Privacy Policy

Version 3.4 • Effective Date: January 1, 2026 • Compliant with GDPR (EU 2016/679) & CCPA/CPRA

1. Introduction & Data Controller

Welcome to Viblycompass ("we", "our", or "us"), operated by Viblycompass Media B.V., a corporation established under the laws of the Kingdom of the Netherlands, with company registration number NL-883920194B01 and registered offices situated at Keizersgracht 482-B, 1016 GD Amsterdam, Netherlands.

This comprehensive Privacy Policy outlines the explicit terms, processing mechanisms, and security frameworks governing how personal information is collected, cataloged, retained, and protected when you access or interact with viblycompass.surf, our digital travel guides, walking route engines, and architectural telemetry APIs.

2. Categories of Data Collected

2.1 Personal Data You Voluntarily Supply

When you submit inquiries, subscribe to nocturnal field alerts, request itinerary blueprints, or correspond with our curatorial desk, we collect direct identifiers including your name, email address, country of residence, and explicit message contents.

2.2 Automated Technical & Nocturnal Telemetry Data

During every site visit, our edge servers securely register network telemetry including your IP address (anonymized at subnet level), browser user-agent, operating system, day/night UI preference states stored in client local storage, referrer URLs, and interaction durations across specific city itineraries.

3. Legal Grounds for Processing (GDPR Article 6)

We process personal data strictly under valid lawful bases established by European data protection law:

Consent (Art. 6(1)(a)): Explicit permission granted when choosing optional analytics cookies or subscribing to night-travel newsletters.
Contractual Performance (Art. 6(1)(b)): Fulfilling requests for custom walking guide downloads and interactive route maps.
Legitimate Interests (Art. 6(1)(f)): Maintaining cybersecurity integrity, server load optimization, DDoS mitigation, and continuous user experience improvement without overriding fundamental privacy rights.
Legal Obligation (Art. 6(1)(c)): Compliance with Dutch commercial tax, accounting, and judicial retention mandates.

4. Data Retention & Erasure Frameworks

Personal data is preserved only for the duration strictly necessary to fulfill the purposes for which it was gathered. Communication logs submitted via our contact terminal are retained for a maximum of twenty-four (24) months following issue resolution, after which they undergo cryptographic deletion or irrevocable pseudonymization.

5. Your Statutory Rights (GDPR & CCPA/CPRA)

Under applicable international privacy legislation, you possess extensive statutory entitlements:

Right to Access & Portability: Obtain a digital copy of all personal information held about you in a structured, machine-readable format.
Right to Rectification: Request prompt correction of incomplete or outdated personal data.
Right to Erasure ("Right to be Forgotten"): Demand permanent deletion of your data when retention is no longer legally justified.
Right to Restrict or Object to Processing: Halt or limit specific processing activities, including automated profiling.
Right to Lodge a Complaint: Contact the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your local supervisory authority.

6. Data Protection Officer (DPO) Contact

For inquiries concerning this Privacy Policy or to exercise your statutory data rights, contact our Data Protection Officer directly:

Data Protection Officer
Viblycompass Media B.V.
Keizersgracht 482-B, 1016 GD Amsterdam, Netherlands
Direct Inquiries: [email protected]