Privacy Policy

1. Data Controller Information

This website (socialsprrankrostr.autos) is owned and operated by River Basin Data Atlas Ltd ("the Atlas", "we", "us", or "our"), registered in England and Wales under Company Number 14892014, with its registered address at 24 Riverside Promenade, Suite 4B, Bristol, BS1 6HL, United Kingdom. We act as the Data Controller under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any questions regarding this Privacy Policy or our data handling practices, please contact our Data Protection Officer at: [email protected].

2. Scope and Information We Collect

We believe in strict data minimization. This website operates primarily as an educational reference manual. We collect only the minimum personal data required to provide reliable access and respond to direct inquiries:

• Inquiry Submission Data: When you complete our contact form, we collect your full name, email address, inquiry topic, and message contents. This information is submitted voluntarily by you.
• Technical and Server Log Data: When you access this website, our web servers log standard HTTP request metadata, including your IP address (anonymized at transmission), browser type and version, operating system, referring URL, time and date stamp of requests, and request status codes.
• Browser Storage Preferences: We record your consent preference for cookie usage locally within your browser using localStorage mechanisms.

3. Legal Bases for Processing

Under Article 6 of the UK GDPR, we process personal information strictly under the following legal bases:

• Legitimate Interests (Art. 6(1)(f)): Processing technical server logs to protect website integrity, diagnose routing errors, prevent cyber threats, and optimize content presentation.
• Consent (Art. 6(1)(a)): Handling communication requests sent via our contact form, and deploying optional browser cookies. You have the right to withdraw consent at any time.
• Legal Obligation (Art. 6(1)(c)): Retaining records where mandatory statutory reporting or financial compliance requires us to do so.

4. Third-Party Processors and Hosting

We do not sell, rent, monetize, or trade your personal data. We utilize selected infrastructure service providers operating under strict Data Processing Agreements (DPAs):

• Web Hosting Infrastructure: Cloud server hosting located in secure data centers within the United Kingdom and European Economic Area (EEA).
• Domain Name System (DNS) & Security: Network routing providers managing secure SSL/TLS certificate transport and distributed denial-of-service mitigation.

No behavioral advertising trackers or marketing automation tools are installed on this domain.

5. Data Retention Schedules

We maintain clear retention schedules to prevent holding data indefinitely:

• Contact Inquiries: Stored for a maximum of 180 days from the resolution of the inquiry, after which they are deleted unless needed for legal documentation.
• Server Logs: Anonymized HTTP access logs are rotated and deleted automatically after 30 days.
• Cookie Consent Preferences: Retained locally on your client machine for up to 365 days or until you clear your browser cache.

6. Your Statutory Rights (GDPR & UK DPA)

Under applicable data protection legislation, you possess distinct legal rights regarding your personal information:

• Right of Access (Art. 15): You may request confirmation and copies of any personal data we hold about you.
• Right to Rectification (Art. 16): You may request the correction of inaccurate or incomplete personal records.
• Right to Erasure ('Right to be Forgotten') (Art. 17): You may request the deletion of your personal data where no overriding legal requirement exists to retain it.
• Right to Restriction (Art. 18): You may request that we suspend active processing while disputes regarding accuracy are resolved.
• Right to Object (Art. 21): You may object at any time to processing based upon our legitimate interests.

To exercise any of these rights, contact us at [email protected]. We respond to verified requests within 30 calendar days without administrative fees.

7. Supervisory Authority Complaints

If you believe our data practices violate statutory requirements, you have the right to lodge a formal complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with your national European Data Protection Authority.

8. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in regulatory standards or site operations. Any revisions will be published immediately on this page with an updated effective date stamp.