GDPR / EU Privacy Notice
Effective date: September 1, 2025
1. Scope & Controller
This GDPR notice applies if you are located in the European Union (EU), European Economic Area (EEA), or the UK.
Controller: EasyRecipesDinner — https://easyrecipesdinner.com — Email: contact@easyrecipesdinner.com.
If we are established outside the EU and offer services to people in the EU, we will appoint an EU/UK representative when required by law (contact details will be shown here).
2. What personal data we collect
We collect the data you give us (name, email, comments, recipe submissions), technical/usage data (IP address, device/browser, analytics), cookies, and any data from third parties you use to sign in or interact with the Site (e.g., social login).
3. Purposes & lawful bases
We process personal data for purposes including: providing the Site and features, account management, sending newsletters (consent or contractual basis), personalization and analytics (legitimate interests), fraud prevention, and compliance with legal obligations. Where we rely on consent, you can withdraw consent at any time. These purposes are documented and mapped to lawful bases (consent, performance of contract, legal obligation, legitimate interests). European Commission
4. Information you must be told when we collect personal data
When collecting personal data from you we provide (at time of collection) the controller identity and contact details, contact details of any DPO (if applicable), purposes and lawful basis, recipients of the data, retention periods, details of transfers outside the EEA and safeguards, and your rights as a data subject. This follows the requirements of Article 13 GDPR. gdpr-info.eu
5. Your GDPR rights
You have rights to:
- Access the personal data we hold about you (subject access request).
- Rectify inaccurate data.
- Erase (right to be forgotten) where legal grounds apply.
- Restrict processing.
- Port your data to another controller.
- Object to processing, including for direct marketing.
- Withdraw consent (where processing is consent-based).
To exercise rights send a signed request to contact@easyrecipesdinner.com (see DSAR template below). We will verify requests to prevent fraud and respond as required by GDPR.
6. Data Subject Access Request (DSAR) — quick email template
Subject: DSAR — [Your full name]
Body: I am making a request under the GDPR. Please provide a copy of all personal data you hold about me (or specify other right requested: rectification / erasure / portability / restriction / objection). My email: [email]; Registered account (if any): [username]; Date of request: [date].
Attach ID only if requested for verification.
7. Processors & Data Processing Agreements
When third parties (hosting, email, analytics, ad platforms) process data on our behalf, we use contracts (Data Processing Agreements) which require processors to process only on our instructions, implement security measures, and sub-process only with our written consent — as required by Article 28 GDPR. gdpr-info.eu
8. Records of processing activities (RoPA)
We maintain internal records of processing activities describing categories of personal data, purposes, recipients, transfers, retention periods and security measures as required by Article 30 GDPR. These records are available to supervisory authorities on request. gdpr-info.eu
9. Security & data breach notification
We use appropriate technical and organisational measures to protect personal data. In case of a personal data breach, where the breach is likely to result in a risk to individuals’ rights and freedoms we will notify the competent supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware, and notify affected individuals when required. ICO
10. International transfers
If personal data is transferred outside the EEA/UK, we rely on adequacy decisions, Standard Contractual Clauses (SCCs), or other appropriate safeguards. Details about which providers involve transfers and the safeguards used are available on request.
11. Cookies, tracking & marketing
We provide transparent information about cookies and tracking, and where required obtain consent for non-essential cookies (analytics/advertising). You may withdraw consent at any time via the cookie settings on the Site.
12. Children
We do not knowingly collect personal data from children under 13. If we need to process children’s data for specific services, we will obtain parental consent where required by law.
13. Data Protection Officer (DPO)
If we are required to appoint a DPO we will publish contact details here. In many small website contexts a DPO is not mandatory, but we maintain clear points of contact for data-protection queries (contact@easyrecipesdinner.com).
14. Supervisory authority & complaints
If you believe we have not complied with GDPR you may lodge a complaint with your local supervisory authority (e.g., a national data protection authority in your EU/EEA country).