1. Data Controller Identification
The data controller responsible for the processing of personal information under this policy is popsvaultiesvaulttickr.makeup, established at Keizersgracht 482, 1016 EG Amsterdam, The Netherlands (Company Registration KVK 84920194). For all data protection and privacy queries, you can reach our team directly at [email protected].
2. Information We Collect
We process limited personal data strictly necessary for responding to commercial inquiries and maintaining technical web stability:
- Contact Submissions: When you submit our project specification form, we record your full name, business email address, organization name, telephone number (if provided), project location, and technical project scope notes.
- Technical Server Telemetry: Our servers automatically log minimal technical transmission data including your truncated IP address, browser user-agent string, referring URL, timestamp, and HTTP status codes to diagnose operational faults and block malicious traffic.
- Client-Side Planning State: Interactive tools such as our spatial checklist and parking planner use local storage on your device. This data remains on your local machine and is not synchronized to our remote servers.
3. Legal Grounds for Processing (GDPR)
In accordance with the General Data Protection Regulation (EU) 2016/679, we process personal data under the following legitimate grounds:
- Contractual / Pre-Contractual Measures (Article 6(1)(b)): Processing contact requests initiated by you to evaluate site feasibility, prepare layout reviews, or issue technical planning commentary.
- Legitimate Interests (Article 6(1)(f)): Maintaining server perimeter security, preventing denial-of-service activity, and ensuring standard website responsiveness.
- Consent (Article 6(1)(a)): Where non-essential measurement cookies are voluntarily enabled via our cookie banner.
4. Data Sharing and Third-Party Processors
We never trade, rent, or monetize personal information. Data collected through this platform is accessible only by authorized studio engineers and hosting infrastructure providers bound by rigorous Data Processing Agreements (DPAs) compliant with European Commission Standard Contractual Clauses.
5. Storage and Data Retention
Project specifications and inquiry communications are retained in our active customer relationship archive for up to twenty-four (24) months to facilitate continuous design coordination, after which they are securely purged unless an active ongoing commercial engagement exists. Technical server access logs are held for a maximum rolling window of thirty (30) days.
6. Your Rights Under European Law
If you reside within the European Economic Area (EEA), the United Kingdom, or Switzerland, you retain unambiguous statutory rights regarding your personal information:
- Right of Access: You may request formal confirmation and copies of any personal records we maintain about you.
- Right to Rectification: You may request the prompt correction of outdated or inaccurate personal details.
- Right to Erasure ('To Be Forgotten'): You may request the permanent deletion of your contact records where no overriding legal retention obligation applies.
- Right to Restrict Processing: You may request the temporary suspension of processing while a data dispute is resolved.
- Right to Data Portability: You may request a machine-readable export of data submitted directly by you.
To exercise any of these protections, email [email protected] with your request. We will reply within thirty calendar days without charge.
7. Supervisory Authority Recourse
You possess the right to file a complaint with your national supervisory body if you believe our data practices violate applicable laws. In the Netherlands, the lead authority is the Autoriteit Persoonsgegevens (PO Box 93374, 2509 AJ Den Haag).