GDPR

Your Rights Under GDPR

Under GDPR, you have the following rights:

1. Right to Access (Article 15)
   • Request confirmation if your data is being processed
   • Obtain a copy of your personal data
   • Understand how we use your data
2. Right to Rectification (Article 16)
   • Correct inaccurate personal data
   • Complete incomplete personal data
3. Right to Erasure (Article 17)
   • Request deletion of your personal data
   • Withdraw consent for data processing
   • Object to data processing
4. Right to Restrict Processing (Article 18)
   • Limit how we use your personal data
   • Temporarily suspend data processing
5. Right to Data Portability (Article 20)
   • Receive your data in a structured format
   • Transfer your data to another controller
6. Right to Object (Article 21)
   • Object to processing of your personal data
   • Stop direct marketing communications
7. Rights Related to Automated Decision Making (Article 22)
   • Not be subject to automated decision-making
   • Request human intervention in decisions

Legal Basis for Processing

We process personal data under the following legal bases:

1. Consent (Article 6(1)(a))
   • Newsletter subscriptions
   • Cookie usage
   • Marketing communications
2. Contractual Necessity (Article 6(1)(b))
   • Account creation
   • Comment management
   • Recipe ratings and reviews
3. Legal Obligation (Article 6(1)(c))
   • Tax and accounting requirements
   • Legal compliance
4. Legitimate Interests (Article 6(1)(f))
   • Website security
   • Analytics and improvements
   • Spam prevention

Data We Collect

Personal Data Categories

1. Identity Data
   • Name
   • Username
   • Email address
2. Technical Data
   • IP address
   • Browser type
   • Device information
   • Cookies
   • Log data
3. Usage Data
   • Website interaction
   • Content preferences
   • Time spent on pages
4. Communication Data
   • Comments
   • Messages
   • Feedback

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected. Retention periods are determined by:

• Legal requirements
• Contractual obligations
• Business needs
• User preferences

International Transfers

When we transfer data outside the EEA, we ensure adequate protection through:

• EU Standard Contractual Clauses
• Adequacy decisions
• Appropriate safeguards

Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption
• Access controls
• Regular security assessments
• Staff training

Cookie Usage

We use cookies and similar technologies. Our cookie types include:

1. Essential Cookies
   • Required for website functionality
   • Cannot be rejected
2. Analytics Cookies
   • Track website usage
   • Can be disabled
3. Preference Cookies
   • Remember user choices
   • Optional
4. Marketing Cookies
   • Track advertising preferences
   • Optional