Inquiries
LEGAL COMPLIANCE // DOCUMENT REF: PRIV-2026

Privacy Policy

Last updated: January 1, 2026. This policy outlines how Nordic Material Archive Förlag HB collects, safeguards, and respects your personal information across reelpockviewvillage.quest.

1. Data Controller Information

The entity responsible for processing your personal data on this platform is Nordic Material Archive Förlag HB, registered in Sweden under company organization number SE 556912-4481. Our registered office is located at Skeppsbron 32, 111 30 Stockholm, Sweden. For any privacy-related inquiries, you may contact our designated Data Protection Officer via email at [email protected].

2. Categories of Information We Collect

We believe in minimal data footprint. We do not require account registration to read our design research. The categories of information we may collect include:

  • Directly Provided Information: When you submit our contact or editorial inquiry form, we collect your full name, email address, subject line, and the message content you voluntarily provide.
  • Technical & Log Data: When you navigate our static website, our web server temporarily records standardized server logs containing your IP address, browser type, referring URL, and access timestamps to protect server health and mitigate DDoS threats.
  • Client Preference Storage: We use local browser storage (localStorage) strictly to store your consent choices regarding our cookie banner so you aren't asked repeatedly on subsequent visits.

3. Legal Basis for Processing (GDPR Article 6)

We process personal information under the following legal frameworks established by the General Data Protection Regulation (GDPR):

  • Legitimate Interests: Operating, diagnosing, and securing our architectural archive against fraudulent activity and automated scraping attacks.
  • Consent: Communicating with you when you submit a message through our contact interface, or when you explicitly enable optional analytics preferences.
  • Legal Obligation: Retaining correspondence where required by Swedish commercial record-keeping and corporate governance laws.

4. Data Retention Periods

Contact messages and subsequent email correspondence are retained only for as long as necessary to address your editorial inquiry or collaborate on research, up to a maximum period of twenty-four (24) months, after which they are securely expunged. Web server logs are automatically overwritten after fourteen (14) days unless an active investigation into a security breach requires temporary preservation.

5. Third-Party Processors and Hosting Infrastructure

We do not sell, rent, or trade your personal data to commercial data brokers or marketing lists. Our website is hosted on secure European-based cloud servers that adhere to ISO/IEC 27001 security standards. Any third-party processors utilized for infrastructure maintenance operate under legally binding Data Processing Agreements (DPAs) ensuring equivalent GDPR compliance.

6. International Transfers

Because our servers are located within the European Economic Area (EEA), your data remains under strict European privacy protections. If any technical service requires transfer outside the EEA, we ensure that appropriate safeguards, including European Commission Standard Contractual Clauses (SCCs), are actively enforced.

7. Your Statutory Rights Under GDPR & CCPA

Under European and applicable international regulations, you possess enforceable rights regarding your data:

  • Right of Access: You may request a confirmation of whether we hold your personal data and obtain a copy.
  • Right to Rectification: You may request corrections to inaccurate or incomplete information.
  • Right to Erasure (Right to be Forgotten): You may request that we delete your contact records from our active databases.
  • Right to Restriction: You may request that we suspend processing during a dispute over accuracy.
  • Right to Data Portability: You may receive your provided personal data in a structured, machine-readable format.
  • Right to Withdraw Consent: Where processing is based on consent, you may revoke it at any time without penalty.

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a formal complaint with the Swedish Data Protection Authority (Integritetsskyddsmyndigheten — IMY) if you believe your rights have been compromised.

8. Data Security Architecture

We apply robust modern security standards across reelpockviewvillage.quest, including full Transport Layer Security (TLS 1.3) encryption in transit, strict Content Security Policies, sanitized form input parsing, and strict server access controls. Despite these best practices, no electronic transmission over the internet can be guaranteed to be 100% impenetrable; therefore, we encourage you to avoid sending sensitive personal identifiers through ordinary contact forms.