Privacy Policy
Last Updated: January 15, 2026. Official privacy notice governing data collection, processing standards, and statutory user rights under Regulation (EU) 2016/679 (GDPR).
1. Data Controller Identification
This website is operated by Listcrate Sports Media Ltd (referred to herein as "we", "us", or "our"), an independent publishing entity incorporated under company registration number HE-491024-GR, with its registered office located at 42 Akti Miaouli, 185 36 Piraeus, Attica, Greece.
For questions regarding this policy or the handling of personal data, contact our designated Data Protection Officer (DPO) at [email protected].
2. Categories of Information Collected
We collect limited categories of information necessary to deliver travel editorial content and respond to user communications:
- Directly Provided Information: When you submit an inquiry through our contact form, we collect your full name, email address, topic selection, and the content of your message.
- Technical and Telemetry Data: When navigating the website, our servers automatically log internet protocol (IP) addresses, browser application types, language preferences, operating system versions, referral URLs, and access timestamps.
- Local Storage Decisions: Choices recorded through our cookie consent interface are stored locally within your browser client to respect preference choices.
3. Legal Bases for Data Processing
Under Article 6 of the General Data Protection Regulation (GDPR), we process your personal data under the following legal frameworks:
- Consent (Art. 6(1)(a)): Explicit consent given when choosing non-essential cookies or analytics tracking through our banner controls.
- Contractual Performance (Art. 6(1)(b)): Responding to inquiries or requests initiated directly by you via our contact mechanisms.
- Legitimate Interests (Art. 6(1)(f)): Maintaining server network security, preventing fraudulent activity, and analyzing aggregate readership trends to maintain infrastructure integrity.
- Legal Compliance (Art. 6(1)(c)): Fulfilling statutory record-keeping requirements under Greek and European Union law.
4. Third-Party Processors & Data Transfers
We do not sell, rent, or trade your personal information to commercial brokers. Data may be processed by vetted third-party service providers performing essential hosting, content delivery, and technical operations within the European Economic Area (EEA) or under recognized adequacy mechanisms, such as Standard Contractual Clauses (SCCs):
- Hosting infrastructure providers and cloud storage operators.
- Transactional email dispatch systems for inbound contact inquiries.
- Security providers ensuring network firewall filtering and anti-abuse protections.
5. Data Retention Schedules
Personal data is retained only for the duration necessary to satisfy the purpose for which it was gathered. Contact inquiries and email correspondence are kept for twenty-four (24) months to manage editorial dialogues, after which records are purged. Automated server logs are retained for ninety (90) days before automated rotation, unless flagged for security review.
6. Statutory Rights of Data Subjects
Under the GDPR and comparable privacy frameworks including the California Consumer Privacy Act (CCPA), you maintain specific statutory rights regarding your personal information:
- Right of Access: You may request copies of the personal data we maintain about you.
- Right to Rectification: You may request the correction of inaccurate or incomplete information.
- Right to Erasure ("Right to be Forgotten"): You may request the deletion of your personal records where statutory grounds are met.
- Right to Restriction of Processing: You may request that we temporarily suspend active processing of your data while a dispute is assessed.
- Right to Data Portability: You may request your data in a structured, machine-readable format.
- Right to Object: You may object to data processing conducted on the basis of legitimate interest.
To exercise any of these protections, submit a formal request via email to [email protected]. We will respond within thirty (30) days. You also maintain the right to submit a complaint to the Hellenic Data Protection Authority (HDPA, www.dpa.gr).