Privacy Policy

1. Introduction and Data Controller

At minglemintfeedburst.lol (operated by Afterglow Cultural Media B.V., registered in the Netherlands under KVK 84920412, with registered offices at Keizersgracht 482, 1016 EG Amsterdam), we respect the privacy rights of every European festival enthusiast visiting our platform.

This Privacy Policy sets forth how we collect, process, safeguard, and disclose information when you access our guides, interact with our interactive features, or reach out to our editorial desk. We are fully committed to compliance with the European Union General Data Protection Regulation (EU GDPR) 2016/679, the UK GDPR, and relevant regional privacy statutes including the California Consumer Privacy Act (CCPA/CPRA).

2. Information We Collect

We believe in strict data minimization. The categories of information we may collect include:

• Voluntary Contact Information: When you submit queries through our contact desk, we collect your full name, email address, topic subject, and the contents of your message.
• Technical and Server Logs: Your browser automatically transmits certain technical attributes, including your masked IP address, browser type, operating system version, referring URL, timestamp of request, and screen resolution.
• Local State & Cookie Indicators: When you specify your cookie consent preferences, we store that decision locally in your browser storage so that you are not prompted on each page transition.

3. Legal Grounds for Processing (GDPR Article 6)

We process your personal information strictly under established lawful bases:

• Consent (Art. 6(1)(a)): For optional performance analytics and non-essential cookies. You have the right to withdraw this consent at any time via our Cookie Preferences modal.
• Performance of a Contractual or Pre-contractual Request (Art. 6(1)(b)): To respond directly to your editorial feedback, inquiries, or media requests submitted via our contact forms.
• Legitimate Interests (Art. 6(1)(f)): To maintain the network security, integrity, and operational resilience of our servers against distributed denial-of-service attacks, automated scrapers, and malicious bot activity.

4. Cookies and Analytical Trackers

We classify our cookies into Strictly Essential, Performance/Analytics, and Functional cookies. We do not engage in cross-site behavioral targeting or sell personal information to third-party data brokers. For comprehensive details on our cookie configurations, please review our dedicated Cookie Policy.

5. Third-Party Service Processors

To deliver our fast, secure static website, we rely on trusted infrastructure providers bound by strict Data Processing Agreements (DPAs) ensuring adequate security safeguards. These processors include European cloud hosting facilities and secure DNS infrastructure. We do not permit our service partners to use your data for their independent advertising purposes.

6. Data Retention Periods

We retain contact inquiries for up to twenty-four (24) months to maintain communication threads and address follow-up questions, after which records are permanently deleted or anonymized. Server access logs are retained on a rotating basis for a maximum of ninety (90) days solely for security audit purposes.

7. Your Rights Under GDPR and Global Laws

Subject to statutory conditions, you possess the following enforceable rights regarding your personal information:

• Right of Access (Art. 15): Request confirmation and copies of any personal data we hold about you.
• Right to Rectification (Art. 16): Correct inaccurate or incomplete details.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request the permanent deletion of your data where no overriding legal basis exists.
• Right to Restrict Processing (Art. 18): Request temporary limits on how we process your records.
• Right to Data Portability (Art. 20): Receive your submitted information in a structured, machine-readable format.
• Right to Object (Art. 21): Object to processing based on our legitimate interests.

To exercise any of these statutory rights, please transmit your request to our Data Protection Officer at [email protected]. We will respond within thirty (30) calendar days without charge.

8. International Transfers & Security

Our core server infrastructure is situated within the European Economic Area (EEA). Wherever data may traverse borders, we implement European Commission Standard Contractual Clauses (SCCs) to guarantee an equivalent degree of privacy protection. We maintain modern TLS 1.3 encryption for all data in transit.

9. Supervisory Authority Complaints

If you believe our data processing violates statutory regulations, you have the right to lodge a formal complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local EU member state supervisory authority.