Privacy & Data Protection Policy

1. Overview & Data Controller

Vaultsproutrankltt Nordic Media AB ("Vaultsproutrankltt", "we", "our", or "us"), registered under Swedish company registration number 556812-9041 and located at Birger Jarlsgatan 58, 114 29 Stockholm, Sweden, is committed to safeguarding your personal data with absolute transparency.

This Privacy Policy outlines how we collect, process, store, and protect information when you navigate our editorial platform, interact with our WebGL 3D spatial experiences, access festival schedules, or submit inquiries through our contact forms.

2. Categories of Data We Collect

We strictly collect data necessary to fulfill high-performance editorial delivery:

• Voluntary Identification Data: Your name, email address, corporate affiliation, and message content when submitting press inquiries, ticket alert requests, or editorial correspondence.
• Technical & Telemetry Data: Anonymized IP addresses, browser engine specifications, device screen resolution, operating system, WebGL GPU rendering capabilities, and referral URLs.
• Interaction & Spatial Data: On-page navigation, mood filter selections, interactive map coordinates accessed, and time spent reviewing specific festival dossiers.

3. Legal Bases for Processing (GDPR Article 6)

We process your personal information strictly under established legal foundations:

• Consent (Art. 6(1)(a)): Explicit consent given when accepting analytics cookies or submitting contact forms.
• Legitimate Interests (Art. 6(1)(f)): Optimizing 3D rendering pipeline performance, detecting cybersecurity anomalies, and improving Swedish cultural curation.
• Legal Obligation (Art. 6(1)(c)): Complying with Swedish corporate record-keeping, accounting standards, and data regulator mandates (Integritetsskyddsmyndigheten - IMY).

4. Data Retention & Third-Party Processors

Personal correspondence submitted through our contact interfaces is retained for a maximum of 24 months, after which it is permanently purged. Technical server logs are anonymized every 30 days.

We do not sell, rent, or monetize your personal information. Data may be securely processed through European ISO 27001-certified hosting partners and CDN providers bound by strict Data Processing Agreements (DPAs).

5. Your European GDPR & California Privacy Rights

Under GDPR and CCPA legislation, you possess irrevocable rights including:

• Right to Access: Request a complete copy of all personal records held in association with your identity.
• Right to Rectification: Require immediate correction of obsolete or inaccurate information.
• Right to Erasure ("Right to Be Forgotten"): Request immediate permanent destruction of your personal data.
• Right to Restrict & Object: Halt automated profiling or marketing processing.
• Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV).

6. Data Protection Officer (DPO) Contact

To exercise any statutory privacy rights, please contact our Data Protection Office directly at [email protected] or via registered post to Vaultsproutrankltt Nordic Media AB, Attn: Privacy Compliance, Birger Jarlsgatan 58, 114 29 Stockholm, Sweden.