1. Data Protection Controller
This technical publishing platform is operated by Mersey Maritime Engineering Documentation Ltd, located at Survey Depot, 14 Albert Dock Quayside, Liverpool, L3 4AQ, United Kingdom. We act as the data controller responsible for personal information processed through medistshswaylo.christmas. Inquiries regarding data processing operations may be directed to our designated data contact via [email protected].
2. Categories of Information Collected
We restrict data collection to information necessary to provide informational services and process submitted research inquiries:
- Voluntary Form Submissions: When you submit a query through our contact interface, we collect your name, email address, topic subject, and the textual body of your communication.
- Server Diagnostic Records: In common with standard internet infrastructure, our web servers record basic transmission metadata, including your IP address, browser user-agent string, referring URL, and access timestamps. These logs are utilised exclusively for network security diagnostics and detecting denial-of-service attempts.
- Local State Storage: We record your selected cookie preferences within your client browser’s local storage to prevent repetitive display of the consent banner.
3. Lawful Grounds for Processing
We process personal data in strict conformity with the lawful bases stipulated under Article 6 of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018:
- Legitimate Interests: Processing server connection logs is justified by our legitimate interest in maintaining resilient server infrastructure and technical cybersecurity.
- Consent: Where you complete and transmit our contact form, we process your submitted contact parameters on the basis of your explicit consent to receive a technical response.
4. Third-Party Data Processors
We do not vend, lease, or commercially trade personal information. Data transmission is limited to technical hosting infrastructure and email dispatch providers operating under strict confidentiality agreements. Where service infrastructure processes data outside the United Kingdom or the European Economic Area, appropriate safeguards, including UK International Data Transfer Agreements or Standard Contractual Clauses, are maintained to ensure an equivalent standard of protection.
5. Data Retention Periods
Contact dispatches and technical research inquiries are maintained within our active correspondence archives for up to twenty-four months following resolution, after which they are permanently purged. Server diagnostic logs are automatically overwritten or erased on a rolling cycle not exceeding ninety days, unless required for ongoing security incident investigations.
6. Statutory Rights of Data Subjects
Under United Kingdom data protection statutes and applicable European provisions, you possess defined legal rights regarding your personal records:
- The right to request access to copies of your personal data held in our systems.
- The right to require rectification of inaccurate, incomplete, or outdated records.
- The right to demand erasure of your personal records ("the right to be forgotten") where retention is no longer legally justified.
- The right to restrict processing or object to processing carried out under legitimate interest grounds.
- The right to lodge a formal complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection affairs (www.ico.org.uk).
7. Cross-Border Privacy Frameworks
Visitors accessing this site from jurisdictions including the European Union or California are afforded protections consistent with the General Data Protection Regulation (EU GDPR) and the California Consumer Privacy Act (CCPA), respectively. We do not sell consumer personal information, nor do we disclose personal information for cross-context behavioral advertising.