GDPR

At Elly Recipes, we are committed to protecting your personal data and respecting your privacy rights under data protection regulations, including the General Data Protection Regulation (GDPR). This section outlines your rights and our responsibilities concerning your personal data.

1. Your Data Protection Rights

As a user, you have the following rights regarding your personal data:

  • The Right to Access: You have the right to request copies of your personal data held by us. We will respond to your request within one month and provide you with the requested information, free of charge, unless your request is excessive.
  • The Right to Rectification: If you believe that any information we hold about you is inaccurate or incomplete, you have the right to request that we correct it. We will take reasonable steps to verify your identity before making any changes.
  • The Right to Erasure: Also known as the “right to be forgotten,” you can request the deletion of your personal data under certain conditions, such as when it is no longer necessary for the purposes for which it was collected.
  • The Right to Restrict Processing: You have the right to request that we limit the processing of your personal data if you contest the accuracy of the data, if processing is unlawful, or if we no longer need the data but you require it for legal claims.
  • The Right to Data Portability: You have the right to request the transfer of your personal data to another organization or directly to you, where technically feasible, in a structured, commonly used, and machine-readable format.
  • The Right to Withdraw Consent: If we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

2. Exercising Your Rights

To exercise any of these rights, please contact us at [[email protected]]. We will respond to your request without undue delay and aim to do so within one month. If necessary, this period may be extended by two further months, but we will inform you of any such extension.

3. Data Protection Authority

If you believe that we have not complied with your data protection rights, you have the right to lodge a complaint with a supervisory authority or data protection authority in your jurisdiction.

4. Legal Basis for Processing Personal Data

We process your personal data on the following legal bases:

  • Consent: When you have given us your explicit consent to process your personal data for a specific purpose.
  • Contractual Necessity: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
  • Legal Obligation: When we need to comply with a legal obligation.
  • Legitimate Interests: When processing is necessary for our legitimate interests or the legitimate interests of a third party, provided that your interests and fundamental rights do not override those interests.

5. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this policy. We may retain your personal data for a longer period if the law requires us to do so. When your data is no longer necessary, we will securely delete or anonymize it.

6. Data Security

We take data security seriously and implement appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or destruction. However, no method of transmission over the Internet or method of electronic storage is 100% secure, so we cannot guarantee its absolute security.

7. Contact Information

For any questions or concerns regarding your personal data or this GDPR compliance section, please contact us at:

Email: [[email protected]]