1. Overview and Data Controller
ChoiceGrid Atlas Media Ltd. ("Choicegridatlas", "we", "our", or "us"), incorporated in Zürich, Switzerland under Company Number CHE-482.910.334, operates the digital travel publication choicegridatlas.garden. We are committed to protecting your personal data in strict compliance with the Swiss Federal Act on Data Protection (FADP), the European General Data Protection Regulation (EU GDPR 2016/679), and relevant international privacy frameworks including the California Consumer Privacy Act (CCPA).
2. Categories of Data Collected
We only collect data strictly necessary to provide high-performance travel editorial services, optimize rendering, and maintain security:
- Directly Provided Information: Contact inquiries submitted via our contact portal (name, email address, message payload).
- Automated Telemetry: Anonymized IP addresses, browser user-agent tokens, operating system types, referring URL parameters, and timestamped page interaction logs.
- Local Storage State: Local browser flags (`localStorage`) utilized to memorize your cookie preference status across sessions without tracking identity.
3. Legal Bases for Data Processing
Under Article 6 of the GDPR and equivalent Swiss FADP provisions, processing of personal data is executed under the following lawful grounds:
- Legitimate Interests (Art. 6(1)(f) GDPR): Maintaining web infrastructure security, preventing denial-of-service disruptions, and analyzing aggregated reader engagement with city guides.
- Consent (Art. 6(1)(a) GDPR): Optional subscription to travel alerts or submission of direct editorial inquiries.
- Contractual / Pre-Contractual Obligations (Art. 6(1)(b) GDPR): Fulfilling editorial partnership agreements or direct communication requests.
4. Third-Party Service Processors & Data Transfers
We do not sell, rent, or trade reader personal information. We engage select infrastructure processors bound by strict Data Processing Agreements (DPAs):
- Cloud Hosting & CDN: Content distribution networks operating inside ISO-27001 certified data centers within the European Union and Switzerland.
- Web Typography: Google Fonts served via caching mechanisms minimizing header exchange.
- Imagery CDNs: High-resolution travel photography hosted via secure, cookieless media endpoints (Unsplash Media API).
5. Data Retention Protocols
Personal communication records submitted via our contact portal are retained for a maximum duration of twelve (12) months following resolution of the query, after which records are permanently expunged or anonymized. Server access log telemetry is rotated and deleted every 30 days.
6. Reader Rights (GDPR & Swiss FADP)
Regardless of your geographic location, Choicegridatlas extends full data subject rights to all users:
- Right of Access (Art. 15 GDPR): Request a full copy of any personal data linked to your identity.
- Right to Rectification (Art. 16 GDPR): Correct erroneous contact details.
- Right to Erasure / Right to be Forgotten (Art. 17 GDPR): Request immediate deletion of your inquiry logs.
- Right to Restrict or Object (Arts. 18 & 21 GDPR): Restrict processing or object to legitimate interest processing.
- Right to Data Portability (Art. 20 GDPR): Obtain your submitted data in a standard machine-readable JSON format.
7. Data Protection Officer (DPO) Contact
For all privacy inquiries, data deletion requests, or regulatory communications, please contact our designated Privacy Office:
Data Protection Officer
ChoiceGrid Atlas Media Ltd.
Limmatquai 72, 8001 Zürich, Switzerland
Email: [email protected]