1. Introduction and Data Controller
This Privacy Policy applies to Listrippleatlas.lat (hereinafter referred to as "Listrippleatlas", "we", "us", or "our"), operated under European registered entity Listrippleatlas Lat Ltd, Company No. 14920412, having its statutory registered seat at Calle de Serrano 48, 28001 Madrid, Spain.
We act as the Data Controller under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation or GDPR) and applicable national data protection legislation. We are firmly committed to preserving the confidentiality, integrity, and security of your personal data when you interact with our European men's fashion atlas, city dossiers, and digital services.
2. Categories of Information We Collect
We adhere strictly to the principle of data minimization. The categories of information processed include:
- Technical and Device Information: Internet Protocol (IP) address, browser type and version, time zone setting, operating system, device identifiers, and localized page interaction statistics collected automatically via server logs.
- Direct Inquiries and Submissions: If you utilize our interactive editorial contact form, we collect your full name, email address, inquiry category, company affiliation, and the contents of your message.
- Map & Navigation State Preferences: Local client-side storage keys (such as active city selection or cookie consent status) preserved strictly on your local device.
3. Legal Bases for Processing Under GDPR
In accordance with Article 6 of the GDPR, we process personal information under the following lawful grounds:
- Consent (Art. 6(1)(a)): Where you provide explicit, informed consent for optional non-essential functional or analytics cookies.
- Performance of a Contract / Pre-contractual Inquiries (Art. 6(1)(b)): To respond to business inquiries, brand dossier submissions, or technical support requests initiated by you.
- Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraudulent server behavior, analyze regional traffic metrics to optimize site performance, and ensure the ongoing stability of our platform.
- Compliance with Legal Obligations (Art. 6(1)(c)): To satisfy statutory accounting, tax, or legal requirements mandated under Spanish and European Union legislation.
4. Third-Party Processors and International Transfers
We do not sell, rent, or lease your personal information to third parties. Data may be shared strictly on a need-to-know basis with vetted infrastructure providers, including secure European cloud hosting facilities, content delivery networks (CDNs), and transactional mail relays. Where data must be transferred outside the European Economic Area (EEA), such transfers are governed by European Commission Standard Contractual Clauses (SCCs) ensuring adequate levels of data protection.
5. Data Retention Schedules
We retain personal data only for as long as necessary to fulfill the purposes for which it was originally collected:
- Inquiry form communications are retained for a maximum of 24 months after ticket closure unless statutory commercial retention requires extended storage.
- Server telemetry and IP access logs are automatically rotated and anonymized within 90 days.
- Local storage preferences (such as cookie consent choices) remain active on your local browser for up to 365 days or until manually cleared.
6. Your Statutory Rights Under European Law (GDPR)
As a data subject within the European Union, you possess comprehensive statutory rights:
- Right of Access (Art. 15 GDPR): The right to obtain confirmation and a copy of all personal data held concerning you.
- Right to Rectification (Art. 16 GDPR): The right to demand correction of inaccurate or incomplete personal records.
- Right to Erasure / 'Right to be Forgotten' (Art. 17 GDPR): The right to request permanent deletion of your data where statutory exceptions do not apply.
- Right to Restriction of Processing (Art. 18 GDPR): The right to freeze data processing during dispute resolutions.
- Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, machine-readable format.
- Right to Object (Art. 21 GDPR): The right to object to processing grounded in legitimate interest.
7. Data Protection Officer and Supervisory Authority
If you wish to exercise any of your statutory rights or submit a formal inquiry regarding our data privacy governance, please contact our Data Protection Officer at:
Data Protection Officer
Listrippleatlas Lat Ltd
Calle de Serrano 48, 28001 Madrid, Spain
Email: [email protected]
You also maintain the right to lodge a formal complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos - AEPD) at www.aepd.es or your competent local European supervisory authority.