1. Identification of the Data Controller
This Privacy Policy governs the processing of personal data collected through the digital properties of Happy stack prss Inc. (Registration Number: PV-5765884), with official registered business premises located at Kungsgatan 32, 111 35 Stockholm, Sweden. For all data protection inquiries, our designated Data Protection Officer (DPO) can be contacted directly via electronic mail at [email protected].
2. Categories of Data Collected
In accordance with European Union Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and applicable international data privacy standards, Happy stack prss collects only strictly necessary information to deliver our slow travel curation services:
- Direct Communications Data: Your name, business or personal email address, and inquiry specifications submitted via our interactive contact desk form.
- Technical & Telemetry Data: IP address (anonymized at ingress), browser agent type, operating system version, screen resolution, and time spent reviewing specific route telemetry modules.
- Cookie & Consent Preferences: Local storage state indicators reflecting your choice regarding analytics and functional cookies.
3. Legal Grounds for Data Processing
We process your personal information under the following lawful bases set out in Article 6 of the GDPR:
- Consent (Art. 6(1)(a)): When you voluntarily subscribe to the weekly slow travel newsletter or opt-in to non-essential cookies.
- Contractual Performance & Pre-Contractual Steps (Art. 6(1)(b)): When you request tailored itinerary specifications or host liaison assistance from our Stockholm dispatch team.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server network integrity, preventing abusive form submissions, and securing our digital infrastructure.
4. Third-Party Processors and International Transfers
Happy stack prss does not sell, lease, or monetize user data under any circumstances. We employ a minimal stack of GDPR-compliant third-party infrastructure providers hosted within the European Economic Area (EEA). Where technical data briefly traverses infrastructure outside the EEA, standard contractual clauses (SCCs) approved by the European Commission are strictly enforced.
5. Data Retention Schedules
Data submitted through contact forms is retained for a maximum duration of 24 months following the last active dispatch correspondence, after which it is permanently purged or anonymized. Technical server access logs are held in encrypted, rotating vaults for no longer than 30 calendar days for intrusion detection purposes.
6. Your Statutory Rights (GDPR & CCPA)
Under European and international privacy statutes, you possess explicit rights regarding your personal records:
- Right of Access (Art. 15 GDPR): You may request a complete export of all personal data held concerning your identity.
- Right to Rectification (Art. 16 GDPR): You may request immediate correction of inaccurate or incomplete records.
- Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): You may demand the permanent deletion of your data where retention is no longer legally mandated.
- Right to Restrict Processing & Data Portability (Arts. 18 & 20 GDPR): You may receive your data in a structured, machine-readable format.
- Right to Lodge a Complaint: You maintain the right to register formal grievances with the Swedish Integritetsskyddsmyndigheten (IMY) or your regional data protection authority.
7. Contact and DPO Inquiries
To execute any of the above statutory rights, send a written request to:
Data Protection Desk
Happy stack prss Inc.
Kungsgatan 32, 111 35 Stockholm, Sweden
Email: [email protected]
Response SLA: Within 4 business hours.