Rankpantryroms Contact Field Desk
Compliance Framework

Privacy Policy

Last updated: January 1, 2026. Effective immediately for all visitors to rankpantryroms.rest.

1. Data Controller Identification

This Privacy Policy sets out how Rankpantryroms Speleo Media Ltd. ("Rankpantryroms", "we", "us", or "our"), an entity registered under the laws of the Republic of Slovenia (Registration Number: SI-84920194) with registered offices at Kolodvorska cesta 14, 6210 Sežana, Slovenia, processes and protects any information you provide when using our digital speleological atlas hosted at rankpantryroms.rest.

We operate as the Data Controller in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679) and the Slovenian Personal Data Protection Act (ZVOP-2). For any inquiries regarding our data practices, contact our designated Data Protection Officer at [email protected].

2. Information We Collect

We prioritize data minimization. We only collect personal information when strictly necessary to fulfill administrative, informational, or technical functions:

  • Directly Provided Inquiries: When you submit information via our Contact Field Desk form, we collect your full name, email address, topic classification, and any details included in your correspondence.
  • Technical and Device Telemetry: When accessing the website, our servers automatically log non-personally identifiable technical information, including your IP address (anonymized at subnet level), browser type, referring URL, operating system, and timestamped page requests.
  • Cookie and Preference Identifiers: Small state tokens stored locally on your device to record your interface settings and consent status for analytical cookies.

3. Legal Bases and Processing Purposes

We process personal data solely on lawful grounds established under Article 6 of the GDPR:

  • Legitimate Interests (Art. 6(1)(f) GDPR): To ensure server security, prevent distributed denial-of-service (DDoS) attacks, debug platform errors, and maintain the integrity of our geological documentation databases.
  • Consent (Art. 6(1)(a) GDPR): For any non-essential analytics tracking or direct response communication where you have explicitly opted in via our cookie banner or contact forms.
  • Legal Obligation (Art. 6(1)(c) GDPR): To comply with statutory corporate record-keeping, tax regulations, and lawful orders issued by Slovenian or European law enforcement authorities.

4. Third-Party Processors and International Data Transfers

We do not sell, rent, or trade your personal data to advertisers or commercial brokers. Data may be processed on our behalf by vetted third-party infrastructure providers operating under strict Data Processing Agreements (DPAs):

  • Web Hosting Infrastructure: Cloud hosting facilities located strictly within the European Economic Area (EEA), upholding ISO 27001 data security accreditations.
  • Transactional Email Services: Secure SMTP relay nodes delivering form confirmations and technical responses, adhering to TLS 1.3 encryption in transit.

Should any ancillary system require processing outside the EEA, transfers are executed under European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent level of protection.

5. Data Retention Periods

We retain personal data only for the time necessary to achieve the stated processing purposes:

  • Contact Inquiries: Retained for a maximum of 24 months following resolution of the speleological query, after which records are purged or irreversibly anonymized.
  • Server Access Logs: Retained for rolling periods of 90 days for operational security and forensic diagnostics, after which logs are deleted.
  • Consent State Preferences: Retained in your local browser storage for 12 months, or until you clear your browser cache.

6. Your Statutory Rights (GDPR & Global Frameworks)

Under European data protection law and applicable international statutes (including the California Consumer Privacy Act / CCPA where applicable), you possess specific enforceable rights:

  • Right of Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Require us to correct inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data when it is no longer required for legitimate or statutory purposes.
  • Right to Restrict or Object to Processing: Challenge our legitimate interest processing or demand a restriction on further data use.
  • Right to Data Portability: Obtain your data in a structured, commonly used, machine-readable format.
  • Right to Lodge a Complaint: File a formal grievance with the Slovenian Information Commissioner (Informacijski pooblaščenec, Dunajska cesta 22, 1000 Ljubljana, Slovenia, [email protected]) or your local supervisory authority.

7. Data Protection Officer (DPO) Contact

To exercise any of your statutory rights, or to submit questions regarding this policy, please direct written communications to:

Data Protection Officer
Rankpantryroms Speleo Media Ltd.
Kolodvorska cesta 14, 6210 Sežana, Slovenia
Email: [email protected]