Privacy Policy

1. Introduction & Data Controller Identity

Sortbuddyrankltt Media ApS ("Sortbuddyrankltt", "we", "us", or "our"), operating the domain sortbuddyrankltt.cfd, is committed to safeguarding the privacy of visitors, festival participants, and researchers accessing our Nordic editorial platform. This Privacy Policy sets out the principles and legal bases under which personal data is collected, stored, processed, and secured in strict compliance with the European General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and the Danish Data Protection Act (Databeskyttelsesloven).

Data Controller Details:
Sortbuddyrankltt Media ApS
Company Registration No. (CVR): DK-39281044
Registered Address: Vesterbrogade 149, 1620 Copenhagen V, Denmark
Data Protection Officer Contact: [email protected]

2. Categories of Personal Data Processed

Depending on your interaction with Sortbuddyrankltt, we collect and process several categories of information:

• Directly Provided Information: When submitting editorial requests or festival reviews via our contact portal, we collect your full name, email address, affiliated organization, and message contents.
• Technical & Device Information: Automatically collected telemetry including IP address (anonymized at subnet level), browser type, viewport resolution, operating system, referencing URL, and timestamp.
• Interaction & Spatial Telemetry: Anonymized interaction logs regarding 3D canvas viewport engagement and mood filter preferences stored locally in your browser storage.

3. Legal Bases for Data Processing (Article 6 GDPR)

We process personal data only when substantiated by recognized legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): Explicit consent given when accepting analytics cookies or submitting inquiries through interactive contact forms.
• Legitimate Interests (Art. 6(1)(f)): Maintaining network integrity, preventing denial-of-service events, and debugging WebGL rendering performance across mobile devices.
• Legal Obligation (Art. 6(1)(c)): Fulfilling statutory requirements under Danish commercial accounting and audit regulations.

4. Data Retention and Security Safeguards

Sortbuddyrankltt employs enterprise-grade cryptographic safeguards (TLS 1.3 encryption in transit, AES-256 encryption at rest) across all European server nodes. Form submissions are retained for a maximum duration of twelve (12) months following the resolution of your inquiry, after which they are permanently expunged or anonymized for statistical research.

5. Your Rights Under the GDPR

As an EU or international data subject, you maintain comprehensive enforceable rights regarding your information:

• Right of Access (Art. 15): Obtain confirmation as to whether your personal data is being processed and receive a full copy.
• Right to Rectification (Art. 16): Require correction of inaccurate or incomplete personal records.
• Right to Erasure / 'To Be Forgotten' (Art. 17): Request deletion of your data where no overriding legitimate ground exists.
• Right to Restrict Processing (Art. 18): Suspend active processing of personal records under disputed accuracy scenarios.
• Right to Data Portability (Art. 20): Receive your submitted information in a structured, machine-readable JSON format.
• Right to Object (Art. 21): Object to processing carried out under legitimate interest grounds.

To exercise any of these statutory rights, please submit a formal request to our designated privacy desk at [email protected]. We respond to verified data subject access requests within thirty (30) calendar days.

6. Right to Lodge a Complaint with the Supervisory Authority

If you believe Sortbuddyrankltt Media ApS has processed your personal records in violation of statutory privacy legislation, you have the formal right to lodge a complaint with the Danish Data Protection Authority:

Datatilsynet
Carl Jacobsens Vej 35, 2500 Valby, Denmark
Telephone: +45 33 19 32 00 · Website: www.datatilsynet.dk