Regulatory Compliance & Transparency

Privacy Policy & Data Protection Charter

Effective Date: January 1, 2026. This policy outlines how Cheersquadrankt Cultural Hospitality Media GmbH processes, protects, and manages personal data in strict compliance with Regulation (EU) 2016/679 (GDPR) and the California Consumer Privacy Act (CCPA).

1. Data Controller Identification

The designated Data Controller responsible for the operation of cheersquadrankt.xyz is:

Cheersquadrankt Cultural Hospitality Media GmbH
Registration Number: HRB 241982 B (Amtsgericht Charlottenburg)
Pariser Platz 4a, 10117 Berlin, Germany
Data Protection Officer (DPO) Contact: [email protected]

2. Scope and Nature of Collected Data

When utilizing our informational portal, we may process personal and technical data categorized into the following streams:

  • Direct User Dispatches: Names, electronic mail addresses, and contextual content submitted voluntarily via our contact interface.
  • Technical Telemetry: Anonymized Internet Protocol (IP) addresses, browser user agent strings, referring URLs, screen viewport dimensions, and timestamps collected automatically to ensure system stability and render optimization.
  • Consent Tokens: Client-side localStorage entries storing your cookie preferences.

3. Legal Grounds for Processing (GDPR Art. 6)

All data processing executed by Cheersquadrankt is grounded in lawful bases under Article 6 of the General Data Protection Regulation:

  • Consent (Art. 6(1)(a)): Explicit permission granted when choosing analytical preferences via our cookie banner.
  • Performance of Pre-contractual Inquiries (Art. 6(1)(b)): Responding to user requests, architectural citations, and media inquiries initiated through our contact form.
  • Legitimate Interests (Art. 6(1)(f)): Maintaining server perimeter security, mitigating cross-site scripting risks, and preventing automated form abuse.

4. Third-Party Processors and Hosting Architecture

We maintain a minimal data processing footprint. We do not sell, rent, or lease personal identifiers. Data transmission occurs exclusively through encrypted TLS 1.3 channels to vetted infrastructure providers located within the European Economic Area (EEA) or jurisdictions recognized by the European Commission as offering adequate statutory data protection.

5. Data Retention and Deletion Schedules

Technical server access logs are purged automatically after 14 calendar days. General inquiries transmitted via our contact desk are retained for a maximum of 180 days to resolve ongoing historical or editorial dialogues, following which they are permanently expunged unless statutory commercial retention obligations (Handelsgesetzbuch) require prolonged storage.

6. Your Statutory Rights Under GDPR & CCPA

As a data subject within the European Union or qualifying California resident, you retain enforceable legal rights regarding your personal records:

  • Right of Access (Art. 15 GDPR): The right to obtain confirmation and copies of any personal records retained about you.
  • Right to Rectification (Art. 16 GDPR): The right to demand immediate correction of inaccurate or incomplete biographical details.
  • Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request the total purging of your personal records.
  • Right to Data Portability (Art. 20 GDPR): The right to receive your data in a structured, machine-readable format.
  • CCPA Non-Discrimination: California residents will never experience diminished website utility or service discrimination for exercising their privacy rights.

To exercise any of the above statutory entitlements, contact our Data Protection Officer at [email protected]. You also have the right to lodge a formal complaint with the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit).