Privacy Policy

Last updated: January 1, 2026. Effective immediately.

At Vaultsproutrankltt (operated by Vaultsproutrankltt Media Iberia S.L., "we", "our", or "us"), we are committed to safeguarding your personal data in full compliance with the EU General Data Protection Regulation (GDPR), the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPD-GDD), and international consumer privacy frameworks.

1. Data Controller Identification

The legal data controller responsible for the processing of your personal information collected through vaultsproutrankltt.click is:

• Legal Name: Vaultsproutrankltt Media Iberia S.L.
• Company Registration Number: ES-B76291048
• Registered Address: Av. Siam s/n, 38660 Costa Adeje, Santa Cruz de Tenerife, Spain
• Data Protection Officer (DPO) Contact: [email protected]

2. Categories of Personal Data Collected

We collect and process the following classifications of user information:

• Technical & Telemetry Data: IP addresses, browser fingerprint, operating system, device screen resolution, WebGL canvas capabilities, and referer headers.
• Interactive Contact Submissions: Full name, email address, travel dates, park interest categories, and message contents submitted via our contact forms.
• Analytical & Behavioral Data: Clickstream sequences, time spent analyzing slide metrics, bounce rates, and navigation paths.

3. Legal Basis and Purposes of Processing

We process your data strictly under the following lawful bases permitted under Article 6 of the GDPR:

• Legitimate Interests (Art. 6(1)(f)): Securing our servers, maintaining responsive water simulations, and optimizing park directories.
• Consent (Art. 6(1)(a)): Running non-essential performance telemetry cookies, which you can grant or revoke via the bottom cookie banner.
• Contractual Performance (Art. 6(1)(b)): Responding to user concierge inquiries and travel itinerary queries.

4. Data Retention and Third-Party Subprocessors

Personal inquiry data is retained for a maximum duration of 24 calendar months following resolution of your query. Server access logs are rotated and permanently purged after 90 days. We engage vetted cloud infrastructure providers within the European Economic Area (EEA), ensuring standard contractual clauses (SCCs) are maintained.

5. Your Rights Under European Law (GDPR)

You have the absolute right to:

• Request access to copies of your personal data held by us.
• Rectify inaccurate or incomplete information.
• Request complete erasure ("Right to be Forgotten").
• Restrict or object to processing based on legitimate interests.
• Request data portability in a machine-readable format.
• Lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

6. Contact the Data Protection Officer

For all privacy inquiries, rights enforcement, or deletion requests, please contact our dedicated Data Protection Officer at [email protected].