Privacy Policy & Data Protection Framework

Effective Date: January 1, 2026. This Privacy Policy details the exact principles governing the collection, processing, safeguarding, and disposition of personal and telemetry information collected on Listcapsuleroms.pics.

1. Data Controller Identification

The controller legally responsible for personal data processing activities conducted via this website is Capsule ROMs European AI Research Ltd (Company Registration Number: 14982012), having its principal corporate address at 44 Rue du Faubourg Saint-Honoré, 75008 Paris, France. For inquiries relating to this policy or to exercise rights under applicable data protection legislation, contact our Data Protection Officer at [email protected].

2. Scope and Nature of Collected Data

We process information only where strictly necessary to provide research publications, preserve web infrastructure stability, and respond to direct communication requests. Data collected fall into two primary categories:

• Voluntarily Submitted Information: When you complete our contact or inquiry forms, we collect your full legal name, business email address, organization identity, and the contextual contents of your communication.
• Infrastructure & Server Logs: Standard web server requests automatically record user IP addresses (anonymized prior to persistent analytical storage), browser user-agent identifiers, operating system metrics, HTTP request headers, and timestamped referrer URLs.

3. Legal Grounds for Data Processing (GDPR Article 6)

Processing operations are carried out under specific legal bases recognized by European law:

• Legitimate Interest (Art. 6(1)(f)): Processing web telemetry to detect malicious automated scraping, prevent DDoS attacks, and optimize multi-region server routing.
• Contractual Performance & Pre-Contract Inquiries (Art. 6(1)(b)): Responding to technical assessment inquiries submitted through our web forms.
• Informed Consent (Art. 6(1)(a)): Application of non-essential analytics and performance preferences as articulated in our Cookie Policy.

4. Third-Party Infrastructure Processors

We do not broker, rent, or sell user records to advertisers or third-party brokers. Data processing is restricted to validated enterprise subprocessors operating under strict Data Processing Agreements (DPAs) compliant with standard contractual clauses:

• European Cloud Hosting Providers: Bare-metal and container infrastructure hosting our static files within European Union borders (Frankfurt and Paris regions).
• Encrypted Mail Infrastructure: Transactional mail routing handling contact requests using TLS 1.3 encryption protocols.

5. Data Subject Rights Under GDPR and CCPA

Regardless of residency, users retain fundamental statutory protections over their personal data records:

• Right of Access and Portability: You may request a machine-readable export of all records associated with your email identifier.
• Right to Rectification and Erasure: You possess the absolute right to have incorrect details amended or entirely expunged from our operational databases ("Right to be Forgotten").
• Right to Object or Restrict Processing: You may challenge processing based on legitimate interests at any time.
• Right to Lodge Complaints: European residents may submit complaints to their local data protection authority (e.g., CNIL in France or the ICO in the UK).

6. Data Retention Schedules

General server logs are retained for a rolling window not exceeding 30 calendar days, after which raw IP details are scrubbed or permanently aggregated. Direct contact form correspondences are preserved for a period of up to 24 months to satisfy audit trails, unless a formal deletion request is verified prior to that threshold.