GDPR

Last Updated: 27/10/2024

At EarthySavor (“we,” “us,” or “our”), dedicated to delicious recipes by Chef Lily and accessible at www.earthysavor.com , we are committed to protecting your personal data and respecting your privacy rights in compliance with the General Data Protection Regulation (GDPR). This GDPR Privacy Policy outlines how we collect, use, and safeguard the personal data of individuals (“you” or “user”) visiting or interacting with our website from within the European Economic Area (EEA) or where GDPR applies.

1. Data Controller

EarthySavor acts as the Data Controller for the processing of personal data on this website. If you have any questions or concerns about this policy or how we handle your personal data, please contact:

Email:  [email protected]

2. Personal Data We Collect

We may collect personal data directly from you or through automated technologies. The types of personal data we collect can include:

  • Contact Information: When you subscribe to our newsletter, leave a comment on a recipe, or contact us via email or contact form, we may collect your name and email address.

  • Usage Data: We automatically collect information about how you interact with our website. This may include IP address, browser type, device information, pages visited, recipes viewed, and referring URLs.

  • Cookies and Similar Technologies: We use cookies and similar tracking technologies to enhance user experience, analyze website performance, and potentially serve relevant content.

  • User-Generated Content: If you choose to post comments, recipe ratings, or other content on our website, we may collect and store this information.

3. Legal Bases for Processing Your Personal Data

We process your personal data in accordance with GDPR based on one or more of the following legal grounds:

  • Consent: When you subscribe to our newsletters or opt in to receive marketing communications (if applicable), you give us consent to process your personal data for these purposes. You can withdraw your consent at any time.

  • Legitimate Interests: We process personal data to pursue our legitimate interests, such as improving our website, understanding user interactions with recipes, personalizing content, ensuring website security, and preventing fraud. We ensure these interests do not override your fundamental rights and freedoms.

  • Legal Obligations: In some cases, we may be required to process your personal data to comply with legal obligations (e.g., responding to lawful requests by public authorities).

4. How We Use Your Personal Data

We use your personal data for the following purposes:

  • Website Operation: To manage, maintain, and improve the functionality and user-friendliness of EarthySavor, ensuring a smooth browsing experience for delicious recipe discovery.

  • Communication: To respond to your inquiries, comments, or feedback submitted through contact forms or recipe comments, and to send you important administrative information related to the website.

  • Newsletter and Marketing (if applicable): To provide you with recipe newsletters, updates on new content, or promotional content related to EarthySavor (only when you have given consent, if required by law).

  • Analytics: To analyze trends in recipe views, user engagement with content, website usage patterns, and the effectiveness of our services to enhance user experience and optimize recipe presentation.

  • Personalization: To personalize your experience on EarthySavor by suggesting recipes based on your browsing history or preferences (if we implement such features).

  • Security: To maintain the security and integrity of our website, detect and prevent fraudulent activities, and protect users and our business.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes described in this policy, or as required by law. For example, comment data may be retained indefinitely for archival purposes unless you request deletion. Newsletter subscription data will be retained as long as you are subscribed. Usage data is generally retained in an aggregated and anonymized form for analytical purposes over longer periods. This retention period may vary depending on factors such as legal obligations, ongoing service provision, dispute resolution, and the enforcement of our agreements.

6. Sharing and Disclosure of Personal Data

We do not sell or rent your personal data to third parties. However, we may share your data in the following limited situations:

  • Service Providers: We may share personal data with trusted third-party service providers (e.g., website hosting providers, email marketing platforms for newsletters, analytics providers like Google Analytics, comment moderation tools) who assist us in operating our website, delivering content, or conducting our business, provided they agree to process your data in compliance with GDPR and maintain confidentiality.

  • Legal Requirements: We may disclose your personal data when required by applicable law, legal process, court order, or governmental request, or to protect our rights, property, or safety, or the rights, property, or safety of others.

