Contact Us
Statutory Documentation

PRIVACY POLICY

Effective Date: January 1, 2026. This policy describes how Reel Pock Story Porch ApS collects, stores, and processes information when you visit reelpockstoryporch.quest.

1. Data Controller Information

The entity responsible for processing personal data on this website is:

Reel Pock Story Porch ApS
CVR / Registration Number: DK-41892044
Havnegade 39, 1058 Copenhagen K, Denmark
Email: [email protected]
Designated Data Privacy Officer (DPO): Privacy Desk, Reel Pock Story Porch ApS.

2. Information We Collect

We collect personal information directly when you communicate with us via our contact form or email, and automatically when you navigate through reelpockstoryporch.quest:

  • Direct Communications: When you send a query through our contact form, we collect your name, email address, topic subject, and the contents of your message.
  • Technical Access Logs: Our web servers automatically record internet protocol (IP) addresses, browser user agent strings, referring URLs, operating systems, and timestamps for system security and fault monitoring.
  • Local Storage & Cookies: We store your consent choices regarding non-essential features within your browser’s localStorage API.

3. Legal Grounds for Processing (GDPR & International Standards)

We process your personal information strictly under European General Data Protection Regulation (Regulation EU 2016/679) bases:

  • Legitimate Interests (Art. 6(1)(f) GDPR): To ensure the functional stability, security, and performance of our informational culinary guide.
  • Consent (Art. 6(1)(a) GDPR): When you submit voluntary contact messages or opt into optional functional preferences.
  • Legal Obligations (Art. 6(1)(c) GDPR): When keeping statutory corporate and operational records mandated under Danish and European commercial law.

4. Cookies and Analytical Trackers

reelpockstoryporch.quest uses minimal essential cookies to remember your display choices and consent state. We do not sell your behavioral data, execute cross-context behavioral advertising, or deploy intrusive fingerprinting scripts. Please consult our dedicated Cookie Policy for detailed tabular breakdowns and opt-out procedures.

5. Third-Party Service Processors

We partner with European hosting and technical infrastructure providers who adhere to strict data security standards. These processors operate solely under binding Data Processing Agreements (DPAs) requiring them to process data only on our explicit written instructions and in full compliance with European data privacy mandates.

6. International Data Transfers

Our core website infrastructure is situated within the European Economic Area (EEA). If any technical infrastructure requires cross-border transfers outside the EEA, transfers are safeguarded through European Commission Standard Contractual Clauses (SCCs) or established adequacy decisions.

7. Data Retention Periods

Contact inquiries submitted to our field desk are retained for up to twelve (12) months after resolution to handle follow-up queries, after which they are securely deleted. Server access logs are held for thirty (30) days for security auditing and then permanently purged.

8. Your Rights Under the GDPR & International Privacy Laws

Depending on your physical jurisdiction (including the EEA, UK, and California where applicable under the CCPA/CPRA), you retain the following enforceable rights:

  • Right of Access: Request a confirmation and copy of any personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal records.
  • Right to Erasure ("Right to be Forgotten"): Request deletion of your personal information where processing is no longer legally necessary.
  • Right to Restriction of Processing: Request suspension of processing while data accuracy disputes are resolved.
  • Right to Object: Object at any time to processing based on legitimate interest grounds.
  • Right to Data Portability: Obtain your data in a structured, machine-readable format.

To exercise any of these statutory rights, please reach out to [email protected]. You also have the legal right to lodge a formal complaint with the Danish Data Protection Authority (Datatilsynet, Carl Jacobsens Vej 35, 2500 Valby, Denmark).

9. Security Measures

We enforce modern transport encryption (TLS 1.3), hardened HTTP response headers (including Content-Security-Policy and HSTS), strict access controls, and regular operational reviews to prevent unauthorized access, alteration, or disclosure.

10. Policy Modifications

We may periodically update this Privacy Policy to reflect changing legal requirements or web technical modifications. Any revisions will be published immediately on this page with an updated effective date.