1. Scope and controller information
This policy describes the supplied static version of Rankrcketclipcottag at rankrcketclipcottag.com. The displayed entity, Rankrcketclipcottag Interiors S.L., company number RKC-2026-001, and Calle del Patio 18, 46003 Valencia, Spain, are illustrative business details, not verified registration or occupancy claims. A live operator must replace these details and confirm its hosting and email arrangements before accepting real inquiries. No appointed data protection officer is represented by this demonstration.
The designated privacy and DPO-inquiry contact is [email protected]. This domain-matched address is supplied for the operator to provision; mailbox availability is not verified. The contact page also explains the limitations of the static form.
2. Information collected
You can read every guide without creating an account. The page scripts do not collect payment information, location, advertising identifiers or browsing histories. The contact form processes your name, email address, topic and message locally to prepare an email draft. Preparing the draft does not transmit it to this website, and the form does not save its contents to localStorage.
If you open the draft and send it using your email application, your email provider and the recipient’s mail service process that communication. A deployed web host may also receive ordinary request information, such as IP address, requested URL, browser details and request time. Actual hosting logs depend on the operator’s deployment and are not inspectable from this static build. Homepage photographs are delivered by an external image service, which also receives the technical information needed to handle image requests, as explained below.
3. Purposes and legal bases
Essential preference storage remembers your cookie choices. If correspondence is received by a live operator, it should be used to answer the inquiry, address corrections and maintain necessary records. Under the GDPR, an operator may rely on legitimate interests for proportionate site security and ordinary correspondence, contractual necessity for requested pre-contractual steps where relevant, and legal obligation for required records. Optional tracking would require an appropriate legal basis, including consent where required. This build does not perform automated decision-making or profiling.
4. Cookies and external services
The site uses localStorage for its consent record rather than setting an HTTP cookie. No analytics scripts, advertising pixels, remote fonts or embedded maps are included. See the cookie policy for the storage name, lifespan and controls.
Homepage photographs load directly from images.unsplash.com. When your browser requests an image, Unsplash and its delivery infrastructure receive your IP address and ordinary request information, such as browser details, the requested image URL and request time. These image elements use a no-referrer policy so supporting browsers do not send this page’s URL as a referrer. Photographs load independently of the optional analytics and functional preferences; those controls do not block image requests. This site does not attach contact-form details or consent records to image URLs. See the Unsplash privacy policy for the provider’s practices.
A live operator’s hosting and email providers may act as processors under appropriate agreements. No hosting or email provider is named because none has been configured in this build. Before deployment, the operator must review the external image service as well as relevant processors, establish appropriate legal bases, assess access and international transfers, and use required safeguards, such as adequacy decisions or suitable contractual protections. Following an external link subjects your visit to that destination’s own practices.
5. Retention and security
The consent record expires after 180 days and is replaced when you make a new choice. You can remove it earlier through browser site-data settings. Draft form text lasts only within the current page and any email draft you choose to create. Browser autofill or session restoration may independently preserve entries under your browser’s settings.
For an operational mailbox, the recommended retention rule is to delete routine inquiries within 12 months after resolution unless a documented legal or dispute-related reason requires longer. Hosting-log retention must be established by the live operator and is not claimed here. Retention of external image-request records is governed by the image provider’s practices, not by the site’s 180-day consent-record expiry. Access controls, secure transport and limited account permissions should protect deployed services; no system can guarantee absolute security.
6. Your rights and complaints
Where applicable, GDPR rights include access, correction, erasure, restriction, objection, portability and withdrawal of consent. Withdrawal does not invalidate earlier lawful processing. You may complain to a competent supervisory authority, including Spain’s Agencia Española de Protección de Datos. GDPR requests are normally addressed within one month, subject to lawful extensions and exceptions.
Where the CCPA applies, California residents may have rights to know, access, correct and delete personal information, opt out of sale or sharing, limit certain uses of sensitive information, and receive nondiscriminatory treatment. This build does not sell or share personal information for cross-context behavioral advertising. Authorized-agent requests may require proportionate verification. Applicable CCPA requests are generally answered within 45 days, subject to permitted extensions.
Do not include identity documents or sensitive household information in an initial request. Any live operator should request only what is reasonably necessary to verify identity. Material changes to processing require an updated policy and, where necessary, a fresh consent request.