1. Data Controller Identification

Pickrostertonictrailies Nordic Lab ApS, registered under Danish commercial company registration number CVR DK41982301, operates this online publication. Our registered address is Frederiksborggade 21, 1360 Copenhagen K, Denmark. We act as the data controller regarding personal data gathered through our public web services.

2. Scope of Collected Information

We limit our data collection strictly to what is necessary to serve botanical monographs and respond to user queries:

  • Voluntary Contact Inputs: When you submit a transmission via our contact interface, we collect your name, email address, and inquiry text solely to reply to your inquiry.
  • Automated Device Telemetry: Standard server logs record IP addresses, browser agent strings, requested URL paths, and timestamps for cyber defense and traffic diagnostics.
  • Consent Status: Your decision regarding non-essential cookie storage is saved locally in your browser to maintain your privacy preferences across visits.

3. Legal Bases for Processing (GDPR Article 6)

Under the European Union General Data Protection Regulation (GDPR) and the Danish Data Protection Act (Databeskyttelsesloven), our data handling rests upon clear legal foundations:

  • Legitimate Interests (Art. 6(1)(f)): Maintaining server security, diagnosing network errors, and preventing fraudulent form submissions.
  • Consent (Art. 6(1)(a)): Any non-essential analytical cookies require explicit affirmative consent via our cookie consent banner.
  • Contract / Pre-contractual Communication (Art. 6(1)(b)): Responding to direct inquiries sent through our published contact desk.

4. Third-Party Service Providers & Data Processors

We do not sell, rent, or lease personal identifiers to third parties. We collaborate exclusively with vetted European infrastructure processors bound by Data Processing Agreements (DPAs) meeting GDPR Article 28 requirements, including EU-based static content hosts and secure email transit relays.

5. Data Retention Schedules

Direct contact messages and customer support correspondence are archived securely for a maximum period of twenty-four (24) months, after which they are systematically deleted unless ongoing legal requirements mandate extended retention. Raw web server traffic logs are kept for ninety (90) days before automated log rotation and permanent deletion.

6. Your Statutory Rights (GDPR & CCPA)

As a data subject, you hold statutory rights under European and international privacy frameworks:

  • Right of Access: Request a full copy of personal identifiers we store about you.
  • Right to Rectification: Demand corrections to incomplete or inaccurate records.
  • Right to Erasure ('Right to be Forgotten'): Request permanent removal of your information where legal retention thresholds permit.
  • Right to Restriction and Objection: Limit processing or object to processing carried out under legitimate interest rationales.
  • Right to Portability: Obtain your data in a structured, machine-readable format.

7. Data Protection Officer & Supervisory Authority

For privacy inquiries, rights enforcement, or questions regarding our data architecture, reach our Data Protection Officer at: [email protected].

If you believe our processing violates applicable data regulations, you have the right to lodge a formal complaint with the Danish Data Protection Agency (Datatilsynet): Carl Jacobsens Vej 35, 2500 Valby, Denmark (www.datatilsynet.dk).