1. Overview and Legal Entity

Brightsrankpantry Heritage Media B.V. ("Brightsrankpantry", "we", "us", or "our"), registered under Chamber of Commerce (KVK) number 84920184 with registered offices at Keizersgracht 421, 1016 EK Amsterdam, Netherlands, operates the digital portal at brightsrankpantry.com. We are committed to protecting the privacy, security, and statutory rights of our visitors, readers, and correspondents.

This Privacy Policy explains the nature, scope, purpose, and processing bases of personal information collected through our website, server logs, contact correspondences, and digital cookie preferences in full compliance with the European General Data Protection Regulation (EU Regulation 2016/679 - GDPR) and relevant international consumer privacy frameworks, including the California Consumer Privacy Act (CCPA).

2. Data Collection and Processing Categories

We do not sell, rent, or trade reader personal data with third-party brokers. We collect and process personal information strictly within the following specified categories:

  • Directly Provided Correspondence Information: When you submit our contact form or email our editorial desk, we collect your name, email address, inquiry subject, and the textual contents of your message. This data is processed strictly to address your question or archival request under GDPR Article 6(1)(b) (contractual preparation) and Article 6(1)(f) (legitimate business interest).
  • Technical Protocol Data & Server Logs: When you visit our pages, our servers automatically log essential HTTP header details, including your internet protocol (IP) address, browser client software user-agent, operating system platform, referring URL, time stamp, and requested asset path. This processing is strictly necessary under Article 6(1)(f) to ensure transmission integrity, detect malicious cyber activity, and prevent denial-of-service abuse.
  • Local Browser Storage Choices: We store your cookie consent selection (essential, analytics, or functional consent) inside your browser's standard localStorage container. This prevents the consent banner from re-rendering on subsequent page visits.

3. Third-Party Processors and International Transfers

Brightsrankpantry uses reputable, GDPR-compliant infrastructure service providers for server hosting, domain routing, and transactional email distribution. All sub-processors maintain contractual standard data protection clauses (SCCs) approved by the European Commission where cross-border transfers occur:

  • Hosting and Cloud Infrastructure: Dedicated edge servers located within the European Economic Area (EEA), providing static file delivery, HTTPS encryption certificates, and firewall security filtering.
  • Email Distribution Providers: Secure SMTP routing services used solely to relay contact form messages to our Amsterdam office inbox without retention for commercial profiling.

4. Data Retention Framework

We retain collected records only as long as necessary to fulfill the specific operational purposes for which they were received:

  • Inquiry Records: General emails and contact inquiries are retained for eighteen (18) months following the resolution of the communication, after which they are purged.
  • Server Access Logs: IP addresses and raw server transmission records are automatically overwritten or anonymized within ninety (90) calendar days.
  • Consent State Records: Browser local storage entries persist until cleared manually by the user or refreshed upon annual policy review.

5. Your Statutory Rights (GDPR & CCPA)

Depending on your jurisdiction, you possess clear statutory entitlements regarding your personal information, which you may exercise without administrative fee:

  • Right of Access (GDPR Art. 15): You may request a verified copy of all personal records we hold concerning your identity.
  • Right to Rectification (GDPR Art. 16): You may instruct us to correct inaccurate, outdated, or incomplete data.
  • Right to Erasure / Right to Be Forgotten (GDPR Art. 17): You may request the deletion of your correspondence records, provided no statutory retention law applies.
  • Right to Restriction and Objection (GDPR Arts. 18 & 21): You may restrict processing or object to our legitimate interest bases.
  • Right to Non-Discrimination (CCPA): We will never deny services, vary response standards, or charge altered rates for exercising any privacy right.

6. Data Protection Officer (DPO) and Inquiries

To exercise any statutory data subject right, lodge an objection, or address questions regarding our compliance practices, please contact our appointed Data Protection Officer via email or post:

Data Protection Officer
Brightsrankpantry Heritage Media B.V.
Keizersgracht 421, 1016 EK Amsterdam, Netherlands
Direct Inquiries: [email protected]

If you believe our data processing fails to meet statutory requirements, you also hold the right to lodge a formal complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) at autoriteitpersoonsgegevens.nl.