At FoodyTasty.com, we respect your privacy and are committed to protecting your personal data. This GDPR Compliance Statement explains your rights under the General Data Protection Regulation (GDPR) and describes the steps we take to ensure full compliance.
This statement is supplemental to our Privacy Policy.
🔐 1. Our Commitment to GDPR
We process personal data in accordance with the GDPR (EU Regulation 2016/679), which governs how businesses collect, process, store, and protect personal data of individuals in the European Economic Area (EEA).
👥 2. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
-
Right of Access: You can request a copy of the personal data we hold about you.
-
Right to Rectification: You can ask us to correct inaccurate or incomplete data.
-
Right to Erasure (“Right to be Forgotten”): You may request deletion of your personal data in certain circumstances.
-
Right to Restrict Processing: You may request that we restrict how we process your data in certain situations.
-
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
-
Right to Object: You may object to processing of your data where we rely on our legitimate interests or are using it for direct marketing.
-
Rights Related to Automated Decision-Making and Profiling: You have the right not to be subject to decisions made solely by automated means if it significantly affects you.
To exercise any of these rights, please contact us at:
📧 Email: [email protected]
We will respond within 30 days, as required by GDPR.
⚖️ 3. Legal Bases for Processing
We collect and process your data only when we have a legal basis to do so. These include:
-
Consent: When you give us clear permission (e.g., newsletter sign-up).
-
Contractual necessity: When data is needed to fulfill a contract (e.g., order fulfillment).
-
Legal obligation: When we are legally required to process your data.
-
Legitimate interests: When processing is necessary for our business and your rights do not override those interests.
🌐 4. International Data Transfers
Some of our service providers are located outside the EEA. When we transfer your data internationally, we ensure safeguards such as:
-
Standard Contractual Clauses (SCCs) approved by the European Commission.
-
Adequacy Decisions for countries the EU deems provide an adequate level of protection.
-
EU-U.S. Data Privacy Framework, where applicable.
🍪 5. Cookies & Tracking Technologies
We use cookies to improve your experience and analyze website usage. In compliance with GDPR:
-
You are informed of our cookie usage on first visit.
-
You have the option to accept or reject non-essential cookies.
-
You can withdraw consent at any time using your browser settings or our cookie banner.
Learn more on our Cookie Policy (if included there).
🔔 6. Data Breach Notification
In the event of a personal data breach:
-
We will notify the relevant supervisory authority within 72 hours, where legally required.
-
If the breach is likely to result in a high risk to your rights and freedoms, we will also inform you without undue delay.
👩💼 7. Data Protection Contact
Although we are not legally required to appoint a Data Protection Officer, we have designated a contact for all GDPR-related matters:
Data Protection Contact
📧 Email: [email protected]
🛠️ 8. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting obligations.
Once data is no longer needed, it is securely deleted or anonymized.
🛠️ 9. Security Measures
We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction. These may include:
-
Encryption (SSL/TLS)
-
Access controls
-
Regular backups
-
Staff training
🔄 10. Changes to This Statement
We may update this GDPR Statement from time to time. Any changes will be posted on this page with an updated “Last Updated” date. Please check back periodically.
❓ Need Help?
For any GDPR-related concerns, please contact:
📧 Email: [email protected]
📧 Data Protection Contact: [email protected]
If you’re in the EEA and believe your data protection rights have been violated, you may also lodge a complaint with your local data protection authority.
