1. Scope and Identity of Data Controller
This Privacy Policy governs the processing of personal data collected through the website Meadowscheersquad.hair (the "Service"). The data controller responsible for personal information is Meadowscheersquad Hospitality Media SAS, a simplified joint-stock company registered under company number RCS Paris B 912 845 301, having its registered corporate seat at 112 Rue du Faubourg Saint-Honoré, 75008 Paris, France ("Meadowscheersquad", "we", "us", or "our").
We are dedicated to safeguarding the fundamental rights of individuals in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation or "GDPR"), the French Data Protection Act (Loi Informatique et Libertés), and applicable regional privacy statutes including the California Consumer Privacy Act as amended ("CCPA").
2. Categories of Personal Data Collected
We gather information exclusively to maintain the publication, address editorial inquiries, and evaluate readership telemetry on an anonymized basis:
- Directly Supplied Information: When you transmit an inquiry via our contact interfaces, we collect your full name, email address, thematic subject area, and the verbatim contents of your message.
- Automated Technical Identifiers: Upon accessing our servers, log records capture your internet protocol (IP) address in truncated/anonymized form, browser agent type, operating system family, referral Uniform Resource Locators (URLs), and interaction timestamps.
- Telemetry & Local Storage: We employ minimal client-side keys strictly to record your persistent cookie consent choices without storing marketing trackers.
3. Legal Bases and Purposes of Processing
Under Article 6 of the GDPR, every processing operation conducted by Meadowscheersquad relies upon an articulated legal justification:
- Performance of Pre-contractual and Communication Requests (Art. 6(1)(b)): Managing correspondence initiated by users seeking editorial context, factual corrections, or licensing access.
- Legitimate Interests (Art. 6(1)(f)): Maintaining network integrity, preventing abusive automated submission attacks on web forms, and assessing aggregated visitor volume.
- Compliance with Legal Obligations (Art. 6(1)(c)): Retaining records of data subject consent logs, audit trails, and legal requests served by statutory judicial authorities.
4. Third-Party Sub-processors and Cross-Border Transfers
Meadowscheersquad does not commercialize, rent, or vend personal datasets to advertising brokers. Data may be handled by vetted technological infrastructure providers operating strictly under Data Processing Agreements (DPAs):
- Hosting and Content Delivery Networks: Secure server infrastructure situated within the European Economic Area (EEA) and Switzerland ensuring low latency and encryption in transit (TLS 1.3).
- Transactional Routing: Email transmission gateways processing inbound contact dispatches with cryptographic signing (DKIM, SPF).
In circumstances where server nodes operate outside the EEA, standard contractual clauses (SCCs) approved by the European Commission are executed to guarantee equivalent protective standards.
5. Statutory Data Subject Rights (GDPR & CCPA)
Under European data protection law, you hold enforceable statutory entitlements regarding your stored information:
- Right of Access & Portability: Obtain confirmation whether personal data is processed, alongside structured machine-readable extracts.
- Right to Rectification: Demand the immediate correction of incomplete or outdated factual details.
- Right to Erasure ("Right to be Forgotten"): Require deletion of personal information where processing grounds no longer apply.
- Right to Restrict or Object: Restrict processing under contested accuracy or object to processing justified by legitimate interests.
- California Privacy Notice: California residents hold the right to know categories of collected information and the right to opt out of data sales. Meadowscheersquad does not sell personal data.
To invoke any statutory entitlement, transmit your signed verification request to our Data Protection Officer at: [email protected].
6. Retention Schedules and Erasure Guidelines
Contact submissions and related communication records are retained for a maximum duration of twenty-four (24) months following resolution of the editorial inquiry, after which they are purged from active repositories. Server security access logs are rotated and permanently deleted after ninety (90) days.
7. Data Protection Officer and Supervisory Authority
If you have inquiries regarding our data handling or suspect an unaddressed grievance, you may lodge a formal complaint with the competent French data supervisory authority:
Commission Nationale de l'Informatique et des Libertés (CNIL)
3 Place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France
Website: www.cnil.fr