1. Introduction and Scope
Ripple Room Spotlight ("we", "us", or "our"), operating under domain rippleroomspotlight.monster, is committed to safeguarding the personal data and privacy rights of visitors navigating our European Island Festival Atlas. This Privacy Policy sets forth how personal and technical information is collected, processed, retained, and protected in compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the UK Data Protection Act, and applicable international privacy frameworks including the California Consumer Privacy Act (CCPA).
2. Data Collection and Processing Grounds
We process personal data solely on lawful bases, including user consent, legitimate interests, and legal compliance:
- Voluntary Form Submissions: When you contact our editorial team via our contact form or subscribe to festival updates, we collect your name, email address, inquiry subject, and message content.
- Technical & Analytical Telemetry: Anonymized or pseudonymized data, such as IP addresses, browser types, screen resolutions, and referral paths, are processed to render spatial WebGL island charts and improve site performance.
- Local Storage State: We store your cookie preferences and interface filter states within browser
localStorageto prevent intrusive re-prompting.
3. Third-Party Processors and Hosting
Data is processed using secure European cloud infrastructure. We do not sell, rent, or lease your personal identifiers to third-party advertisers. Third-party subprocessors utilized for typography delivery (e.g., Google Fonts) and analytical reporting adhere strictly to Standard Contractual Clauses (SCCs) approved by the European Commission.
4. Your Rights Under GDPR and Global Regulations
Under the GDPR and CCPA, you have specific enforceable rights regarding your personal data:
- Right of Access: You may request a copy of all personal data held concerning your identity.
- Right to Rectification: You may request immediate correction of inaccurate data.
- Right to Erasure ('Right to be Forgotten'): You may request total erasure of personal correspondence from our databases.
- Right to Restrict Processing: You may object to specific analytical telemetry or revoke consent at any time.
To exercise these rights, email our Data Protection Officer at: [email protected].
5. Data Retention and Security Protocols
Contact communications are retained for a maximum of 24 months from the resolution of your inquiry, after which they are permanently deleted. We utilize TLS 1.3 encryption, robust server firewalls, and least-privilege administrative access protocols.