1. Data Controller Identification

The entity legally responsible for the processing of personal data collected via this website (pebblessortscout.rest) is:

Pebblessortscout ApS
CVR / Reg. No.: DK-39821470
Registered Office: Bredgade 42, 1260 København K, Denmark
Official Privacy Contact: [email protected]

2. Categories of Information Collected

We believe in strict data minimization, mirroring our design ethos of Scandinavian simplicity. We collect only information that is strictly necessary to deliver editorial studies, respond to direct inquiries, or maintain operational security:

  • Information you provide directly: When transmitting messages via our contact interface, we collect your full name, email address, inquiry category, and the factual content of your correspondence.
  • Technical and diagnostic logs: When accessing our static servers, technical parameters are recorded automatically in server logs, including your truncated IP address, browser user-agent string, referring URL, time of request, and operating system.
  • Client-side state markers: We utilize browser localStorage exclusively to remember your cookie consent preferences across page navigations.

3. Legal Bases for Processing (GDPR Article 6)

We process personal information under the following lawful conditions established by Article 6 of the General Data Protection Regulation:

  • Consent (Art. 6(1)(a)): Where you explicitly check an acknowledgment box prior to transmitting a contact request, or opt into analytical performance evaluations.
  • Legitimate Interests (Art. 6(1)(f)): To maintain web infrastructure security, prevent automated denial-of-service or form spamming attacks, and ensure accurate content delivery.
  • Legal Obligations (Art. 6(1)(c)): To preserve commercial correspondence records as demanded under Danish commercial bookkeeping requirements (Bogføringsloven).

4. Third-Party Processors & Infrastructure

We do not vend, lease, or monetize your personal information to third-party advertising exchanges. Data transmission is limited strictly to vetted technical sub-processors operating within the European Economic Area (EEA) or under recognized Standard Contractual Clauses (SCCs):

  • Hosting and Content Delivery Infrastructure: European static hosting providers maintaining certified ISO/IEC 27001 physical security standards.
  • Email Routing Infrastructure: Secure SMTP routing services configured with TLS 1.3 encryption at rest and in transit.

5. Data Retention Schedules

Personal data is retained only for the duration required to satisfy the underlying purpose:

  • Inquiry Records: General design consultations and editorial feedback are expunged within 24 months of resolved communication unless statutory retention applies.
  • Server Diagnostic Logs: Web server security logs are cycled and deleted automatically within 30 days.
  • Cookie Choice Records: Client-side consent tokens stored in local browser memory persist for 12 months or until manually cleared by the user.

6. Your Statutory Rights (GDPR & CCPA)

As a data subject, you possess enforceable rights under EU Regulation 2016/679 and corresponding state privacy standards:

  • Right of Access (Art. 15): You may request an itemized copy of personal records held concerning you.
  • Right to Rectification (Art. 16): You may demand correction of erroneous or outdated personal data.
  • Right to Erasure (Art. 17): Commonly termed the "Right to be Forgotten," permitting you to demand complete deletion where legal grounds permit.
  • Right to Restriction of Processing (Art. 18): The ability to suspend further processing pending dispute resolution.
  • Right to Data Portability (Art. 20): Receipt of your data in a structured, commonly used, machine-readable format.
  • Right to Object (Art. 21): Object to processing based on legitimate interests at any time.

7. Supervisory Authority & Complaints

If you believe our data processing fails to comply with Danish or European regulations, you hold the right to lodge a formal complaint with the Danish Data Protection Agency:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Website: www.datatilsynet.dk

8. Data Protection Officer (DPO) Inquiries

To exercise any statutory privacy rights, email our compliance officer directly at [email protected] with the subject line "GDPR Subject Rights Request". Proof of identity may be requested to protect your personal information.