Privacy Policy

Effective Date: January 1, 2026 • Compliant with EU GDPR & California CCPA/CPRA

1. Data Controller Information

Vaultpickbeacn Media GmbH ("Vaultpickbeacn", "we", "us", or "our") operates the web platform located at vaultpickbeacn.lat. We are committed to processing personal data in accordance with the European Union General Data Protection Regulation (EU Regulation 2016/679) and applicable national data protection frameworks.

Registered Address: 74 Grosser Hirschgraben, 60311 Frankfurt am Main, Germany
Registration Number: HRB-914820 (Amtsgericht Frankfurt am Main)
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Personal Data Processed

We process personal data only when strictly necessary to deliver editorial content, maintain platform security, and respond to direct communications:

Technical & Access Logs: IP address (anonymized at subnet level), browser type and version, operating system, referrer URL, timestamps, and HTTP request headers.
Direct Inquiries: Name, professional email address, subject matter, and message contents submitted through our contact form.
Interaction & Consent Telemetry: Stored preferences regarding cookie configurations and UI display state.

3. Legal Bases for Processing (GDPR Article 6)

We process personal data based on the following statutory grounds:

Art. 6(1)(f) GDPR (Legitimate Interests): Maintaining the operational security, DDoS defense, server stability, and network performance of our website infrastructure.
Art. 6(1)(a) GDPR (Consent): Serving non-essential analytical cookies and processing user preferences where explicit consent has been recorded.
Art. 6(1)(b) GDPR (Performance of a Contract): Handling inquiries and business communications initiated by the user.

4. Cookies & Storage Technologies

We utilize essential session tokens and persistent local storage keys (such as `vaultpickbeacn_cookie_consent`) to store consent states across browsing sessions without transmitting unnecessary behavioral profiles to third-party ad networks. For complete technical specifics, refer to our dedicated Cookie Policy.

5. Third-Party Sub-Processors & Data Transfers

We do not sell, rent, or trade your personal data. We engage verified cloud hosting providers and Content Delivery Networks (CDNs) operating within the European Economic Area (EEA) or under established EU Standard Contractual Clauses (SCCs) to ensure equivalent data protection thresholds.

6. Data Subject Rights Under GDPR & CCPA

As a data subject, you possess enforceable legal rights regarding your personal information:

Right of Access (Art. 15 GDPR): Request a structured copy of all personal records held by Vaultpickbeacn.
Right to Rectification (Art. 16 GDPR): Correct inaccurate or incomplete data attributes.
Right to Erasure (Art. 17 GDPR): Request the permanent deletion of personal records ('Right to be Forgotten').
Right to Restriction of Processing (Art. 18 GDPR): Limit how your data is processed during ongoing disputes.
Right to Data Portability (Art. 20 GDPR): Receive data in a machine-readable CSV/JSON format.
Right to Object (Art. 21 GDPR): Object at any time to processing based on legitimate interests.

To exercise any of these rights, submit a written notice to [email protected]. Responses will be delivered within 30 statutory calendar days.

7. Data Retention Policy

Server access log files are retained for a maximum duration of 30 days for cybersecurity auditing, after which they are irreversibly purged. Inquiries submitted via email are retained for up to 24 months to maintain commercial correspondence records, unless an earlier erasure request is filed.