Minglerushrankt

Regulatory Compliance

Privacy Policy

Effective Date: January 1, 2026. This Privacy Statement delineates how Minglerushrankt collects, manages, protects, and discloses information gathered through our web platforms.

1. Identification of the Data Controller

The legal data controller responsible for the processing of your personal data on minglerushrankt.com is:

Minglerushrankt Hospitality Insights Ltd
Company Registration Number: HE 419208
Registered Address: Nikis Avenue 22, 105 57 Athens, Greece
Data Protection Officer Contact: [email protected]

2. Data Collection & Processing Categories

We gather and process personal information solely where there is a valid lawful basis under Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and comparable international privacy statutes, including the California Consumer Privacy Act (CCPA/CPRA). Categories include:

  • Direct Contact Data: Name, email address, inquiry topic, and message content submitted voluntarily via our contact form. Lawful basis: Consent and legitimate interest in addressing user inquiries.
  • Technical Navigational Data: Anonymized Internet Protocol (IP) addresses, browser classification, operating operating system version, referring uniform resource locators (URLs), timestamp records, and device metrics. Lawful basis: Legitimate interest in maintaining platform stability, diagnostics, and defense against malicious activity.
  • Cookie Data: Identifiers placed on your terminal equipment according to your preferences established via our cookie consent banner.

3. Third-Party Processors & Infrastructure

Minglerushrankt does not sell, lease, or monetize personal data to marketing brokers or independent advertisers. We engage vetted technical service providers under binding Data Processing Agreements (DPAs) who process data strictly under our instruction:

  • Hosting & Content Delivery: Secure data centers located within the European Economic Area (EEA) delivering encrypted HTTPS traffic.
  • Privacy-Compliant Analytics: Aggregated analytical tools configured without cross-site tracking or user profiling.
  • Legal & Regulatory Authorities: Data disclosure is executed only when legally mandated by Greek judicial summons, court orders, or statutory European reporting mandates.

4. Data Subject Rights Under GDPR & CCPA

Depending on your jurisdiction, you are entitled to exercise statutory legal rights regarding your personal records without discrimination:

  • Right of Access (Article 15 GDPR): You may request formal confirmation and copies of personal data held about you.
  • Right to Rectification (Article 16 GDPR): You may request correction of erroneous, incomplete, or outdated data.
  • Right to Erasure / "To Be Forgotten" (Article 17 GDPR): You may demand deletion of personal data where retention is no longer justified.
  • Right to Restriction of Processing (Article 18 GDPR): You may request suspension of active data manipulation pending verification.
  • Right to Data Portability (Article 20 GDPR): You may request transmission of your data in a structured, commonly used machine-readable format.
  • Right to Object (Article 21 GDPR): You may object to data processing grounded upon our legitimate interests at any time.
  • CCPA Specific Provisions: California residents hold the explicit right to know what personal categories are collected, request deletion, and opt out of any hypothetical transfer of records. Minglerushrankt does not sell consumer records.

5. Data Retention Schedules

Personal information transmitted via our communication form is retained for a maximum duration of twelve (12) calendar months to facilitate historical continuity of editorial inquiries, after which records are permanently expunged or anonymized. Server technical access logs are rotated and deleted automatically on a rolling thirty (30) day security cycle.

6. Security Measures

We employ strict technological and administrative safeguards, including Transport Layer Security (TLS 1.3) cryptographic protocols for data in transit, strict access control matrices for editorial personnel, and ongoing server monitoring to prevent unauthorized access, data loss, or disclosure.

7. Contacting the Data Protection Officer & Supervisory Authorities

To exercise your privacy rights or lodge a compliance inquiry, contact our Data Protection Officer directly via email at [email protected]. If you consider that our processing violates European data protection provisions, you hold the legal right to submit a formal complaint to the Hellenic Data Protection Authority (HDPA) at Kifissias 1-3, 115 23 Athens, Greece (www.dpa.gr).