GDPR Compliance Policy

Last Updated: April 03, 2026

This GDPR Compliance Policy explains how dinnerhomerecipes (the “Site”) collects, processes, protects, and shares your personal data in accordance with the General Data Protection Regulation (EU) 2016/679. By using the Site, you acknowledge that you have read and understood this policy.

What Personal Data We Collect

• Email Addresses – collected when you subscribe to our newsletter, register for an account, or request recipe downloads.
• Cookies & Similar Technologies – used for session management, analytics, and personalized content.
• Analytics Data – anonymous metrics such as page views, device type, and geographic location gathered via Google Analytics (anonymized IP) and similar tools.

How We Protect Your Data

• Transport Layer Security (TLS) – all data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure Server Infrastructure – our servers are hosted in EU‑compliant data centres with redundant power, fire suppression, and physical access controls.
• Encryption at Rest – personal data stored in our databases is encrypted using AES‑256.
• Access Controls – only authorized staff members with a legitimate need can view personal data, and all access is logged.
• Retention Limits – email addresses are retained for up to 12 months after the last interaction; cookies are deleted after 2 years; analytics data is kept for 3 years.

Legal Basis for Processing

We process personal data based on the following lawful bases:

• Consent – you explicitly consent when you sign up for newsletters, download recipes, or opt‑in to marketing communications.
• Legitimate Interest – we use analytics to improve website usability and content relevance, and we process cookies for session management, which is considered a legitimate interest under Article 6(1)(f) of the GDPR.

Your GDPR Rights

Under the GDPR, you have the following rights. To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days, as required by law.

Right to Access

You may request a copy of all personal data we hold about you, including the purposes of processing and the categories of data processed. We will provide a summary in a readable format.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct it. We will update the data promptly and inform any third parties we have shared it with, if applicable.

Right to Erasure

You can request the deletion of your personal data, provided there is no legal obligation to retain it. For example, if you unsubscribe from our newsletter, we will remove your email address from our mailing list.

Right to Restrict Processing

Under certain circumstances, you may request that we limit the use of your data—for instance, if you contest its accuracy or the processing is unlawful. We will store the data but will not use it for further processing except for the purposes of complying with a legal obligation.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, machine‑readable format. For example, we can provide your email address and any associated preferences in a CSV or JSON file.

Right to Object

You may object to the processing of your data for direct marketing purposes. Upon receiving your objection, we will stop using your data for marketing and will not process it further for that purpose.

Right to Withdraw Consent

If you have given us consent to process your data (e.g., for newsletters), you can withdraw that consent at any time. We will immediately cease processing your data for the purposes you have withdrawn consent for and will delete any residual data if no other legal basis exists.

How to Exercise Your Rights

1. Send an email to [email protected] with a clear statement of the right you wish to exercise.
2. Include any identifying details that help us locate your data, such as your email address or the username you use on the Site.
3. We will verify your identity if necessary and respond within 30 days, providing the requested information or confirming the action taken.

Response Time

In accordance with Article 12(3) of the GDPR, we will respond to your request within 30 days of receipt. If your request is complex or we need additional information, we may extend this period by an additional 30 days, but we will inform you of any such extension.

Changes to This Policy

We may update this policy from time to time. When we make significant changes, we will notify you via email or a prominent notice on the Site. The date of the last update will be indicated at the top of this page.

Contact Us

If you have any questions about this policy, the processing of your personal data, or wish to exercise your GDPR rights, please contact us at [email protected]. We are committed to protecting your privacy and ensuring compliance with all applicable data protection laws.