Privacy Policy

1. Data Controller Identification

The primary legal entity responsible for the collection and processing of your personal information under the European Union General Data Protection Regulation (GDPR) and Icelandic Act on Data Protection and the Processing of Personal Data (Act No. 90/2018) is:

Rankpantrytempon Media ehf.
Registration Number: IS-540921-1890
Registered Office: Suðurlandsbraut 32, 108 Reykjavík, Iceland
Data Protection Officer Contact: [email protected]
General Inquiries: [email protected]

2. Information We Collect

We restrict data collection to what is strictly necessary to deliver independent editorial content and process reader inquiries:

• Directly Provided Communications Data: When you transmit an inquiry via our contact interface, we collect your submitted name, email address, inquiry topic, and message text. This processing rests on your explicit consent and our legitimate interest in responding to reader dispatches (GDPR Article 6(1)(a) & (f)).
• Automated Device and Network Telemetry: When loading our pages, our edge web servers log non-identifiable technical headers, including your truncated IP address (anonymized at subnet level), user-agent string, operating system type, HTTP response code, and referring URL.
• Cookie & Local State Records: As detailed in our Cookie Policy, we record your consent preferences in local browser storage to prevent recurring banner prompts.

3. Third-Party Processors & Infrastructure

We do not vend, monetize, or distribute personal data to advertising brokers. Technical data may be processed by trusted infrastructure vendors under binding Data Processing Agreements (DPAs) compliant with Standard Contractual Clauses (SCCs):

• Web Hosting & Edge Content Delivery Networks: Cloud edge infrastructure providers maintaining server nodes within the European Economic Area (EEA).
• Secure Email Routing Services: Enterprise SMTP delivery providers encrypting incoming and outgoing messages with TLS 1.3 encryption.

4. Data Retention Principles

Personal communication records submitted via our contact forms are retained only for as long as necessary to address the editorial or technical query, and are permanently erased after 180 days unless a formal legal or regulatory obligation requires longer preservation. Edge server access logs are automatically rotated and purged after 30 calendar days.

5. Data Subject Rights Under GDPR & CCPA

Depending on your geographic residency, you possess explicit statutory rights concerning your personal data:

• Right of Access & Rectification: You may request a machine-readable copy of any personal details we hold about you, or request corrections to erroneous entries.
• Right to Erasure ("Right to Be Forgotten"): You may instruct us to permanently purge your submitted personal records, subject to statutory record-keeping exemptions.
• Right to Restrict or Object to Processing: You have the right to limit or oppose the processing of your personal data based on legitimate interests.
• Right to Data Portability: You may request the structured transfer of your personal data directly to another controller.
• California Consumer Privacy Act (CCPA) Disclosures: California residents have the right to know what personal data categories are collected, to request deletion, and are protected against discrimination for exercising these privacy rights. We do not sell personal information as defined by the CCPA.

To exercise any of these protections, please contact our Data Protection Officer at [email protected]. We will process and respond to verified requests within thirty (30) days without charge.

6. Supervisory Authority Redress

If you believe our data processing violates statutory data protection legislation, you have the right to lodge a formal complaint with the Icelandic Data Protection Authority (*Persónuvernd*):

Persónuvernd
Rauðarárstígur 10, 105 Reykjavík, Iceland
Website: www.personuvernd.is
Email: [email protected]