1. Data Controller Identification

The data controller responsible for the processing of your personal information across this website (Vaulttickertonictrailies.mom) is:

Vaulttickertonictrailies Explorer Media Ltd
Company Registration Number: IE-748291
14 Dame Court, Dublin 2, D02 F651, Ireland
Designated Data Protection Officer (DPO): [email protected]

2. Scope and Nature of Data Collected

We adhere strictly to the principle of data minimization under Article 5(1)(c) of the GDPR. We collect only data strictly necessary to deliver information about free civic spaces in Dublin and to manage correspondence:

  • Voluntary Correspondence Data: When you submit a dispatch or inquiry via our contact form, we collect your name, email address, inquiry topic, and message contents. This information is utilized solely to review your message and provide an accurate response.
  • Technical and Server Log Data: When you browse our static website, standard web server access logs record your IP address, browser user-agent string, referring URL, timestamp of request, and the specific HTML, CSS, or image assets requested. These technical logs are used to maintain server security, mitigate distributed denial-of-service (DDoS) attempts, and ensure network integrity.
  • Consent State Preferences: We record your cookie selection (`all`, `essential`, or `analytics_allowed`) inside your browser's local storage so that your consent banner decision persists across sessions without repeated prompts.

3. Legal Bases for Processing

We process your personal information under the following lawful bases established by Article 6 of the GDPR:

  • Legitimate Interests (Art. 6(1)(f)): Processing server logs to defend network infrastructure against cyber threats and unauthorized access; responding directly to inquiries initiated by you.
  • Consent (Art. 6(1)(a)): For any optional aggregated performance analytics cookies that you actively choose to enable via our cookie consent interface. You retain the right to withdraw this consent at any time.
  • Legal Obligation (Art. 6(1)(c)): Retaining records where mandatory under Irish or European Union statutory compliance, corporate reporting, or lawful regulatory request.

4. Third-Party Service Providers and Data Transfers

Vaulttickertonictrailies does not sell, rent, lease, or monetize your personal information to data brokers, commercial advertisers, or behavioral marketing platforms. We engage carefully vetted infrastructure providers who act as data processors:

  • Website Hosting Infrastructure: Our static files are served via enterprise hosting facilities located within the European Economic Area (EEA) adhering to ISO/IEC 27001 standards.
  • Email Services: Inquiries sent to our contact address are processed through encrypted mail servers hosted within European jurisdictions.

Where any technical diagnostic requires routing data outside the EEA, transfers are conducted strictly under European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent level of privacy protection.

5. Data Retention Periods

We store personal information only for as long as necessary to fulfill the specific operational purpose for which it was gathered:

  • Server Security Logs: Automatically purged or anonymized after a maximum rolling retention window of thirty (30) days.
  • Contact Submissions: General communications and trail reports are retained for up to twelve (12) months following the resolution of the inquiry, after which messages are securely deleted.
  • Cookie Consent Storage: Retained locally on your client browser device until you clear your browser cache or reset your stored preferences.

6. Your Statutory Rights Under the GDPR & CCPA

As a data subject, you possess comprehensive rights regarding your personal information. Under Chapter III of the GDPR, these include:

  • Right of Access (Art. 15): The right to request confirmation as to whether your personal data is being processed, and to obtain a copy of that data.
  • Right to Rectification (Art. 16): The right to require correction of inaccurate or incomplete personal records.
  • Right to Erasure ('Right to be Forgotten') (Art. 17): The right to request deletion of personal information where it is no longer necessary for the original collection purpose.
  • Right to Restriction of Processing (Art. 18): The right to limit our processing under specific statutory contestations.
  • Right to Data Portability (Art. 20): The right to receive your personal data in a structured, commonly used, and machine-readable format.
  • Right to Object (Art. 21): The right to object at any time to data processing carried out based on legitimate interests.

California residents under the California Consumer Privacy Act (CCPA/CPRA) are also entitled to notice regarding categories of collected information and the explicit right to be free from discriminatory treatment for exercising privacy rights. We do not sell personal information.

7. Supervisory Authority Lodgment & DPO Inquiries

To exercise any of your statutory rights, or to raise an inquiry regarding how your information is handled, contact our Data Protection Officer directly at [email protected] or by postal dispatch to 14 Dame Court, Dublin 2, Ireland.

If you believe our processing of your personal data infringes applicable data protection legislation, you retain the statutory right to lodge a formal complaint with the Irish Data Protection Commission (DPC), 21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland (website: dataprotection.ie), or your local national supervisory authority within the EU member state of your habitual residence.