Privacy Policy

1. Introduction and Data Controller Overview

Pebblerankcabints Retail Analytics Ltd ("we," "our," or "the Organization") operates pebblerankcabints.autos as an independent analytical platform documenting European grocery retail architectures. We take data protection seriously and adhere strictly to Regulation (EU) 2016/679 (General Data Protection Regulation or GDPR), the German Federal Data Protection Act (BDSG), and applicable international standards including the California Consumer Privacy Act (CCPA).

The Data Controller responsible for your personal information is:

Pebblerankcabints Retail Analytics Ltd
Company Registration Number: 14892018
48 Ludwig-Erhard-Allee, 40227 Düsseldorf, Germany
Official Compliance Contact: [email protected]

2. Categories of Information Collected

Depending on how you interact with our website, we may collect and process the following categories of data:

• Directly Provided Inquiries: When you submit information through our contact form, we collect your full name, email address, topic subject, and the contents of your message.
• Technical Server Telemetry: When you navigate our pages, our hosting servers automatically log standard network metadata, including your IP address (anonymized prior to persistent storage), browser user-agent string, referring URL, timestamp of access, and bytes transferred.
• Cookie State Preferences: Local storage records indicating whether you accepted, rejected, or customized your tracking preferences via our consent banner.

3. Legal Bases for Processing Under GDPR

We process personal information under the following legal frameworks established in Article 6(1) of the GDPR:

• Consent (Art. 6(1)(a)): For optional analytics telemetry cookies when explicitly granted via our cookie choice banner.
• Contractual Performance & Pre-Contractual Steps (Art. 6(1)(b)): For processing business queries, analytical collaboration requests, and contact submissions.
• Legitimate Interests (Art. 6(1)(f)): For maintaining network security, preventing cross-site scripting (XSS), mitigating brute-force attacks, and ensuring stable site uptime.

4. Third-Party Sub-Processors and Data Transfers

We do not sell, rent, or trade your personal information. Data may be shared with vetted technical infrastructure sub-processors strictly for hosting, content delivery, and email routing purposes:

• Secure Cloud Hosting & Server Infrastructure: Certified European data center providers adhering to ISO/IEC 27001 standards.
• Transactional Email Dispatch: Relays enforcing Transport Layer Security (TLS 1.3) encryption in transit.

Any transfer of data outside the European Economic Area (EEA) is governed by European Commission Standard Contractual Clauses (SCCs) to guarantee an adequate level of data protection.

5. Data Retention Periods

We retain personal data only for the duration necessary to satisfy the specific purposes for which it was gathered:

• Contact Submissions: Retained for twenty-four (24) months from the resolution of the inquiry, after which messages are purged unless required for legal proceedings.
• Server Diagnostic Logs: Anonymized and purged automatically on a rolling fourteen (14) day retention cycle.
• Cookie Consent Markers: Stored locally within your browser client for up to twelve (12) months or until cleared manually by the user.

6. Your Rights Under GDPR and CCPA

Under European data protection laws, visitors enjoy comprehensive rights concerning their personal information:

• Right of Access (Art. 15 GDPR): The right to request copies of personal data held about you.
• Right to Rectification (Art. 16 GDPR): The right to correct inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to demand deletion of your records where no overriding legal obligation applies.
• Right to Restrict Processing (Art. 18 GDPR) & Data Portability (Art. 20 GDPR): The right to obtain your data in a structured, machine-readable format.
• Right to Object (Art. 21 GDPR): The right to object at any time to processing predicated upon legitimate interest grounds.

California residents maintain equivalent rights under the CCPA to know what personal information is collected, to delete personal data, and to non-discrimination for exercising these statutory rights.

7. Data Protection Officer and Supervisory Complaints

To exercise your data protection rights or lodge an inquiry regarding our compliance measures, contact our designated privacy team at [email protected].

If you reside in the European Union and believe our processing infringes upon statutory standards, you maintain the legal right to lodge a complaint with your competent data protection supervisory authority (in Germany, the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia).