Privacy Protection Policy

1. Statement of Purpose & Controller Identity

Poppetlystashpnt Hospitality Media Lda. ("Poppetlystashpnt", "we", "our", or "the Company"), registered under Portuguese fiscal identification number (NIF) 516892410 and domiciled at Avenida da Liberdade 245, 4º Andar, 1250-143 Lisboa, Portugal, operates this publication in full adherence to Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and Lei n.º 58/2019 (the Portuguese Data Protection Act).

This Privacy Policy delineates how personal data is collected, processed, secured, and retained when you browse our website, read our monographs, or submit editorial inquiries through our dispatch desk.

2. Categories of Data Collected

We restrict data processing to what is strictly necessary to deliver editorial content and fulfill direct user inquiries:

• Voluntarily Provided Information: When you complete our contact dispatch form, we collect your full name, email address, inquiry topic, and message content. This information is utilized solely to provide a relevant editorial response.
• Automated Technical Telemetry: Whenever you access our web pages, server access logs capture pseudonymous metadata including your IP address (masked to preserve regional anonymity), browser type and version, referral URL, time stamp, and requested file path.
• Preference Identifiers: We record your explicit cookie preference within your local browser storage (`localStorage`) to ensure you are not repeatedly prompted on subsequent page visits.

3. Legal Bases for Processing (GDPR Art. 6)

Every data processing action performed by the Company is supported by an established lawful basis:

• Consent (Art. 6(1)(a)): For non-essential analytics and explicit user communication via our dispatch desk.
• Legitimate Interests (Art. 6(1)(f)): For sustaining the technical security, preventing DDoS attacks, and debugging the server architecture supporting Poppetlystashpnt.bond.
• Legal Obligation (Art. 6(1)(c)): For retaining commercial correspondence and corporate tax records where required by Portuguese statutory law.

4. Third-Party Processors and International Transfers

We do not trade, sell, or rent personal data to commercial marketing brokers. Data processing may be facilitated by trusted infrastructure partners operating under formal Data Processing Agreements (DPAs):

• Cloud Hosting Infrastructure: High-performance server facilities situated inside the European Economic Area (EEA), adhering to ISO/IEC 27001 standards.
• Transactional Email Services: Encrypted SMTP gateways ensuring secure transmission of messages submitted through our editorial contact desk.

If any operational processing requires transfer outside the EEA, such transfers occur exclusively under European Commission Standard Contractual Clauses (SCCs) or toward jurisdictions recognized as offering an adequate level of data protection.

5. Retention Schedules

Personal data is stored only for the period necessary to fulfill its specified purpose. Editorial contact messages and correspondence are retained for a maximum duration of 24 months following resolution, after which records are permanently purged. Server diagnostic access logs are automatically overwritten on a 30-day rolling cycle.

6. Individual Rights Under the GDPR & CCPA

Under European and international privacy frameworks, you possess the following actionable rights regarding your personal information:

• Right of Access (Art. 15): Obtain confirmation of whether your data is processed and request a copy of such data.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete records.
• Right to Erasure / "To Be Forgotten" (Art. 17): Request deletion of your personal data where retention is no longer legally justified.
• Right to Restriction of Processing (Art. 18): Restrict processing under contested circumstances.
• Right to Data Portability (Art. 20): Receive your submitted information in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing founded on legitimate interest grounds.

7. Data Protection Officer (DPO) & Supervisory Recourse

To exercise any statutory right or submit an inquiry regarding our data handling, contact our designated Data Protection Officer:

Email: [email protected]
Postal Address: Data Protection Desk, Poppetlystashpnt Hospitality Media Lda., Avenida da Liberdade 245, 4º Andar, 1250-143 Lisboa, Portugal.

You also maintain the right to lodge a formal complaint with the Portuguese national supervisory authority: Comissão Nacional de Protecção de Dados (CNPD), Av. D. Carlos I, 134 - 1.º, 1200-651 Lisboa (cnpd.pt).