Privacy Policy
Storycrateteamtons Publishing Ltd is dedicated to maintaining the confidentiality and integrity of reader personal data. This privacy document outlines how we collect, process, store, and protect information when you navigate our independent travel publication.
1. Identity of Data Controller
The data controller responsible for the processing of personal data collected through this website is Storycrateteamtons Publishing Ltd (Company Registration #09842173), having its registered office at Via Vincenzo Monti 41, 20123 Milano MI, Italy. For any data protection inquiries, you may reach our Data Protection Officer (DPO) at [email protected].
2. Categories of Information Collected
We collect only minimal information necessary to deliver and refine our editorial content:
- Voluntarily Provided Information: When you submit inquiries through our editorial contact form, we collect your name, email address, inquiry subject, and the contents of your message.
- Technical & Telemetry Data: When you access our static pages, our web server logs record anonymized IP addresses, browser types, operating systems, referring URLs, and timestamps to prevent denial-of-service abuse and maintain infrastructure security.
- Cookie & Local Storage Data: We store user consent flags in your browser’s local storage to honor your preferences regarding analytics scripts.
3. Legal Grounds for Data Processing (GDPR Article 6)
We process personal data under the following legal frameworks established by the European Union General Data Protection Regulation (GDPR):
- Legitimate Interests (Art. 6(1)(f)): Processing web server logs to secure our publishing platform and prevent malicious bot attacks.
- Consent (Art. 6(1)(a)): Running optional readership analytics cookies, which you may accept or reject upon your first visit.
- Contractual / Pre-Contractual Steps (Art. 6(1)(b)): Responding to reader contact requests and editorial communications.
4. Third-Party Data Processors
Storycrateteamtons does not sell, rent, or trade reader information to commercial advertising brokers. We rely strictly on verified cloud hosting and infrastructure providers within the European Economic Area (EEA) or compliant under adequacy agreements (such as EU Standard Contractual Clauses) to serve static assets and maintain server reliability.
5. Data Retention Protocols
Contact form messages and reader correspondence are retained for a maximum duration of 24 calendar months to maintain editorial audit records, after which they are securely purged. Anonymized web server access logs are held for 90 days before automated overwriting.
6. Individual Privacy Rights (GDPR & CCPA)
Under European and California privacy statutes, visitors retain fundamental rights regarding their personal data, including:
- Right of Access: You may request a copy of any personal data we hold concerning your person.
- Right to Rectification: You may instruct us to correct inaccurate or incomplete details.
- Right to Erasure ("Right to be Forgotten"): You may request that we delete your contact messages from our archives.
- Right to Object and Withdraw Consent: You may withdraw your cookie consent at any time without penalty.
- Non-Discrimination: California residents will not receive diminished service quality for exercising privacy rights under the California Consumer Privacy Act.
To exercise any of these entitlements, email our compliance desk at [email protected]. You also have the right to lodge a formal complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
7. Revisions to this Statement
This privacy notice is effective as of January 2026. Any future administrative or legal updates will be published directly on this URL with an updated revision header.