GDPR Privacy Policy

Effective Date: May 17, 2025

This GDPR Privacy Notice supplements the GrandmomsRecipe.com Privacy Policy and applies to visitors located in the European Union (EU) and European Economic Area (EEA). It outlines your rights under the General Data Protection Regulation (GDPR) and how we protect and process your personal data.

1. Data Controller

GrandmomsRecipe.com
Email: [email protected]

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

  • Identification Data: Name, email address, and any data voluntarily provided (e.g., via contact or newsletter forms)
  • Technical Data: IP address, browser type, device data, access times, and referring URLs
  • Usage Data: Pages visited, time spent on pages, interactions with content

3. Purpose and Legal Basis of Processing

We process your data for the following reasons:

PurposeLegal Basis
Responding to inquiriesLegitimate interest (Article 6(1)(f))
Sending newsletters (if opted-in)Consent (Article 6(1)(a))
Analyzing website performance (e.g. Google Analytics)Legitimate interest
Operating and improving the websiteLegitimate interest
Legal complianceLegal obligation (Article 6(1)(c))

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to meet any legal, accounting, or reporting requirements.

Examples:

  • Newsletter data: until you unsubscribe
  • Contact inquiries: up to 12 months
  • Analytics data: anonymized after 26 months

5. Third-Party Transfers & International Data Flow

Some of our service providers (like email and analytics tools) may process data outside the EU/EEA. In such cases, we ensure that data is protected by:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the EU Commission
  • Other GDPR-compliant safeguards

6. Your Rights Under the GDPR

You have the right to:

  • Access the personal data we hold about you
  • Rectify inaccurate or outdated data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to the processing of your data
  • Withdraw consent at any time (for newsletter, cookies, etc.)
  • Data portability – request your data in a portable format

To exercise any of these rights, email: [email protected]

7. No Automated Decision-Making

We do not use your data for automated decision-making or profiling that produces legal effects or similarly significant consequences.

8. Complaints

If you believe your data protection rights have been violated, you may lodge a complaint with your local supervisory authority in the EU or contact us directly.

9. Updates to This GDPR Notice

We may update this notice from time to time. Changes will be posted on this page with the revised effective date.

10. Contact

For all questions related to this GDPR Notice or your data rights, contact:
📧 [email protected]