Privacy Policy & Data Rights

1. Data Controller Identification

The controller of personal data collected through the digital publication pickbeaconrout.homes is:

2. Fundamental Principles of Data Minimization

We subscribe to the core Nordic philosophy of restraint: we collect only the minimal data strictly required to render our editorial service, preserve server security, and respond to direct user inquiries. We do not participate in behavioral tracking across third-party ad networks, nor do we sell personal data to data brokers.

3. Categories of Personal Data Collected

We process the following types of information under specific lawful bases:

• Direct Inquiry Data: Your name, email address, and message contents when you voluntarily submit our editorial contact form. (Lawful Basis: Art. 6(1)(b) GDPR - Performance of steps prior to contract / legitimate response).
• Technical Connection Telemetry: Anonymized IP addresses, browser user-agent strings, HTTP referrers, and timestamps recorded in volatile web server logs strictly for DDoS prevention and infrastructure monitoring. (Lawful Basis: Art. 6(1)(f) GDPR - Legitimate interest in securing web operations).
• Local Browser Preference State: A single lightweight token stored in your browser's localStorage recording whether you have accepted or rejected cookie settings.

4. Third-Party Data Processors

Pickbeaconrout relies on carefully vetted European Union hosting infrastructure and CDN providers that adhere to the EU-US Data Privacy Framework and standard contractual clauses (SCCs). Our current infrastructure providers include:

• Cloudflare Inc. / EU Datacenters: Edge caching, SSL termination, and anti-bot mitigation.
• Hetzner Online GmbH (Finland/Germany): Dedicated application server clusters located inside the European Economic Area.

5. Your Rights Under GDPR (Articles 15–22)

As an individual whose data is processed within the EEA or globally, you hold irrevocable legal rights regarding your personal information:

• Right of Access (Art. 15): You may request a complete export of any personal records we hold concerning you.
• Right to Rectification (Art. 16): You may demand correction of inaccurate or incomplete information.
• Right to Erasure / "To Be Forgotten" (Art. 17): You can request permanent deletion of your inquiry logs where no statutory retention obligations exist.
• Right to Restriction of Processing (Art. 18): You may temporarily suspend our data processing under specific dispute conditions.
• Right to Data Portability (Art. 20): You may receive your provided personal data in a structured, machine-readable JSON format.

To exercise any of these rights, submit your request to [email protected]. We respond to all verified requests within 30 calendar days free of charge.

6. Data Retention Schedules

Server access logs are automatically overwritten and purged on a 14-day rolling cycle. Contact form submissions are retained in secure archives for a maximum period of 24 months to maintain editorial continuity, after which they are irreversibly destroyed.

7. Supervisory Authority Recourse

If you believe our data processing violates European privacy legislation, you have the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) at tietosuoja.fi, or with your national supervisory authority.