Privacy Policy

Storycrateteamtonsi Alpine Media Ltd. ("Storycrateteamtonsi", "we", "us", or "our") operates the static informational website storycrateteamtonsi.forum. This Privacy Policy sets out our principles and procedures regarding the collection, handling, storage, and protection of personal data when you visit our publication. We are committed to processing all user information in strict accordance with Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR), the Slovenian Personal Data Protection Act (ZVOP-2), and applicable United States state statutes including the California Consumer Privacy Act (CCPA/CPRA).

1. The Identity of the Data Controller

The entity responsible for your data is:

2. Categories of Data Collected and Processing Grounds

Because storycrateteamtonsi.forum does not process accommodation bookings, financial transactions, or user account registrations, our collection of personal information is strictly minimized:

• Voluntary Correspondence Data: When you complete our contact form or write to us directly, we collect your name, email address, the subject category, and message text. We process this under Article 6(1)(b) of the GDPR (performance of a pre-contractual step or responding to an explicit request) and Article 6(1)(f) (our legitimate interest in fielding reader inquiries).
• Server Log Information: When accessing static pages, our web server temporarily records standardized technical logs including your masked IP address, browser user-agent string, referring URL, and timestamp. This data is collected under Article 6(1)(f) to guarantee server stability and defend against denial-of-service threats.
• Local Storage Preferences: Your cookie banner selection is preserved directly within your browser’s `localStorage` mechanism so that prompts are not repeated unnecessarily.

3. Third-Party Service Processors

We do not sell, trade, rent, or monetize your personal information. Any technical third parties who assist in delivering our website operate under data processing agreements compliant with GDPR Article 28:

• Hosting & Content Delivery: Static assets and HTML pages are served via secure hosting infrastructure within the European Economic Area (EEA).
• Aggregated Telemetry: Where non-essential cookies are consented to, anonymized, privacy-first analytics tools evaluate aggregated page view volumes without tracking personal visitor identities across outside domains.

4. Data Retention Period

We retain contact communications only for the time necessary to address your query and conclude editorial follow-up, up to a maximum period of twenty-four (24) months, after which records are permanently deleted from email databases. Technical server logs are rotated and purged automatically on a rolling 30-day schedule.

5. Your Statutory Rights Under GDPR & CCPA

Depending on your jurisdiction, you possess clear rights regarding your personal information:

• Right of Access (Article 15 GDPR): The right to request confirmation of whether we process your data and receive an accessible copy.
• Right to Rectification (Article 16 GDPR): The right to correct inaccurate or incomplete details.
• Right to Erasure (Article 17 GDPR): The right to have personal data deleted when retention is no longer justified.
• Right to Restriction & Objection: The right to halt specific processing operations based on legitimate interests.
• CCPA Non-Discrimination: California residents enjoy the right not to receive discriminatory service or differing editorial access for exercising privacy options. We do not sell personal data under California law.

6. Data Protection Officer & Supervisory Authority

To exercise any rights or file an inquiry regarding our data privacy practices, please contact our designated Data Protection contact at [email protected]. If you believe your rights under the GDPR have been violated, you have the statutory right to lodge a formal complaint with the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec), Dunajska cesta 22, 1000 Ljubljana, Slovenia (www.ip-rs.si), or your local European data protection authority.