Privacy Policy

1. Data Controller Information

The legal entity responsible for the collection and processing of personal data on tinkerlypixelscabn.com is:

2. Scope and Information We Collect

We collect personal data only when strictly necessary to fulfill business communication, evaluate route feasibility, or ensure safe technical operation of our online platform.

• Direct Communications and Inquiries: When you submit a request through our dispatch form or communicate via email, we collect your full name, organizational or club affiliation, official email address, phone contact, and operational details regarding your planned camp (e.g., dates, squad volume, geographical destinations).
• Technical Server Telemetry: When you browse our website, our web servers log standard HTTP request metadata, including your IP address (anonymized at capture), browser type, referring URL, time of access, and operating system. This data is used solely to maintain server security and prevent malicious traffic.
• Cookie Preference Records: We store a localized consent token in your browser's LocalStorage to record whether you accepted or rejected optional analytical tracking.

3. Legal Bases for Processing Under the GDPR

We process personal data under Article 6(1) of the EU General Data Protection Regulation according to the following legal grounds:

• Contractual Performance (Art. 6(1)(b)): Processing operational and contact data necessary to prepare sports logistics proposals, vehicle charter quotes, and route plans upon your direct request.
• Legitimate Interests (Art. 6(1)(f)): Securing our network infrastructure, preventing DDoS attacks, and ensuring accurate display of logistics documentation.
• Consent (Art. 6(1)(a)): For optional browser cookie mechanisms, which can be withdrawn or modified at any time via our Cookie Banner controls.

4. Athlete and Operational Team Confidentiality

We recognize that athletic teams, football clubs, and national federations operate under intense public and competitive scrutiny. We treat all travel itineraries, hotel locations, venue names, and squad rosters as strictly confidential business information. We do not sell, rent, or commercialize organizational data under any circumstances.

5. Third-Party Service Providers and Processors

To deliver website stability, we work with technical infrastructure providers bound by contractual Data Processing Agreements (DPAs):

• Hosting and CDN Providers: High-security European data centers located within the EU/EEA to host web assets.
• Email Infrastructure: Encrypted SMTP mail relays to process inbound dispatch inquiries securely.

6. International Transfers

All primary database storage and communication routing reside inside the European Economic Area (EEA). If a transit inquiry pertains to operations across non-EEA European territories (such as the United Kingdom or Switzerland), operational coordination data is exchanged strictly pursuant to EU Adequacy Decisions or Standard Contractual Clauses (SCCs).

7. Data Retention Guidelines

Contact inquiries and logistics scoping records are retained only for the duration necessary to conclude operational quotes or fulfill statutory Dutch commercial recordkeeping mandates (typically 7 years for commercial correspondence and financial records under Dutch tax code). General server logs are purged after 30 days.

8. Your Rights Under European Data Protection Law

Under Articles 15 through 22 of the GDPR, you possess comprehensive rights regarding your personal data:

• Right of Access: You may request confirmation and copies of any personal data we hold regarding your identity.
• Right to Rectification: You may correct inaccurate or incomplete operational records.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal contact data when it is no longer required for the purpose collected.
• Right to Restrict Processing & Data Portability: You may restrict processing or receive your records in a structured, machine-readable format.
• Right to Lodge a Complaint: If you believe your data has been handled unlawfully, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

9. Security Measures

We apply Transport Layer Security (TLS 1.3) encryption across all public web traffic. Access to inbound operational dossiers is restricted exclusively to authorized logistics planners.

10. Updates to This Policy

This Privacy Policy was last reviewed and updated for the 2026 operational season. Any material modifications will be posted directly to this URL.