GDPR & Data Privacy

1. Data Controller

2. What Personal Data We Process

We process the following categories of personal data:

• Email addresses (newsletter subscribers and contact form senders)
• Names (when voluntarily provided in forms)
• IP addresses (for security and spam prevention)
• Usage data (pages visited, time on site — via anonymised analytics)
• Cookie data (see our Cookie Policy for full details)

3. Legal Basis for Processing

We process your data under the following legal bases (GDPR Article 6):

• Consent (Art. 6(1)(a)): Newsletter subscriptions. You can withdraw consent at any time.
• Legitimate Interests (Art. 6(1)(f)): Website security, spam prevention, and improving user experience through analytics.
• Contract Performance (Art. 6(1)(b)): Responding to contact form enquiries.

4. Your Rights Under GDPR

As an EU/EEA resident, you have the following rights:

4.1 Right to Access (Art. 15)

You have the right to request a copy of the personal data we hold about you, free of charge. We will respond within 30 days.

4.2 Right to Rectification (Art. 16)

You have the right to request correction of inaccurate or incomplete personal data.

4.3 Right to Erasure / "Right to be Forgotten" (Art. 17)

You have the right to request deletion of your personal data where there is no compelling reason for us to continue processing it. Note: we may retain anonymised statistical data.

4.4 Right to Restrict Processing (Art. 18)

You have the right to request that we restrict the processing of your personal data in certain circumstances.

4.5 Right to Data Portability (Art. 20)

You have the right to receive your personal data in a structured, machine-readable format and to transmit that data to another controller.

4.6 Right to Object (Art. 21)

You have the right to object to processing of your personal data based on legitimate interests. We will stop processing unless we demonstrate compelling grounds that override your interests.

4.7 Rights Related to Automated Decision-Making (Art. 22)

We do not use automated decision-making or profiling that produces legal or similarly significant effects on individuals.

5. How to Exercise Your Rights

To exercise any of the above rights, please:

• Email us at: hello@daniellerecipes.com with the subject "GDPR Data Request"
• Use our contact form

We will respond within 30 days. We may need to verify your identity before processing requests.

6. Data Retention

• Newsletter subscriptions: Until you unsubscribe.
• Contact form messages: Up to 24 months, then deleted or anonymised.
• Server logs (IP address): Up to 90 days for security purposes.
• Analytics data: 26 months (Google Analytics default, anonymised).

7. International Data Transfers

Some of our service providers (such as Google Analytics) may process data outside the EU/EEA. Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses. Please review Google's compliance measures.

8. Right to Complain

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your national data protection supervisory authority. A list of EU supervisory authorities is available at: edpb.europa.eu

9. Changes to This Page

We may update this GDPR page as regulations or our practices change. The "Last Updated" date reflects the most recent revision.