Privacy Policy

1. Introduction and Scope

Reelparadeshowcas Cartographic Explorations GmbH ("we", "our", "us") operates the website reelparadeshowcas.casa. We are committed to safeguarding the personal data of our users, researchers, and expedition partners in strict compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the German Federal Data Protection Act (Bundesdatenschutzgesetz - BDSG), and applicable international privacy frameworks including the California Consumer Privacy Act (CCPA/CPRA).

This document outlines our lawful bases for data collection, how telemetry and inquiry data are stored, the technical measures employed to protect your information, and the rights you retain under prevailing data protection legislation.

2. Data Controller Information

The Data Controller responsible for personal data collected across this portal is:

• Company: Reelparadeshowcas Cartographic Explorations GmbH
• Registration: Amtsgericht Dresden, Commercial Register No. HRB 48291 B
• Address: Terrassenufer 14, 01069 Dresden, Federal Republic of Germany
• Data Protection Officer Email: [email protected]

3. Categories of Information We Process

A. Automatically Collected Telemetry & Technical Logs

When accessing our cartographic 3D models and geographic dossiers, our web servers automatically log standard network metadata. This includes your IP address (anonymized prior to persistent storage), browser user-agent string, operating system version, referring URL, time stamp of request, and HTTP protocol status codes. This processing is based on Art. 6(1)(f) GDPR (our legitimate interest in ensuring network security, DDoS mitigation, and server stability).

B. Direct Inquiries and Communications

When you submit an inquiry through our contact interface or email our regional expedition desk, we collect your name, email address, institutional affiliation (if provided), and the textual content of your message. This data is processed under Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (responding directly to administrative inquiries).

4. Cookies and Local Storage State

We minimize tracking mechanisms. Our website utilizes local storage (`localStorage`) strictly to preserve your selected cookie preference state and prevent intrusive recurring popups. For full details on cookie categories, session durations, and third-party script management, please refer directly to our dedicated Cookie Policy.

5. Third-Party Service Providers and Data Transfers

We engage vetted European and international service providers for web hosting, content delivery (CDN), and geographic tile rendering. Where data transfers occur outside the European Economic Area (EEA), such transfers are governed by European Commission Standard Contractual Clauses (SCCs) and adequacy decisions to guarantee an equivalent standard of protection.

6. Data Retention Protocols

Server access logs are retained in rotated log archives for no longer than 30 days, after which they are permanently deleted or fully anonymized. Direct inquiry communications are retained for the duration required to resolve your request and up to statutory commercial record retention terms (typically 6 to 10 years under the German Commercial Code / HGB where commercial transactions are involved).

7. Your Statutory Rights Under the GDPR

Under Chapter III of the GDPR, you have the following rights at any time:

• Right of Access (Art. 15 GDPR): Obtain confirmation as to whether your personal data is being processed and receive a free copy of the data.
• Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete personal records.
• Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Request deletion of your personal data where retention grounds no longer apply.
• Right to Restriction of Processing (Art. 18 GDPR): Demand restriction of data usage during dispute investigations.
• Right to Data Portability (Art. 20 GDPR): Receive your submitted data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): Object at any time to data processing carried out under our legitimate interest.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. You also possess the right to file a formal complaint with the Saxon State Commissioner for Data Protection (Sächsische Datenschutzbeauftragte).