Privacy Policy

1. Identification of Data Controller

The data controller responsible for the processing of your personal data on Meadowshappyroster.xyz is Meadowshappyroster Sp. z o.o., registered in Poland under KRS 0000984217, REGON 389201948, with registered offices at ul. Powstańców Warszawy 12/4, 81-718 Sopot, Poland ("Meadowshappyroster", "we", "our", or "us").

2. Categories of Data Collected

We strictly collect personal data necessary to provide independent editorial reviews and facilitate reader inquiries:

• Information You Volunteer: When submitting correspondence through our contact form, we collect your full name, email address, chosen subject category, and message body.
• Technical Browsing Data: Anonymized Internet Protocol (IP) address, browser client software, device category, referring URL, time spent per page, and general geographic location at city-level resolution.
• Preference Records: LocalStorage markers capturing your selected cookie consent parameters.

3. Lawful Bases and Purposes of Processing

Under Regulation (EU) 2016/679 (GDPR), we process your personal data on the following legal bases:

• Consent (Article 6(1)(a) GDPR): Applicable when you willingly consent to non-essential analytics cookies or request newsletter correspondence.
• Legitimate Interests (Article 6(1)(f) GDPR): Necessary for answering inquiries sent via our contact desk, securing our digital server infrastructure from malicious cyber attacks, and maintaining baseline site uptime.
• Legal Obligation (Article 6(1)(c) GDPR): Compliance with statutory Polish accounting, corporate archiving, and administrative disclosure mandates.

4. Third-Party Data Processors

We do not sell, lease, or commercially trade personal information to data brokers. Data may be handled by contracted data processors bound by strict Data Processing Agreements (DPAs):

• Cloud hosting and Content Delivery Network (CDN) infrastructure providers operating within the European Economic Area (EEA).
• Encrypted transactional email delivery services utilized solely to transmit replies to user-initiated contact forms.
• Privacy-focused web traffic analytics platforms executing cookieless or anonymized aggregation without personal fingerprinting.

5. Your Rights Under GDPR and CCPA

Regardless of your jurisdiction, we uphold standard international privacy principles. Under European and California consumer privacy frameworks, you have the right to:

• Access: Request formal confirmation and copies of personal data stored concerning your identity.
• Rectification: Request correction of inaccurate, dated, or incomplete data records.
• Erasure ("Right to Be Forgotten"): Request full deletion of your contact data where statutory retention grounds no longer apply.
• Restriction & Objection: Object to processing predicated on legitimate interest grounds or request temporary processing suspension.
• Data Portability: Obtain your provided personal data in a structured, machine-readable format.
• Opt-Out of Data Sale: We do not sell personal data under the California Consumer Privacy Act (CCPA) or other international privacy standards.

6. Data Retention Schedule

Contact form correspondence is retained only as long as necessary to address your specific inquiry, up to a maximum period of twenty-four (24) months following resolution, unless required for ongoing legal claims. Technical server logs are rotated and deleted automatically every thirty (30) days.

7. Data Protection Officer (DPO) Contact

For queries concerning this Privacy Policy, your statutory data subject rights, or to submit a formal erasure request, please direct correspondence to our designated privacy officer: