1. Data Controller Identification
The legal entity responsible for the processing of personal data on indexpopvault.surf is:
Company Registration No.: IT-982410-X
Registered Operational Address: 14 Via San Tommaso, Rione Monti, 00184 Rome, Italy
Data Protection Officer Contact: [email protected]
Supervisory Authority: Garante per la protezione dei dati personali (Piazza Venezia 11, Rome, Italy)
2. Data Collection Categories & Telemetry Principles
We operate under the fundamental principle of strict data minimization. In delivering slow travel telemetry matrices, route files, and concierge dispatches, we process the following categories of information:
- Directly Provided Information: When you complete our field dispatch inquiry forms, we collect your full name, email address, physical location or country of residence, desired travel dates, party size, and specialized physical mobility requirements.
- Technical & Telemetry Data: When you navigate our interface, our web servers log Internet Protocol (IP) addresses (anonymized via byte truncation), browser family, viewport dimensions, referring URLs, access timestamps, and request latency.
- Consent State Records: We record your local preference timestamps regarding telemetry cookies stored in your browser’s localStorage engine.
3. Legal Bases for Data Processing (GDPR Article 6)
We process personal data only where a valid legal justification exists under European law:
| Processing Activity | Data Categories | Legal Basis (GDPR Art. 6) |
|---|---|---|
| Field Dispatch Inquiries | Name, Email, Travel Parameters | Article 6(1)(b): Performance of pre-contractual steps |
| Infrastructure Telemetry & Security | Truncated IP, Server Logs, Request Headers | Article 6(1)(f): Legitimate interests in securing web infrastructure |
| Telemetry Preference Retention | Browser localStorage Flags | Article 6(1)(a): User Consent |
| Legal Compliance & Tax Invoicing | Billing Records, Identification Data | Article 6(1)(c): Legal obligation compliance |
4. Data Retention & Erasure Protocols
Personal information is never retained longer than necessary to fulfill the operational purpose for which it was collected. Inactive field inquiry dossiers are automatically purged from our staging servers after 24 calendar months. Technical access logs are overwritten on a rolling 30-day FIFO (First-In, First-Out) schedule. Financial and billing records required under Italian commercial law (Codice Civile) are archived securely for the statutory minimum of 10 years.
5. Third-Party Processors & International Transfers
Index pop vault Intelligence Ltd does not engage in programmatic data brokers, advertising network trackers, or cross-site behavioral tracking. We engage only carefully audited, ISO 27001-certified infrastructure vendors:
- Hosting & Edge Delivery: Cloud infrastructure servers located strictly within EU member states (Frankfurt and Paris regions), featuring end-to-end TLS 1.3 encryption.
- Transactional Communications: SMTP relay providers executing Standard Contractual Clauses (SCCs) to ensure equivalent protection standards when processing dispatch notifications.
6. Your Statutory Rights Under GDPR & CCPA
Under European data protection laws, all visitors and clients hold the following enforceable rights free of charge:
- Right of Access (Art. 15): Obtain confirmation of whether your data is being processed and receive a complete copy in a structured format.
- Right to Rectification (Art. 16): Correct inaccurate or incomplete information without undue delay.
- Right to Erasure / "To Be Forgotten" (Art. 17): Request the permanent deletion of personal dossiers when data is no longer necessary.
- Right to Restrict Processing (Art. 18): Temporarily halt the handling of your data during dispute resolution.
- Right to Data Portability (Art. 20): Receive your travel matrices and dossier records in a machine-readable JSON/CSV export.
- Right to Object (Art. 21): Object at any time to data processing carried out under legitimate interest bases.
To exercise any of these statutory rights, please transmit your formal request to [email protected]. Our Data Protection Officer will review and respond within thirty (30) calendar days.
7. Policy Amendments & Notifications
We reserve the right to revise this Privacy Policy to reflect advancements in our technology architecture, statutory legislative updates, or changes in regulatory interpretations. Material updates will be highlighted on this page with a revised verification timestamp.