GDPR Compliance Policy

At greatrecipetable we are committed to protecting the privacy and personal data of our users in accordance with the European Union General Data Protection Regulation (GDPR) and related data‑protection laws. This policy explains what personal data we collect, how we process it, the legal bases for processing, and the rights you have as a data subject. It is effective as of Last Updated: April 03, 2026.

1. Personal Data We Collect

Email addresses – collected when you sign up for newsletters, create an account, or request recipe downloads.
Cookies – we use first‑party cookies to remember your preferences and session state, and third‑party cookies for analytics and advertising.
Analytics data – including IP addresses, device identifiers, and browsing behaviour, processed via Google Analytics and Matomo to improve site performance and user experience.

2. How We Protect Your Data

Secure Transmission – All data exchanged between your browser and our servers is encrypted using TLS 1.3 (HTTPS). Secure Storage – Personal data is stored on industry‑standard, ISO/IEC 27001‑certified servers with strict access controls, regular penetration testing, and automated backups. Limited Retention – We retain personal data only as long as necessary for the purposes stated in this policy or required by law. Email addresses are deleted after 12 months of inactivity unless the user opts in for future communications. Cookie data is cleared after 30 days unless the user chooses to keep it. Analytics data is anonymised and retained for 6 months to analyse trends.

3. Legal Basis for Processing

We process personal data on the following lawful bases:

Consent – when you opt in to newsletters, account creation, or targeted advertising.
Legitimate Interest – to improve our website, provide a personalised user experience, and analyse traffic patterns.

4. Your GDPR Rights

Under the GDPR, you have the following rights concerning your personal data. For each right, an icon is provided for quick reference. If you wish to exercise any of these rights, please contact us at [email protected]. We will respond within 30 calendar days, as required by law.

Right to Access

You may request a copy of all personal data we hold about you, including the categories of data, the purposes of processing, and the recipients. We will provide this information in a concise, intelligible, and structured format, typically via email or a secure portal.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request that we correct or complete it. We will verify the request and update the data promptly, ensuring consistency across all systems.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data, subject to certain legal exceptions (e.g., contractual obligations, compliance with legal duties). Upon receipt of a valid request, we will remove the data from all active databases and request deletion from third‑party processors, where possible.

Right to Restrict Processing

If you challenge the accuracy of your data or request that we limit its use, we will suspend processing and store the data only for compliance purposes. This restriction applies until the issue is resolved or the legal basis is no longer applicable.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format (e.g., CSV or JSON). We will provide the data without undue delay and in a format that facilitates its transfer to another data controller, provided the request is clear and specific.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Upon objection, we will cease processing for those purposes and will not use your data for marketing unless we can demonstrate compelling legitimate grounds that override your interests.

Right to Withdraw Consent

If you have provided consent for any processing activity, you can withdraw it at any time. Withdrawal does not affect the legality of any processing carried out before the withdrawal. To withdraw, simply click the “unsubscribe” link in any email or contact us via the email address above.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to:

greatrecipetable

Data Protection Officer

Email: [email protected]

In your request, please include:

Your full name and contact details.
A clear description of the right you are exercising.
Any supporting evidence or identification required to verify your identity.

We will process your request within 30 calendar days. If we require additional information to fulfil your request, we may extend the response time by up to 30 days, provided we inform you of the extension and the reasons for it. We will also provide you with a concise summary of the actions taken or the decision reached.

6. Contact Us

For any questions about this policy, our data protection practices, or if you wish to lodge a complaint with a supervisory authority, please contact:

[email protected] – Email

7. Policy Updates

We may update this policy from time to time. Any changes will be posted on this page with an updated “Last Updated” date. We encourage you to review the policy regularly to stay informed about how we handle your personal data.