  • Business Transfers: In the event of a merger, acquisition, reorganization, or sale of all or a portion of our assets, personal data may be transferred to the acquiring entity or a third party involved in the transaction as part of the transferred business assets. You will be notified via prominent notice on our website of any such change in ownership or control of your personal data.

7. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA) that may have data protection laws different from those in your country of residence. For example, our hosting provider or analytics services might have servers located outside the EEA. In such cases, we will take appropriate measures to ensure that your personal data receives an adequate level of protection, including but not limited to:

  • Standard Contractual Clauses: Implementing standard contractual clauses approved by the European Commission for data transfers outside the EEA.

  • Privacy Shield: For transfers to the United States, ensuring the recipient is certified under the EU-US Privacy Shield framework (if applicable and still valid).

  • Adequacy Decisions: Transferring data to countries recognized by the European Commission as providing an adequate level of data protection.

We will implement safeguards to ensure that your personal data is treated securely and in accordance with this Privacy Policy and GDPR requirements in all international transfers.

8. Your Rights Under GDPR

Under the GDPR, you have various rights regarding your personal data. These include:

  • Right of Access: You have the right to request confirmation as to whether or not we process your personal data, and where we do, access to your personal data and information on how it is processed.

  • Right to Rectification: You may request the correction or update of any inaccurate or incomplete personal data we hold about you.

  • Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected, or if you withdraw consent.

  • Right to Restrict Processing: You may request that we limit the processing of your personal data in certain circumstances, such as while we verify the accuracy of your data or assess the legitimacy of your objection to processing.

  • Right to Data Portability: You may request to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and have that data transmitted to another controller where technically feasible and when processing is based on consent or contract.

  • Right to Object: You have the right to object to the processing of your personal data for certain reasons, including for direct marketing purposes, or when processing is based on our legitimate interests.

  • Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that our processing of your personal data infringes the GDPR.

To exercise any of these rights, please contact us at [email protected] . We will respond to your request in accordance with GDPR requirements.

9. Security Measures

We take reasonable and appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, loss, or destruction. These measures include, but are not limited to:

  • Encryption: Using encryption technologies to protect data in transit and at rest where appropriate.

  • Access Controls: Implementing access controls to restrict access to personal data to authorized personnel only.

  • Regular Security Assessments: Conducting regular security assessments and vulnerability scans to identify and address potential security risks.

  • Employee Training: Providing regular training to our personnel on data protection best practices and GDPR compliance.

Despite our efforts, no data transmission over the internet or storage system can be guaranteed to be 100% secure. We encourage you to use strong passwords and to keep your login credentials confidential if applicable to any features on EarthySavor.

10. Use of Cookies and Similar Technologies

We use cookies and similar technologies to enhance your experience on EarthySavor, analyze website usage patterns, personalize content, and for potential marketing purposes (if applicable with consent). Please refer to our separate Cookie Policy for detailed information about the types of cookies we use, their purposes, and how you can manage your cookie preferences through your browser settings.

11. Children’s Privacy

EarthySavor is intended for a general audience and does not knowingly collect or solicit personal data from children under the age of 16 without verifiable parental consent. If you are a parent or guardian and believe that your child has provided us with personal data without your consent, please contact us immediately at [email protected] so we can take steps to investigate and delete the information in compliance with applicable legal requirements.

12. Changes to This GDPR Privacy Policy

We reserve the right to update or modify this GDPR Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or website features. Any material changes will be posted on this page, and we will indicate the effective date of the update at the top of the policy. We encourage you to review this policy periodically, especially when you provide personal data or use our website, to stay informed about how we are protecting your personal data and your privacy rights. Your continued use of EarthySavor after the posting of changes constitutes your acceptance of such changes.

13. Contact Information

If you have any questions, concerns, or complaints regarding this GDPR Privacy Policy or our data protection practices, or if you wish to exercise your rights, please contact us at:

Email: [email protected]
Website: www.earthysavor.com

If you are unsatisfied with how we handle your personal data or your requests, you have the right to lodge a complaint with a supervisory authority in the EU Member State of your habitual residence, place of work, or place of the alleged infringement.