1. Controller Information
This Privacy Notice governs the processing of personal data by Tonicvaultcabints Retail Intelligence Ltd. (Registration Number HE 99420184), having its registered office at Gladstonos 45, Oasis Business Complex, 3031 Limassol, Cyprus ("we", "us", or "our"). We operate the digital publication accessible at tonicvaultcabints.baby.
You may contact our designated Data Protection Officer (DPO) regarding any questions on our processing activities by writing to [email protected] with the subject line "Attn: Data Protection Officer".
2. Data Collection & Processing Purposes
We adhere to data minimization principles. We only collect personal information when an identifiable lawful basis exists under Article 6 of the General Data Protection Regulation (EU) 2016/679 (GDPR):
- Technical Transmission Records: When you access our static pages, our web servers log standard HTTP headers containing your truncated IP address, browser user-agent, operating system, and timestamp. This processing relies on our legitimate interest (Art. 6(1)(f) GDPR) in maintaining server stability, preventing denial-of-service abuse, and diagnosing networking errors.
- Voluntary Inquiries: When you submit our contact form, we collect your supplied name, email address, selected subject, and message content. This processing is performed on the basis of taking steps at your request prior to entering into a communication or fulfilling legitimate correspondence (Art. 6(1)(b) and (f) GDPR).
- Consent-Based Telemetry: Subject to your prior opt-in consent (Art. 6(1)(a) GDPR), we may utilize anonymous operational telemetry cookies to evaluate aggregate readership metrics across specific research articles.
3. Third-Party Data Processors
We do not sell, rent, or trade your personal data to advertisers or commercial data brokers. We engage selected technical service providers who process data strictly under data processing agreements conforming to Article 28 GDPR:
- Hosting and Content Delivery Infrastructure: European data center providers offering managed infrastructure with localized storage within the EU/EEA.
- Transactional Email Dispatch: Authenticated mail delivery relays that route submitted contact inquiries to our internal desk.
4. Data Retention Periods
Server access logs are retained on a rolling cycle for no longer than thirty (30) days before being overwritten or permanently purged. Submitted correspondence records are stored for twelve (12) months following the resolution of your inquiry, unless statutory retention mandates (such as legal claims or commercial tax compliance) necessitate extended archival.
5. Your Rights Under GDPR and Global Regulations
Pursuant to European data protection standards and analogous frameworks (including the California Consumer Privacy Act / CPRA where applicable), you possess the following rights:
- Right of Access (Art. 15 GDPR): The right to request copies of your personal information held by us.
- Right to Rectification (Art. 16 GDPR): The right to request correction of information you believe is inaccurate.
- Right to Erasure (Art. 17 GDPR): The right to request the deletion of your personal data under specific conditions.
- Right to Restriction of Processing (Art. 18 GDPR): The right to request temporary halts to data processing.
- Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used format.
- Right to Object (Art. 21 GDPR): The right to object to processing founded upon legitimate interest grounds.
To exercise any of these rights, contact us directly at [email protected]. You additionally hold the statutory right to lodge a complaint with your local supervisory authority; within Cyprus, this is the Office of the Commissioner for Personal Data Protection.