GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Easyrecipecrate (the “Website”) is committed to protecting the privacy and personal data of all users in accordance with the General Data Protection Regulation (GDPR) and related EU data‑protection legislation. This policy explains what personal data we collect, why we collect it, how we use it, the legal basis for processing, and the rights you have as a data subject. By using our Website you acknowledge that you have read and understood this policy.

2. Personal Data We Collect

We collect the following types of personal data:

• Email addresses: When you subscribe to our newsletter, register for an account, or contact us, we record the email address you provide.
• Cookies and similar technologies: We use first‑party cookies to recognise you when you return to the site, to remember your language preferences, and to optimise your experience. Third‑party cookies from analytics providers track aggregate usage patterns.
• Analytics data: We employ Google Analytics and Matomo to collect anonymised statistics on page views, session duration, and device information. This data is stored in a pseudonymised form and does not identify you directly.

3. Legal Basis for Processing

We process your personal data on the following legal bases:

• Consent: For email marketing and newsletters, we obtain your explicit consent. You may withdraw this consent at any time by clicking the unsubscribe link or contacting us.
• Legitimate interest: We process cookies and analytics data to improve the performance of the Website, to personalise content, and to detect and prevent abuse. We have conducted a legitimate‑interest assessment and concluded that our interests outweigh any potential impact on your privacy, provided we implement appropriate safeguards.

4. Data Security Measures

Protecting your personal data is a top priority. We employ the following security measures:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted with industry‑standard TLS 1.3.
• Secure servers: Our hosting environment is hosted on a dedicated, firewalled, and regularly audited data centre.
• Limited retention: Personal data is retained only as long as necessary for the purposes for which it was collected. Email addresses are kept for the duration of your subscription, while analytics data is stored for a maximum of 12 months.
• Access controls: Only authorised personnel with a legitimate need to access personal data are granted access, and all access is logged.

5. Your Rights Under GDPR

Right to Access

You have the right to obtain confirmation that we are processing your personal data and to receive a copy of the data we hold about you in a structured, commonly used format.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you may request that we correct it without undue delay.

Right to Erasure

Under certain circumstances, you may request the deletion of your personal data (the “right to be forgotten”). We will comply where the law allows, subject to legitimate interests and legal obligations.

Right to Restrict Processing

You can request that we restrict the processing of your personal data, for example, if you contest its accuracy. While processing is restricted, we may still store the data but will not use it for any further purposes.

Right to Data Portability

You may receive your personal data in a machine‑readable format and transfer it to another controller, where technically feasible.

Right to Object

You may object to the processing of your data for direct marketing or profiling purposes. Upon receiving an objection, we will stop processing your data for those purposes unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Consent can be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. In your request, provide:

• Your full name and contact details.
• A clear statement of the right you wish to exercise.
• Any relevant identification (e.g., the email address associated with your account).

We will respond to your request within 30 days, as required by Article 12(3) of the GDPR. If we need additional information to verify your identity, we may contact you for clarification, which may extend the response time but will not exceed 30 days in total.

7. Contact Us

If you have any questions about this policy, your personal data, or how we process it, feel free to reach out:

Email: [email protected]
Website: https://easyrecipecrate.com

We are committed to respecting your privacy and ensuring that your personal data is handled with the utmost care and in full compliance with GDPR.