Field Notes
LEGAL COMPLIANCE // GDPR COMPLIANT

Privacy Policy

Last Updated: January 1, 2026. This Privacy Policy details how Arctic Field Journal Nordic Oü ("we", "us", "our") manages, processes, and protects your personal data when you visit showmeadowscenefd.com.

1. Data Controller Identification

The data controller responsible for personal information processed through showmeadowscenefd.com is:

Arctic Field Journal Nordic Oü
Company Registration Number: EE102849182
Registered European Address: Pohjoisranta 14 B 7, 00170 Helsinki, Finland
Designated Data Protection Officer / Contact: [email protected]

2. Information We Collect

We operate on a principle of rigorous data minimization. Depending on your interactions with our website, we may collect and process the following categories of information:

  • Direct Correspondence Data: When you contact us using our contact submission form or directly via email, we collect your full name, email address, subject matter, and the textual contents of your message.
  • Technical and Device Usage Data: When navigating our editorial guides, our web servers automatically log standard network exchange parameters, including your anonymized IP address, operating system, browser variant, referral URL, and timestamps.
  • Consent and Preference Indicators: Records of your consent choices regarding analytics and performance cookies gathered via our bottom banner interface.

3. Legal Bases for Processing Under GDPR

We only process your personal data when supported by a valid legal basis set forth under Article 6 of the General Data Protection Regulation (GDPR):

  • Legitimate Interests (Art. 6(1)(f) GDPR): To maintain technical stability, protect our infrastructure against cyber attacks, prevent fraud, and optimize the delivery of outdoor editorial content.
  • Consent (Art. 6(1)(a) GDPR): For the operation of non-essential performance and analytics cookies, which you may grant or withdraw at any time.
  • Performance of a Contract or Pre-Contractual Steps (Art. 6(1)(b) GDPR): To respond to your direct queries and provide requested support or informational resources.
  • Legal Obligation (Art. 6(1)(c) GDPR): When compliance with European statutory or financial bookkeeping mandates is required.

4. Third-Party Service Processors

We do not sell, rent, or lease personal user data. We engage carefully vetted third-party service providers (processors) who assist us in operating our static infrastructure:

  • Hosting and Content Delivery Networks: Cloud server infrastructure providers located within the European Economic Area (EEA) delivering encrypted web traffic.
  • Email Routing Infrastructure: Secure European mail server relays processing inbound contact inquiries.

All service processors are bound by strict Data Processing Agreements (DPAs) ensuring equivalent technical and organizational safeguards under European standards.

5. International Data Transfers

Our primary servers and operations are hosted within the European Economic Area. In the event that technical data passes through international routes outside the EEA, transfers are governed strictly by the European Commission's standard contractual clauses (SCCs) or verified adequacy decisions.

6. Data Retention Protocols

We retain personal data only for as long as necessary to satisfy the specific purposes for which it was gathered. Inquiries received via our contact form are retained for up to twelve (12) months following the resolution of the matter, after which they are securely deleted. Server access logs are held for thirty (30) days for security diagnostics and subsequently purged.

7. Your Statutory Rights (GDPR & CCPA)

As an individual whose personal data is processed, you enjoy statutory rights under the GDPR and applicable California privacy regulations (where relevant):

  • Right of Access (Art. 15 GDPR): You may request confirmation and a copy of personal information held about you.
  • Right to Rectification (Art. 16 GDPR): You have the right to correct inaccurate or incomplete data.
  • Right to Erasure (Art. 17 GDPR): You may request deletion of personal records where retention is no longer justified.
  • Right to Restriction of Processing (Art. 18 GDPR): You may suspend processing under certain dispute conditions.
  • Right to Data Portability (Art. 20 GDPR): You may obtain structured, machine-readable copies of provided data.
  • Right to Object (Art. 21 GDPR): You can object at any time to processing based on legitimate interests.
  • Right to Withdraw Consent: Where processing rests on consent, you may withdraw it freely at any time without penalty.

To exercise any of these protections, please contact our Data Protection Officer at [email protected]. You also maintain the statutory right to lodge a formal complaint with a European data protection supervisory authority (in Finland, the Office of the Data Protection Ombudsman / Tietosuojavaltuutetun toimisto).

8. Data Security Safeguards

We deploy robust administrative, physical, and technical controls to protect user data against unauthorized destruction, alteration, interception, or unauthorized disclosure. All data transmissions are encrypted using modern Transport Layer Security (TLS/HTTPS).

9. Modifications to this Privacy Policy

We periodically review this policy to reflect regulatory changes or adjustments to our technical environment. Revisions will be published directly on this page with an updated effective date.