1. Data Controller Identification
The entity responsible for the collection and processing of personal data across this informational observatory is:
Vistastemposcout Media Ltd
Dutch Chamber of Commerce (KvK) Registry: #09842145
Registered Office: 44 Keizersgracht, 1015 CR Amsterdam, Netherlands
Data Protection Desk: [email protected]
Phone: +31 20 894 3300
2. Principles and Categories of Personal Data Collected
Vistastemposcout applies the principle of data minimization. We only collect and store data that is strictly required to maintain site availability, respond to direct researcher inquiries, and evaluate web security events:
- Direct Inquiry Communications: Full name, corporate or personal email address, regional topic category, and correspondence text submitted through our contact form.
- Technical Transmission Logs: Web browser user agent string, masked IP addresses, timestamped resource access requests, referring URL headers, and HTTP status codes recorded automatically by web server reverse proxies.
- Consent State Preferences: Local storage flags recording your explicit decision to approve or reject optional analytics telemetry.
3. Lawful Bases for Processing (Art. 6 GDPR)
We process your personal information strictly according to designated statutory justifications under Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): Applied when you opt-in to non-essential browser analytics via our consent banner. You may revoke consent at any time.
- Pre-contractual & Legitimate Response (Art. 6(1)(b) & (f)): Applied to process incoming inquiries, review case study feedback, and answer retail matrix requests submitted by visitors.
- Legitimate Interests for Network Security (Art. 6(1)(f)): Applied to log request anomalies, prevent brute force attacks, and maintain server resilience.
4. Data Retention Schedules
| Data Category | Storage Purpose | Maximum Retention Period |
|---|---|---|
| Contact Form Submissions | Research dialogue and editorial follow-up | 12 months following resolution of query |
| Server Connection Logs | Security monitoring and fault mitigation | 30 calendar days (automated rotation) |
| Cookie Preference Flags | Enforcing user consent choices | 365 calendar days in client localStorage |
5. Your Statutory Rights as a Data Subject
Under Chapter III of the GDPR, European Union residents possess comprehensive statutory rights concerning their personal records:
- Right of Access (Art. 15): Obtain confirmation as to whether your data is processed and obtain copies of stored records.
- Right to Rectification (Art. 16): Require immediate amendment of inaccurate or incomplete personal data.
- Right to Erasure (Art. 17): Request deletion of your personal contact records when processing is no longer necessary.
- Right to Restriction of Processing (Art. 18): Restrict active use of data while claims or accuracy challenges are being reviewed.
- Right to Data Portability (Art. 20): Receive submitted contact records in a structured, machine-readable format.
- Right to Object (Art. 21): Object at any moment to processing grounded in legitimate interest balances.
To exercise any of these protections, submit a written dispatch to our Data Protection Desk at [email protected]. Responses are provided within 30 days without fee.
6. Supervisory Authority Complaints
Should you believe our handling of personal records fails to meet European data protection benchmarks, you retain the legal prerogative to file an administrative complaint with the competent supervisory body in the Netherlands:
Autoriteit Persoonsgegevens (Dutch DPA)
PO Box 93374, 2509 AJ The Hague, Netherlands
Website: autoriteitpersoonsgegevens.nl
7. Policy Updates
This statement is reviewed annually or whenever our technological architecture undergoes material reconfiguration. Last reviewed and published: January 2026.