GDPR Compliance Policy for CookingBitesHub

Data We Collect

• Email addresses: Collected when users subscribe to newsletters, create an account, or request recipe downloads.
• Cookies: We use first‑party cookies to enhance user experience, remember preferences, and track engagement for analytics purposes.
• Analytics data: Anonymous metrics (e.g., page views, time on page, referral sources) gathered via Google Analytics and Matomo to improve content and functionality.

Legal Basis for Processing

We process personal data on the following lawful bases:

• Consent: When you voluntarily provide your email address or opt‑in to marketing communications, we rely on your explicit consent.
• Legitimate Interest: We process analytics data to improve the Site’s performance and user experience. The interest is balanced against your privacy rights and mitigated through anonymisation and strict access controls.

How We Protect Your Data

• All data transmissions are encrypted with TLS 1.3 (HTTPS) to prevent interception.
• Data is stored on secure, GDPR‑compliant servers located in the European Economic Area.
• Access to personal data is restricted to authorized personnel only, and all staff undergo regular data‑protection training.
• We retain personal data only for as long as necessary to fulfil the purposes identified in this policy, after which it is securely deleted or anonymised.

Your Rights Under GDPR

Right to Access

You have the right to obtain confirmation that we are processing your personal data and, if so, to receive a copy of that data. This includes the categories of data processed, the purposes of processing, and the recipients of the data.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it without delay.

Right to Erasure

Also known as the “right to be forgotten,” you can request the deletion of your personal data, provided no legal obligation requires us to retain it.

Right to Restrict Processing

Under certain circumstances, you may ask us to limit the processing of your data (e.g., if you contest its accuracy or we no longer need it but you require it for legal claims).

Right to Data Portability

You can receive your personal data in a structured, commonly used format and transfer it to another controller if requested.

Right to Object

At any time, you may object to the processing of your data for direct marketing or profiling purposes. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time, and such withdrawal will not affect the lawfulness of any processing carried out before withdrawal.

How to Exercise Your Rights

To exercise any of the rights above, please contact us at [email protected]. Provide a brief description of your request and any identifying information (e.g., email address, username) so we can locate your data efficiently.

We will respond to your request within 30 days of receipt, in accordance with Article 12 of the GDPR. If we need more time to verify your identity or to investigate complex requests, we will inform you and provide a reasonable extension.

Retention of Personal Data

Personal data is retained only as long as necessary to achieve the purposes outlined in this policy. Typical retention periods are:

• Email addresses: up to 2 years after the last interaction unless you request deletion earlier.
• Cookies: session cookies are deleted upon closing the browser; persistent cookies are retained for 30 days.
• Analytics data: anonymised metrics are stored for 12 months to analyse trends and improve the Site.

Contact Us

If you have any questions about this policy, your privacy rights, or if you believe your data is being processed unlawfully, please reach out to our Data Protection Officer:

Email: [email protected]

We are committed to addressing your concerns promptly and transparently.