Privacy Policy

1. Data Controller Identification

This Privacy Policy governs the processing of personal data collected through the digital web application hosted at wonderbenchscoutshelves.lat. The legal Data Controller responsible for all processing activities is:

Nordic Atlas Expeditions AB
Registered Corporate Identity: 556912-8821
Drottninggatan 88B, 111 36 Stockholm, Sweden
Official Supervisory Authority: Integritetsskyddsmyndigheten (IMY)
Contact: [email protected]

2. Categories of Personal Data Collected

We restrict collection strictly to functional provision, security integrity, and fulfilling voluntary requests:

• Submitted Information: Name, email address, regional preferences, and travel notes submitted via Expedition Desk.
• Network Telemetry: Anonymized IP addresses, browser classification, screen dimensions, and referring URLs generated during HTTP handshakes.
• Interaction Data: Anonymous behavioral measurements concerning season timeline toggles and regional dossier views.

3. Legal Bases for Processing Under GDPR (Article 6)

In accordance with Regulation (EU) 2016/679, processing activities rely upon explicit lawful bases:

• Performance of a Contract (Art. 6(1)(b)): Delivering itinerary manifests and servicing inquiries.
• Legitimate Interests (Art. 6(1)(f)): Maintaining server network defense and preventing automated exploits.
• Consent (Art. 6(1)(a)): Executing non-essential browser cookies, withdrawable at any time.
• Legal Compliance (Art. 6(1)(c)): Fulfilling mandatory Swedish accounting requirements.

4. Data Retention Schedules

• Inquiry Records: General queries are retained for a maximum of 24 months before cryptographic wiping.
• Server Security Logs: Raw IP access logs are retained for 90 days strictly for intrusion forensics.
• Cookie Preference Tokens: Local storage selections are cached locally for 365 days or until manually reset.

5. Individual Data Subject Rights

Under Chapters III of the GDPR, you are vested with immutable rights:

• Right of Access (Art. 15): Obtain confirmation and copy of held records.
• Right to Rectification (Art. 16): Demand correction of inaccurate records.
• Right to Erasure (Art. 17): Request total purging of personal records.
• Right to Data Portability (Art. 20): Receive personal data in machine-readable JSON/CSV format.

To exercise any rights, transmit a request to [email protected].