Privacy Policy

1. Overview and Scope

Friendflitallystck Media Ltd. ("Friendflitallystck", "we", "our", or "us"), incorporated under registration number 3189402, operates the cartographic and travel resource portal accessible via friendflitallystck.asia. We are committed to processing personal data in full compliance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the California Consumer Privacy Act (CCPA), and relevant international data protection frameworks.

This Privacy Policy explains how we collect, store, utilize, and safeguard your personal information when you access our field guides, interactive map interfaces, and inquiry forms.

2. Data Collection and Processing Grounds

We process personal information under defined legal bases under Article 6 of the GDPR:

• Directly Provided Information: When you submit a dispatch or inquiry via our contact form, we collect your full name, email address, topic of inquiry, and message content. This processing is performed on the basis of legitimate interest and pre-contractual customer communication.
• Technical and Server Log Data: When loading our pages, our servers automatically record basic network identifiers, including your IP address, browser user-agent, operating system, referring URL, and timestamp. This data is processed under our legitimate interest in maintaining web server resilience and detecting unauthorized access.
• Cookie Data: We utilize first-party technical identifiers stored in your browser's local memory to manage cookie consent selections and cache responsive viewport states.

3. Cookies and Local Storage

We believe in data minimization. We do not deploy third-party advertising beacons or covert cross-site tracking scripts. Our site uses minimal local storage keys (such as ff_cookie_consent) solely to respect your decision regarding non-essential script loading and interface settings. For an exhaustive inventory of stored keys and their expiration periods, please refer to our dedicated Cookie Policy.

4. Third-Party Service Providers and Data Transfers

We do not sell, rent, or trade your personal data. We disclose information only to vetted third-party technical vendors who provide essential infrastructure functions:

• Cloud Hosting & Content Delivery: Secure static hosting environments ensuring server availability and TLS 1.3 encryption.
• Transactional Email Dispatchers: Encrypted relay services that transmit correspondence submitted via our contact portal directly to our editorial inbox.

All third-party vendors operate under standard data processing agreements containing EU Standard Contractual Clauses (SCCs) to ensure equivalent protection standards for any cross-border data transfers.

5. User Rights Under GDPR and CCPA

Depending on your geographic residence, you possess specific statutory rights regarding your personal information:

• Right of Access: You may request a structured copy of the personal data we hold about you.
• Right to Rectification: You may request immediate correction of inaccurate or incomplete contact details.
• Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your records where retention is no longer necessary for legal or administrative purposes.
• Right to Restriction and Objection: You may object to the processing of your data based on legitimate interests.
• Non-Discrimination: California residents will never face altered service quality for exercising statutory CCPA privacy rights.

6. Retention and Security Standards

Contact inquiry logs are retained for a maximum duration of 180 days following the resolution of your inquiry, after which they are permanently purged from active systems. Server security logs are rotated and deleted automatically within 30 days. We employ strict access controls, transport-layer encryption (HTTPS/TLS), and periodic vulnerability audits to prevent unauthorized alteration, interception, or disclosure.

7. Data Protection Officer (DPO) Contact

To exercise any statutory privacy rights, submit a data inquiry, or lodge a formal complaint, please direct written communication to our designated Data Protection Officer:

You also retain the right to lodge a complaint directly with your local supervisory authority within the European Union or United Kingdom.