Privacy Policy & Data Processing Notice

1. Introduction and Data Controller Overview

Welcome to Scoutmediastsh ("we," "our," or "the Platform"), operated by Scout Media Stash Digital Publishing Ltd. (Company Registration No. GR-09823412), having its official registered office at Kallidromiou 42, Exarcheia, 106 81 Athens, Greece. We are dedicated to respecting your privacy, protecting personal information, and adhering strictly to the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR"), the UK Data Protection Act 2018, and relevant global privacy statutes including the California Consumer Privacy Act (CCPA/CPRA).

This Privacy Policy explains the categories of personal and technical data we collect when you visit scoutmediastsh.mom, access our interactive Nightlife Passport stamp book, review city guides, or communicate with our registry bureau.

2. Data We Collect and Methods of Processing

We process personal data only when there is a lawful basis to do so under Article 6 of the GDPR. Categories of data collected include:

• Directly Provided Information: When you complete our contact forms, request venue audits, or register for notifications, we collect your name, email address, inquiry subject, and any notes submitted.
• Client-Side Stored Data: Our interactive Passport Stamp Book records your collected stamps, custom circuits, and preferences locally in your device's browser memory (localStorage) to safeguard your anonymity without requiring server-side account profiling.
• Automated Telemetry & Technical Information: IP address (anonymized/truncated at ingestion), browser version, device category, screen resolution, operating system, referring URL, and session timestamps.

3. Lawful Grounds for Processing

Under Article 6(1) of the GDPR, we rely upon the following legal bases:

• Contractual Necessity (Art. 6(1)(b)): To deliver requested travel guides, route calculations, and interactive passport functionality.
• Legitimate Interests (Art. 6(1)(f)): To maintain web application security, prevent fraudulent server abuse, optimize loading latency across European network nodes, and ensure acoustic accuracy.
• Consent (Art. 6(1)(a)): For optional analytics cookies and non-essential web telemetry, which you may grant or revoke at any time via our Cookie Consent interface.

4. Third-Party Sub-Processors and Data Transfers

We do not sell, rent, or trade your personal information. Where necessary to maintain service reliability, we collaborate with vetted sub-processors bound by stringent Data Processing Agreements (DPAs) and European Commission Standard Contractual Clauses (SCCs):

• Content Delivery & Edge Hosting: Cloudflare Inc. (Global CDN and DDoS mitigation, TLS encryption).
• Typography Delivery: Google Fonts (cached locally or served via privacy-respecting European endpoints).
• Transactional Transmission Services: Encrypted SMTP relay providers located within the European Economic Area (EEA).

5. Your Statutory Rights Under GDPR and CCPA

As a European resident or qualifying international user, you possess the following enforceable data rights:

• Right of Access (Art. 15 GDPR): The right to obtain confirmation and copies of any personal data processed by us.
• Right to Rectification (Art. 16 GDPR): The right to demand correction of inaccurate personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to demand permanent deletion of your information from our active databases.
• Right to Restriction of Processing (Art. 18 GDPR): The right to limit how we utilize your data during pending verification.
• Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): The right to object to processing grounded in legitimate interests.
• Non-Discrimination (CCPA): We will never deny services, charge differing prices, or alter service quality if you exercise statutory privacy rights.

6. Data Retention Period and Security Protocols

Contact form transmissions and support inquiries are retained for a maximum duration of twelve (12) months following resolution, after which they are permanently purged. All data transmissions across scoutmediastsh.mom are protected via Transport Layer Security (TLS 1.3) cryptographic protocols with 256-bit encryption.

7. Data Protection Officer & Contact Inquiries

To exercise any statutory data right or submit inquiries regarding our data handling practices, please direct formal communications to our designated privacy representative: