LEGAL COMPLIANCE // PRIVACY CHARTER

PRIVACY POLICY

Data processing practices, technical local storage definitions, user privacy entitlements under GDPR, and retention protocols for winkscrewcottage.courses.

EFFECTIVE DATE: JANUARY 1, 2026

1. Data Controller Identification

This website, operating at the domain winkscrewcottage.courses, is owned and managed by Field Route Atlas Ltd., registered in Reykjavík, Iceland (Company No: 14892019-IS). We serve as the primary Data Controller for any personal information processed via this informational website.

For inquiries regarding personal data processing, you may reach our designated privacy desk at: [email protected].

2. Scope of Personal Data Collected

winkscrewcottage.courses operates as a static reference atlas. We minimize personal data collection to the absolute technical baseline required to provide secure content delivery and facilitate direct voluntary communications.

A. Server Access Logs: When accessing our pages, our edge hosting infrastructure automatically logs standard technical metadata: including your IP address, browser user-agent string, operating system version, referring URL, and the timestamp of each server request. This data is processed exclusively to maintain system integrity, detect malicious distributed denial-of-service (DDoS) attempts, and debug routing faults.

B. Direct Contact Inquiries: When you voluntarily submit a message through our Contact page, you provide your full name, email address, topic designation, and written message body. We process this information exclusively to review and respond to your direct field inquiry.

3. Cookies and Local Storage

We do not deploy invasive marketing trackers, behavioral advertising profiling cookies, or third-party retargeting pixels. We use local browser storage (localStorage) strictly to record your consent status regarding cookie display settings (field_cookie_consent).

Because this record resides inside your browser's local memory, you maintain full control and may purge it at any time via your browser settings. For detailed tabular breakdowns, refer to our dedicated Cookie Policy.

4. Legal Grounds for Processing (GDPR Article 6)

We process personal data under the following legal frameworks established by the General Data Protection Regulation (GDPR):

  • Legitimate Interests (Art. 6(1)(f)): Processing technical server logs to guarantee network security, uptime reliability, and server optimization.
  • Consent (Art. 6(1)(a)): Processing inquiry details provided willingly via our contact form for the explicit purpose of responding to your question.
  • Legal Obligation (Art. 6(1)(c)): Retaining records where mandatory under European or Icelandic accounting, tax, or legal statutory requirements.

5. Data Retention Schedules

Technical server access logs are retained in rolling buffers for a maximum period of 30 calendar days before automated deletion. Contact form correspondence is retained for no longer than 12 calendar months following the resolution of your inquiry, after which electronic records are securely purged.

6. Third-Party Disclosures & Cross-Border Transfers

We do not sell, rent, lease, or monetize personal information under any circumstances. We do not provide user lists to commercial travel operators or tourism agencies. Data may only be processed by infrastructure hosting providers operating under strict Data Processing Agreements compliant with European Standard Contractual Clauses (SCCs).

7. Individual Privacy Rights

Under the GDPR and applicable international data privacy regulations, visitors possess defined statutory rights regarding their personal records:

  • Right of Access: Request formal confirmation and copies of personal data held regarding your identity.
  • Right to Rectification: Request correction of inaccurate, incomplete, or outdated data.
  • Right to Erasure ("Right to be Forgotten"): Request immediate destruction of personal correspondence where legal retention grounds have expired.
  • Right to Restrict or Object: Restrict processing or object to data handling conducted under legitimate interest grounds.
  • Right to Data Portability: Request transmission of your personal contact records in a structured, machine-readable format.

To exercise any statutory right, contact our privacy desk at [email protected]. We respond to verified requests within 30 calendar days.

8. Updates to this Policy

We reserve the right to amend this Privacy Policy to reflect changing technical architecture or legal updates. Revisions will be published directly to this page with an updated effective timestamp.