PRIVACY POLICY & DATA CHARTER

1. Fundamental Principles & Data Controller Overview

Finder Media STSH Ltd ("Findermediastsh", "we", "us", or "our"), registered under Company No. 13894021 at Industrial Ring 44B, 10178 Berlin, Germany and 27 Old Gloucester St, London WC1N 3AX, United Kingdom, operates the findermediastsh.online web domain and its associated informational services. We are firmly committed to protecting personal privacy and upholding strict data sovereignty in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation - GDPR), the UK Data Protection Act 2018, and the California Consumer Privacy Act (CCPA/CPRA).

This comprehensive Privacy Policy delineates the precise technical mechanisms by which we process, store, protect, and minimize data collected from visitors, club curators, contributors, and subscribers interacting with our online architectural directory.

2. Categories of Information Collected

In accordance with the principle of data minimization (Article 5(1)(c) GDPR), we only gather data strictly necessary for delivering editorial club telemetry, preventing network abuse, and facilitating editorial venue submissions:

• Automated Technical Data: Truncated IP addresses (anonymized at network ingestion), browser agent classification, viewport resolution, HTTP referrer payloads, system response latency, and network timestamp indicators.
• Direct Communications Data: Name, professional club or organizational affiliation, and email address provided voluntarily through our editorial submission forms, inquiry portals, or newsletter registration.
• Client-Side Storage Signals: Local state flags stored strictly within your local browser storage (`localStorage`) to record whether cookie preferences have been acknowledged.

3. Legal Bases for Data Processing

We process your personal information strictly under the following lawful bases outlined under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)): Explicit, affirmative consent granted when submitting voluntary venue inquiries or subscribing to specialized curatorial briefings.
• Legitimate Interests (Art. 6(1)(f)): Maintaining robust cyber defense infrastructure, mitigating distributed denial-of-service (DDoS) attempts, optimizing directory caching performance, and safeguarding intellectual copyright assets.
• Legal Obligations (Art. 6(1)(c)): Compliance with statutory tax, audit, and telecommunication record-keeping obligations under EU and UK corporate laws.

4. Third-Party Sub-Processors & Data Isolation

Findermediastsh enforces strict non-monetization of user data. We do not sell, rent, lease, or barter user behavioral profiles to advertising syndicates or data brokers. Third-party infrastructure sub-processors are vetted for SOC 2 Type II and ISO/IEC 27001 certifications:

• Edge Routing & CDN: Cloudflare Inc. (San Francisco, USA / European Data Boundary) — Edge caching, SSL termination, and DDoS mitigation under Standard Contractual Clauses (SCCs).
• Font Assets: Google Fonts (Server-side cached / self-hosted fallback mode to prevent cross-site identity tracking).

5. Your Statutory Rights (GDPR / UK GDPR / CCPA)

Under international privacy mandates, you retain absolute authority over your personal information, including:

• Right of Access (Art. 15 GDPR): The right to obtain full confirmation and machine-readable copies of all personal data held concerning you.
• Right to Rectification (Art. 16 GDPR): The right to demand immediate correction of inaccurate or incomplete record sets.
• Right to Erasure / "To Be Forgotten" (Art. 17 GDPR): The right to demand permanent deletion of your information from all production and backup nodes.
• Right to Restrict or Object (Art. 18 & 21 GDPR): The right to restrict processing parameters or object to legitimate-interest assessments.
• Right to Non-Discrimination (CCPA § 1798.125): Zero impairment in service tiers, features, or content access upon exercising privacy prerogatives.

6. Data Protection Officer Contact & Supervisory Recourse

To exercise any statutory right or submit formal questions regarding our privacy architecture, contact our Data Protection Officer directly:

If you believe our processing violates European regulations, you retain the legal right to file a formal complaint with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit) or the UK Information Commissioner's Office (ICO).