Privacy Policy

1. Data Controller Identification

The data controller responsible for the processing of personal data on scenegardenscenefd.quest is:

2. Categories of Information Collected

We collect and process minimal personal information necessary to deliver educational holiday editorial content, respond to inquiries, and maintain site security:

• Contact Inquiries: When you submit our contact form, we collect your name, email address, message subject, and inquiry text. We process this under Article 6(1)(b) of the GDPR (performance of a pre-contractual step or responding to your direct request).
• Technical and Server Logs: When you access our static pages, our web servers log standard non-identifiable technical information, including your IP address (truncated where feasible), browser type, referring URL, time of visit, and operating system. This is processed under Article 6(1)(f) of the GDPR (legitimate interest in maintaining network defense and system reliability).
• Cookie and Local Storage Data: We store your consent choices (acceptance, rejection, preferences) in client-side localStorage to prevent intrusive banners from reappearing on subsequent page loads.

3. Cookies and Analytics

scenegardenscenefd.quest uses essential functional cookies and privacy-respecting aggregate analytics. We do not use third-party behavioral advertising pixels, cross-app trackers, or retargeting beacons. For detailed tables detailing cookie lifespans and purpose categories, please review our comprehensive Cookie Policy.

4. Third-Party Processors and Infrastructure

We rely on carefully selected infrastructure and service providers operating within the European Economic Area (EEA) or in jurisdictions certified under adequate data protection frameworks:

• Secure hosting and content delivery network providers for edge-caching our static files.
• Secure email gateway providers for delivering direct correspondence submitted through our contact portal.

We will never sell, rent, monetize, or barter your contact information or browsing data to third-party travel brokers, tour operators, or commercial marketing networks.

5. Data Retention Periods

Contact inquiries and related email correspondence are retained in our active editorial inbox for up to twelve (12) months following the resolution of your inquiry, after which they are securely purged. Technical access logs generated by our servers are automatically deleted or rotated every thirty (30) days.

6. Your Statutory GDPR and CCPA/CPRA Rights

Under European Regulation (EU) 2016/679 (GDPR) and applicable UK and California privacy standards, you hold specific rights regarding your personal data:

• Right of Access: You may request a confirmation of whether we process your data and receive a copy.
• Right to Rectification: You may request corrections to inaccurate personal records.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal records where no overriding legal obligation exists.
• Right to Restrict Processing: You may request that we temporarily halt active processing of your data while an objection is evaluated.
• Right to Data Portability: You may request your submitted data in a structured, machine-readable format.
• Right to Object: You may object at any time to data processed on the basis of legitimate interest.

To exercise any of these statutory rights, please send an email to [email protected]. We acknowledge and respond to valid verified requests within thirty (30) calendar days at zero charge.

7. Children's Privacy Protection

While our website produces family-oriented holiday planning content for parents and guardians, our services are strictly directed at adults aged 18 and older. We do not knowingly solicit, collect, or store personal information from children under the age of 16. If you believe a minor has submitted personal information through our contact form, please notify us immediately for prompt deletion.

8. International Data Transfers

Where technical processing requires transmission outside the European Economic Area, we ensure such transfers occur under European Commission Standard Contractual Clauses (SCCs) or into jurisdictions recognized as providing adequate data protection standards.

9. Supervisory Authority

If you are an EU resident and believe our data processing violates applicable data protection regulations, you have the right to lodge a complaint with your local data protection supervisory authority or with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

10. Policy Updates

We may update this Privacy Policy periodically to reflect procedural changes or legal requirements. Material revisions will be accompanied by an updated effective date at the head of this document.