Privacy and cookies
Controller
360Crossmedia Sàrl, 4 rue de l'Eau, L-1449 Luxembourg, contact@360crossmedia.com.
Data we collect
| When | What | Why | How long |
| Account | First name, last name, username, email, encrypted password, profile picture; if you add them: address, phone, date of birth | Running your account (contract), pre-filling orders | Until the account is deleted, at most 3 years without signing in |
| Order | Name, email, delivery address, order details | Performing the contract, accounting obligations | 10 years (accounting) |
| Newsletter | Email, language | Sending the newsletter (consent), welcome code | Until you unsubscribe |
| Reviews and suggested places | Content, rating, username or first name, profile picture | Publication, preparing the next edition | Until the account or review is deleted |
| Browsing (with your consent) | Pages viewed, journeys, device, traffic source, anonymised session recordings | Audience measurement, site improvement, advertising | 13 months |
Cookies and trackers
Essential (always on): cart, chosen language, consent, sign-in session. Set by this site, never shared.
Audience measurement (with your consent): Google Analytics 4 (Google Ireland Ltd) and Microsoft Clarity (Microsoft Ireland Operations Ltd). IP address anonymised.
Marketing (with your consent): Meta Pixel (Meta Platforms Ireland Ltd) to measure our campaigns and show you relevant ads.
Third-party content (with your consent): YouTube player (privacy-enhanced mode), OpenFreeMap base map, Google Maps photos.
You can change your choices at any time with the “Manage cookies” link at the bottom of the page. Refusing does not prevent you from using the site.
Processors
Vercel Inc. (website hosting, USA), Railway Corp. (account and review database, USA), Resend Inc. (confirmation codes by email, USA), Shopify International Ltd (payment and orders, Ireland), Printful (production and shipping of merchandise, Latvia and other production sites), and the audience measurement providers listed above. Transfers outside the EU rely on the Data Privacy Framework or the European Commission's standard contractual clauses. We never sell data.
Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, and may withdraw consent at any time. You can delete your account yourself from the Account page, or write to contact@360crossmedia.com. You may lodge a complaint with the Luxembourg data protection authority (cnpd.lu).