Privacy Policy

1. Overview and Data Controller

This Privacy Policy sets out how Bzzbunchstorycrat Media Ltd. (operating domain Bzzbunchstorycrat.cyou, registration number GEMI 164829101000, with registered offices at 42 Poseidonos Avenue, Glyfada 166 75, Athens, Greece) collects, manages, and safeguards information obtained through this website.

As an independent informational and editorial travel resource, our data collection practices are minimized to ensure site security, analyze aggregated traffic trends, and respond to direct contact submissions. We do not sell personal data, maintain consumer shopping accounts, or process commercial payment transactions on this domain.

2. Categories of Information Collected

We may collect and process the following categories of information:

• Directly Provided Inquiries: When you complete our contact form, we collect your submitted name, email address, topic subject, and message contents to fulfill your communication request.
• Technical and Device Telemetry: When you browse the website, our server logs automatically record internet protocol (IP) addresses, browser brand and engine version, operating system environment, referring URLs, timestamps, and pages accessed.
• Consent and Preference Indicators: We store your chosen cookie consent preferences locally on your browser terminal via localStorage.

3. Lawful Bases for Processing (EU GDPR)

Under the European Union General Data Protection Regulation (Regulation EU 2016/679), all data handling operations rely upon defined lawful bases:

• Legitimate Interests (Art. 6(1)(f) GDPR): For maintaining web server security, identifying denial-of-service attempts, preventing spam submissions, and ensuring correct content formatting across mobile and desktop devices.
• Consent (Art. 6(1)(a) GDPR): For running optional analytical telemetry or persistent browser tracking where expressly authorized via our bottom cookie consent dialogue.
• Contractual / Pre-contractual Steps (Art. 6(1)(b) GDPR): For responding to editorial, syndication, or partnership questions submitted through our formal contact channels.

4. Cookies and Web Storage

Our website uses strictly necessary cookies and local storage tokens to preserve core functionality, including the recording of your cookie consent state. Optional measurement cookies may only be deployed if you explicitly select “Accept All” via our consent banner. Detailed categories, technical lifespans, and browser management instructions are maintained within our dedicated Cookie Policy.

5. Third-Party Sub-processors and Hosting Infrastructure

We do not monetize your personal information through data brokers or behavioral marketing networks. Data may be processed on our behalf by vetted technical sub-processors under compliant Data Processing Agreements (DPAs):

• Cloud Hosting & Content Delivery: Secure European data centers managing DNS routing, TLS encryption termination, and server log retention.
• Email Routing Infrastructure: Secure mail transfer protocols used strictly to forward incoming editorial correspondence to editorial personnel.

6. Retention Schedules

We retain personal data only for periods strictly necessary to satisfy the objectives for which it was assembled:

• Server Access Logs: Retained for a maximum rolling window of 90 days before automated overwriting, unless required for active forensic investigation of cybersecurity incidents.
• Contact Submissions: Retained for up to 18 months following the final correspondence to maintain context for editorial dialogues, after which communications are securely purged.
• Cookie Preference Tokens: Retained in your local browser storage for up to 365 days or until you manually clear your browsing data.

7. Your Statutory Rights (GDPR & CCPA)

Depending on your physical jurisdiction, you are entitled to exercise statutory data protection rights without discriminatory prejudice:

• Right of Access & Portability: You may request confirmation as to whether we hold personal data relating to you and receive an export in a structured, machine-readable format.
• Right to Rectification: You may request immediate correction of inaccurate or incomplete records.
• Right to Erasure (“Right to be Forgotten”): You may request deletion of your information where processing is no longer required under statutory obligations.
• Right to Restrict or Object: You may challenge processing grounded in legitimate interests or demand suspension of processing during dispute evaluations.
• Right to Withdraw Consent: Where processing relies on consent, you may withdraw it at any time with immediate forward-looking effect.
• California Residents (CCPA/CPRA): We do not sell or share personal information as defined by California law. You retain the right to know, delete, and opt-out of non-essential processing.

8. Data Protection Officer & Supervisory Contact

To exercise your statutory rights or submit questions regarding our data governance policies, contact our designated privacy team directly:

European Union residents have the right to lodge formal complaints with the Hellenic Data Protection Authority (HDPA / www.dpa.gr) or their national supervisory authority if they consider our data handling non-compliant with EU regulations.