At Lanternzappyd Sports Architecture & Heritage Ltd. ("Lanternzappyd", "we", "our", or "us"), we respect your personal data and are dedicated to protecting your privacy in full compliance with the General Data Protection Regulation (EU GDPR / UK GDPR), the California Consumer Privacy Act (CCPA), and applicable global data privacy statutes.
1. Data Controller Information
The legal data controller responsible for the processing of your personal information collected via lanternzappyd.monster is:
Lanternzappyd Sports Architecture & Heritage Ltd.
Company Registration No: 12948102
14 St. Ann's Square, Manchester, M2 7EF, United Kingdom
Data Protection Officer (DPO): [email protected]
2. Categories of Information We Collect
We may collect and process the following categories of information:
- Directly Provided Information: When you use our contact form, submit stadium blueprints, or request architectural dossiers, we collect your full name, email address, corporate or educational affiliation, and the contents of your message.
- Technical & Network Identifiers: Your Internet Protocol (IP) address, browser family, operating system version, device screen resolution, preferred language, and timestamp logs.
- Usage & Navigation Metrics: Aggregated interaction patterns with our interactive Europe map, stadium profile dwell times, search queries, and transit coordinate queries.
- Cookie & LocalStorage Flags: User consent state flags (such as the persistent cookie consent token saved in your local storage).
3. Legal Bases for Processing (under GDPR Article 6)
We only process your personal information when we have an explicit legal foundation:
- Consent (Art. 6(1)(a)): Where you provide explicit consent to analytical cookies or voluntary communications.
- Contractual Necessity (Art. 6(1)(b)): To provide access to requested architectural data sheets and respond directly to your technical inquiries.
- Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent Distributed Denial of Service (DDoS) incidents, debug frontend script errors, and optimize transit map performance.
- Legal Compliance (Art. 6(1)(c)): To fulfill statutory accounting, regulatory audit, and fraud-prevention obligations.
4. Third-Party Service Providers and Data Transfers
Lanternzappyd does not sell, rent, or trade your personal data to data brokers. We share minimal necessary data with verified infrastructure vendors:
- Cloud Hosting & CDN: Servers located in secure, ISO-27001 certified data centers within the UK and European Union.
- Static Asset Delivery: Web font rendering (Google Fonts) and content delivery networks delivering architectural imagery.
- Spam & Security Shields: Automated heuristic filters designed to prevent abusive automated bot submissions.
5. Data Retention Periods
We retain direct inquiry correspondence for a maximum period of twenty-four (24) months from the last date of communication, after which records are permanently expunged or anonymized. Server access log files containing IP addresses are automatically purged on a rolling 30-day schedule.
6. Your Statutory Rights (GDPR & CCPA)
Depending on your jurisdiction, you possess enforceable legal rights regarding your personal information:
- Right of Access: You may request a complete copy of all personal records we hold concerning you.
- Right to Rectification: You may instruct us to correct inaccurate or incomplete contact details.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your data where retention is no longer legally mandated.
- Right to Restrict or Object to Processing: You may restrict processing or object to our legitimate interest determinations.
- Right to Data Portability: You may receive your data in a structured, commonly used, machine-readable format.
- Right to Withdraw Consent: You may revoke cookie or marketing consent at any time with immediate effect.
To exercise any of these rights, contact our Data Protection Officer at [email protected].
7. Security Measures
We enforce robust technological and organizational safeguards, including TLS 1.3 encryption across all website endpoints, restricted SSH key access controls, HTTP Strict Transport Security (HSTS), and regular software vulnerability patch cycles.