and inquiries.
- Legitimate Interests: Monitoring website health, identifying malicious brute-force attempts, and optimizing navigation pathways across our botanical articles.
- Consent: Storing preference cookies when explicitly provided by the user through our interactive choice interface.
4. Third-Party Data Processors
We do not sell, rent, or lease visitor lists to marketing networks. Data may be processed by trusted infrastructure vendors acting strictly under written data processing agreements:
- Static content delivery network providers and host server facilities situated inside the European Economic Area (EEA).
- Transactional email routing gateways used to convey contact form submissions directly to our administration mailbox.
5. Retention Schedules
Contact messages and associated correspondence are retained for no longer than twenty-four (24) months from the resolution of the inquiry. Server access log entries containing truncated IP data are routinely purged or anonymized after sixty (60) days unless an active cybersecurity investigation requires preservation.
6. Rights of the Data Subject
Under Chapter III of the GDPR, visitors residing within the European Union possess enforceable rights concerning their personal data, including:
- Right of Access: You may request confirmation as to whether your personal information is processed, alongside a portable copy of such data.
- Right to Rectification: You may request the correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): You may request the prompt deletion of your personal records where lawful processing justifications no longer apply.
- Right to Restrict Processing: You may request the temporary suspension of processing while accuracy or legitimacy is verified.
- Right to Lodge a Complaint: You have the right to lodge a formal grievance with the competent supervisory authority (Garante per la protezione dei dati personali in Italy or your local EEA supervisory board).
7. Data Protection Officer (DPO) Contact
To exercise any statutory data right or submit inquiries regarding our privacy compliance frameworks, please contact our Data Protection Officer directly at [email protected] with "Privacy Inquiry" in the subject header.