Privacy Policy
Last revised and verified: January 1, 2026.
1. Data Controller Identification
This Privacy Policy governs the processing of personal data collected through the digital publication Mediarostermatesm.surf (hereinafter, the "Site"). The designated data controller under Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR) and Spanish Organic Law 3/2018 (LOPDGDD) is:
Mediarostermates Hospitality & Media S.L.
Tax Identification Number (CIF): B-67492015
Registered Office: Carrer dels Banys Vells 14, 08003 Barcelona, Spain
Email: [email protected]
2. Categories of Information Collected
We restrict our data collection strictly to information necessary to deliver educational editorial content, maintain server infrastructure, and respond to direct user communications:
- Correspondence Data: When you complete our contact form, we collect your full name, email address, topic category, and the contents of your message.
- Technical Network Logs: Standard web server connection records including anonymized IP address, user-agent string, operating system version, HTTP referrer URL, and timestamp of access.
- Consent Preferences: Local storage records detailing your cookie preference selections (essential, analytical, or functional).
We do not collect sensitive categories of personal data (such as health, biometric, political, or philosophical records), nor do we execute automated decision-making or behavioral profiling.
3. Legal Bases and Processing Purposes
The processing of your personal information is justified under specific legal grounds defined in Article 6 of the GDPR:
- Legitimate Interests (Art. 6(1)(f) GDPR): For maintaining server cybersecurity, preventing denial-of-service abuse, and diagnosing routing malfunctions across our European CDN endpoints.
- Consent (Art. 6(1)(a) GDPR): For non-essential performance analytics and cookie tracking where affirmative consent has been granted through our bottom consent dialog.
- Contractual / Pre-contractual Steps (Art. 6(1)(b) GDPR): For processing and replying to editorial inquiries, licensing requests, or corrections submitted via the contact form.
4. Third-Party Service Providers and Data Transfers
We do not sell, rent, or monetize your personal information to third parties. We engage vetted technical processors operating under formal data processing agreements that guarantee European data protection standards:
- Hosting & Edge Infrastructure: Static file storage and DNS management located within the European Economic Area (EEA).
- Email Routing: Secure SMTP routing gateways configured for transactional communication.
Where technical operations necessitate transfers outside the EEA, transfers occur under standard contractual clauses (SCCs) approved by the European Commission or equivalent adequacy decisions.
5. Retention Period
Personal data is stored only for the duration necessary to satisfy the specific purpose for which it was gathered:
- Contact submissions are retained for up to twelve (12) months following the resolution of your inquiry, after which they are securely purged.
- Server technical logs are automatically rotated and deleted after thirty (30) days.
- Cookie preference tokens saved in your browser's local storage remain valid for 180 days unless manually cleared by the user.
6. Your Rights Under GDPR & CCPA
As a data subject, you hold statutory rights regarding your personal information. Under the GDPR and applicable California Consumer Privacy Act (CCPA) provisions, you may exercise:
- Right of Access: Obtain confirmation whether your data is processed and request an electronic copy.
- Right to Rectification: Rectify inaccurate, incomplete, or outdated details.
- Right to Erasure ("Right to be Forgotten"): Demand the deletion of personal information where legal grounds no longer apply.
- Right to Restrict or Object: Restrict processing or object to data handling conducted under legitimate interests.
- Right to Data Portability: Receive your provided data in a structured, machine-readable format.
To exercise any statutory right, transmit a signed written request to our Data Protection Officer at [email protected] with the subject line "Data Protection Rights Request". We respond to verified requests within thirty (30) calendar days without fee. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos — AEPD, www.aepd.es).