Privacy & Data Governance Policy

Effective Date: January 1, 2026 • EU GDPR & CCPA Compliant

1. Preamble and Controller Identification

This Privacy Policy outlines how Carnival Reel Parade Aquatics Media GmbH ("Company", "we", "us", or "our"), operating the web portal carnivalreelparade.casa, collects, stores, processes, and protects personal information acquired through your use of our digital platforms, interactive 3D spatial representations, and reservation guidance tools.

Data Controller Information under Article 4(7) GDPR:
Carnival Reel Parade Aquatics Media GmbH
Kurfürstendamm 194, 10707 Berlin, Germany
Commercial Register: AG Charlottenburg HRB 248911 B
Official Data Protection Officer Email: [email protected]

2. Categories of Data Collected

We process personal and non-personal technical telemetry strictly in compliance with legal bases defined in Article 6(1) of the General Data Protection Regulation (GDPR):

Direct Communication Data: Name, professional email address, subject matter, and inquiry message content submitted via our contact forms (Article 6(1)(b) & (f) GDPR).
Spatial & Technical Telemetry: Anonymized screen coordinates, WebGL frame rendering capabilities, device viewport metrics, operating system version, and IP addresses hashed at the edge server (Article 6(1)(f) GDPR).
Consent Preferences: Local storage state indicators governing cookie choice selection (Article 6(1)(c) GDPR).

3. Legal Bases for Processing

Every processing operation conducted by Carnivalreelparade is grounded upon valid statutory justifications under European jurisprudence:

Contractual Performance (Art. 6(1)(b) GDPR): To respond directly to travel planning inquiries, itinerary evaluations, or media collaboration requests.
Legitimate Interests (Art. 6(1)(f) GDPR): To defend our infrastructure against distributed denial-of-service (DDoS) threats and debug WebGL rendering anomalies across cross-platform browsers.
Explicit Consent (Art. 6(1)(a) GDPR): Where you have affirmatively opted into telemetry analytics via our interactive Cookie Banner.

4. Data Retention and Destruction Schedules

Personal data is retained only for the duration required to accomplish the specific collection purpose. Direct contact form transmissions are retained for a maximum duration of 180 calendar days post-resolution, after which records are automatically purged from our encrypted databases. Anonymized web server access logs are retained on a rolling 14-day cycle solely for intrusion prevention.

5. Your Rights Under European and International Privacy Frameworks

Under Chapter III of the GDPR and California Consumer Privacy Act (CCPA), you maintain enforceable rights without discriminatory consequence:

Right of Access (Art. 15 GDPR): Receive a copy of all personal data held concerning your identity.
Right to Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete records.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): Demand irreversible deletion of personal data where legal retention obligations no longer apply.
Right to Restrict Processing (Art. 18 GDPR) & Data Portability (Art. 20 GDPR).
Right to Object (Art. 21 GDPR): Object at any time to data processing grounded upon legitimate interest justifications.

To exercise any of these rights, please address a written communication directly to our Data Protection Officer at [email protected]. You also possess the statutory right to lodge a formal complaint with the competent supervisory authority: Berliner Beauftragte für Datenschutz und Informationsfreiheit.