GDPR
How we meet the EU and UK General Data Protection Regulation, and how to exercise your rights.
01Controller
The controller for personal data processed through letsworldrecord.com is the Let's World Record project team (@letsworldrecord). Contact: hello@letsworldrecord.com.
We don't collect personal data through forms, accounts, analytics or advertising. The only personal data involved is the technical data needed to deliver the website, described below.
02Processing at a glance
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Delivering the website and protecting it from attacks (Cloudflare) | IP address, approximate location, browser info, requested URL, time, security cookies if triggered | Art. 6(1)(f) — legitimate interests; strictly necessary cookies exempt from consent | Short-lived operational logs at Cloudflare; cookies 30 min to session (see cookie table) |
| Answering your messages | Your email address and what you write | Art. 6(1)(f) — legitimate interests; Art. 6(1)(c) where a legal request is involved | Until resolved, then deleted |
We do not sell personal data, and we do not use automated decision-making or profiling (Art. 22 GDPR). Providing data is not a contractual or legal requirement — the website simply cannot be delivered to your device without the technical data above.
03Processors & recipients
- Cloudflare, Inc. (USA) — hosting, deployment, content delivery and security, as our processor under its Data Processing Addendum.
- Meta Platforms Ireland Limited — only once you choose to visit Instagram; Meta is an independent controller for your activity there.
04International transfers
Cloudflare operates a global network, so data may be processed outside the EEA and UK, including in the United States. These transfers rely on the EU–U.S. Data Privacy Framework (and its UK Extension), under which Cloudflare is certified, and on the European Commission's Standard Contractual Clauses as an additional safeguard.
05Your rights
If you are in the EEA, the UK or Switzerland, you have the right to:
- Access the personal data we hold about you (Art. 15);
- Rectification of inaccurate data (Art. 16);
- Erasure — the "right to be forgotten" (Art. 17);
- Restriction of processing (Art. 18);
- Data portability (Art. 20);
- Object to processing based on legitimate interests (Art. 21) — we will stop unless we have compelling legitimate grounds, such as protecting the site from an ongoing attack;
- Withdraw consent at any time, where processing is based on consent (currently none).
Because the website does not identify visitors, we usually hold no data that we can link to you. Logs held by Cloudflare are not searchable by name, so for an access request we may need details such as your IP address and the time of your visit.
06How to exercise them
Email hello@letsworldrecord.com with "GDPR request" in the subject line. We will reply within one month (extendable by two months for complex requests, in which case we'll tell you). Exercising your rights is free. We may ask for information to confirm your identity.
For data about your Instagram activity, use Instagram's Accounts Center or contact Meta directly.
07Right to complain
You can lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work, or where you believe an infringement took place. A list of EU authorities is published by the European Data Protection Board; in the UK, contact the ICO. We'd appreciate the chance to address your concern first.