Contents
1. Data Controller
The Bay Tribune, operated by Tribune Publications, is the data controller for personal data processed through this website (baytribune.com). For privacy matters, contact us at [email protected].
2. Lawful Basis for Processing
We process personal data only where we have a lawful basis to do so under GDPR Article 6:
- Legitimate Interests (Art. 6(1)(f)): We process server log data (IP address, browser type, pages visited) for security monitoring and site performance. These are limited, necessary, and balanced against your interests.
- Consent (Art. 6(1)(a)): If you contact us via our contact form, you provide personal data voluntarily. You may withdraw consent at any time by contacting us.
3. Data We Process
- Contact form data: Name, email address, and message content, when you choose to contact us. Used only to respond to your inquiry.
- Server logs: IP address, browser type, referring URL, and pages visited. Retained for 30 days for security purposes.
- Google Fonts: When you visit our site, your browser requests fonts from fonts.googleapis.com. This may involve Google logging your IP address. See Google's Privacy Policy.
We do not process special category data (health, political opinion, religious belief, biometric, etc.) as defined under GDPR Article 9.
4. Data Retention
Contact form data is retained only as long as needed to respond to your inquiry, after which it is deleted. Server logs are retained for a maximum of 30 days. We do not maintain long-term databases of visitor data.
5. Your GDPR Rights
Under GDPR, you have the following rights:
- Right of Access (Art. 15): Request a copy of the personal data we hold about you.
- Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
- Right to Erasure (Art. 17): Request deletion of your personal data where no lawful basis exists for continued processing.
- Right to Restrict Processing (Art. 18): Request that we restrict how we process your data in certain circumstances.
- Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.
- Right to Object (Art. 21): Object to processing based on legitimate interests.
To exercise any of these rights, email [email protected]. We will respond within 30 days.
6. International Transfers
This website is operated from the United States. If you access our site from the European Economic Area, your data may be transferred to and processed in the US. Where such transfers occur, we rely on Standard Contractual Clauses or other appropriate safeguards as required by GDPR Chapter V. Contact us for details.
7. Cookies
We use only a single functional cookie to remember your cookie preference. We do not use tracking, advertising, or analytics cookies. No third-party advertising technologies are employed on this site.
8. Complaints
If you believe we have processed your data unlawfully, you have the right to lodge a complaint with your local supervisory authority. In the EU, you may contact the Data Protection Authority in your member state.
9. Contact
GDPR enquiries: [email protected]
See also our general Privacy Policy.