Privacy Policy

At Dispatch Tonic Trail (operated by Dispatch Tonic Trail Media Europe Ltd., hereinafter referred to as "we", "us", or "our"), we place the highest priority on safeguarding the personal data and digital privacy of our readers and contributors. This comprehensive Privacy Policy outlines the types of information we collect, the legal bases on which we process it under the European Union General Data Protection Regulation (GDPR) and the UK GDPR, how we store and protect your data, and your explicit rights under applicable data protection laws.

1. Data Controller and Contact Information

The data controller responsible for personal data processed through dispatchtonictrail.monster is:

Dispatch Tonic Trail Media Europe Ltd.
Company Registration Number: FI-3928419-8
Registered Office: Pohjoisesplanadi 33, 00100 Helsinki, Finland
Designated Data Protection Officer (DPO): [email protected]
General Editorial Desk: [email protected]

2. Categories of Information We Collect

Depending on how you interact with our editorial platform, we may collect and process the following categories of data:

• Technical and Device Data: Anonymized Internet Protocol (IP) address, browser type and version, operating system, time zone settings, referral URL, and technical diagnostic telemetry.
• Usage and Interaction Data: Pages viewed, dwell time on winter city guides, interaction with the interactive itinerary planner, map pin hover actions, and seasonal filter selections.
• Direct Communications: Name, email address, inquiry topic, and message content submitted voluntarily through our editorial contact forms.
• Cookie and Preference Identifiers: Consent records stored via browser local storage to maintain your cookie preferences across sessions.

3. Legal Bases for Data Processing

Under Article 6 of the GDPR, we process personal data exclusively under the following lawful conditions:

• Consent (Art. 6(1)(a)): Where you have granted explicit consent for optional analytics cookies or newsletter communications.
• Legitimate Interests (Art. 6(1)(f)): To maintain website security, prevent fraudulent automated submissions, debug performance bottlenecks, and analyze aggregated readership behavior to improve our winter editorial coverage.
• Legal Obligation (Art. 6(1)(c)): To satisfy statutory accounting, tax, or regulatory compliance mandates established by Finnish and European authorities.

4. Data Retention and Security Protocols

We retain personal data only for the period strictly necessary to fulfill the purposes for which it was gathered. Server access logs are automatically overwritten or purged after 90 days. Editorial inquiries submitted via contact forms are archived for up to 24 months to maintain correspondence context before deletion.

All data transmissions are encrypted using industry-standard TLS 1.3 protocols. Access to editorial backends and databases is strictly restricted through role-based access control and multi-factor authentication.

5. Third-Party Processors and International Transfers

We do not sell, rent, or trade reader personal information to commercial third parties. We may engage vetted European cloud infrastructure providers and privacy-focused telemetry platforms that act strictly under Data Processing Agreements (DPAs). Any data transferred outside the European Economic Area (EEA) is governed by European Commission Standard Contractual Clauses (SCCs).

6. Your Statutory Rights Under GDPR

As a data subject within the EEA and UK, you possess the following enforceable rights:

• Right of Access (Art. 15): Obtain confirmation regarding whether your personal data is processed and receive a copy of that data.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal records.
• Right to Erasure / "Right to be Forgotten" (Art. 17): Request deletion of your personal data when it is no longer required for legitimate processing.
• Right to Restriction of Processing (Art. 18): Restrict processing under specified legal conditions.
• Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): Object at any time to processing grounded in legitimate interests.

To exercise any of these statutory rights, please contact our Data Protection Officer at [email protected]. You also maintain the right to lodge a formal complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) or your local supervisory authority.