GDPR Policy

At ChellesRecipes.com (“we,” “our,” or “us”), we are committed to protecting the privacy and rights of individuals in accordance with the General Data Protection Regulation (GDPR). This GDPR Policy explains how we collect, process, and protect personal data of European Union (EU) residents and outlines your rights under the GDPR.

Data Controller

For the purposes of the GDPR, ChellesRecipes.com is the data controller of your personal data. If you have any questions about our GDPR practices, please contact us at:

Email: [email protected]
Website: chellesrecipes.com

Personal Data We Collect

We may collect and process the following personal data:

Data You Provide:

Name and email address when subscribing to our newsletter or commenting on recipes
Account information when creating an account (username, email, password)
User-generated content such as comments, ratings, or recipe submissions
Any correspondence you send to us via email or contact forms

Data Collected Automatically:

IP address and location data
Browser type and version
Operating system
Device information
Pages visited and time spent on our website
Referring website addresses
Cookies and similar tracking technologies

Legal Basis for Processing

We process your personal data on the following legal grounds:

Consent: When you explicitly agree to the processing of your personal data for specific purposes, such as receiving our newsletter.
Contract: When processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
Legitimate Interests: When processing is necessary for our legitimate interests, such as improving our website and services, provided these interests are not overridden by your fundamental rights and freedoms.
Legal Obligation: When processing is necessary to comply with a legal obligation to which we are subject.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and maintain our services
To notify you about changes to our services
To allow you to participate in interactive features
To provide customer support
To gather analysis or valuable information to improve our services
To monitor the usage of our services
To detect, prevent, and address technical issues
To provide you with news, special offers, and general information about other goods, services, and events which we offer

Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this GDPR Policy. We will retain and use your personal data to the extent necessary to comply with our legal obligations, resolve disputes, and enforce our legal agreements and policies.

Your Rights Under GDPR

Under the GDPR, you have the following rights:

Right to Access: You have the right to request copies of your personal data.
Right to Rectification: You have the right to request the correction of any inaccurate information.
Right to Erasure: You have the right to request the deletion of your personal data.
Right to Restriction of Processing: You have the right to request restriction of processing of your personal data.
Right to Data Portability: You have the right to request the transfer of your personal data to another organization or directly to you.
Right to Object: You have the right to object to our processing of your personal data.
Right to Withdraw Consent: You have the right to withdraw consent where we rely on consent to process your personal data.
Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority.

To exercise these rights, please contact us using the information provided in the “Data Controller” section.

Data Transfers Outside the EU

We may transfer your personal data to countries outside the European Economic Area (EEA). When we do so, we ensure that appropriate safeguards are in place to protect your data, such as:

Transferring to countries that the European Commission has determined provide an adequate level of protection for personal data
Using specific contracts approved by the European Commission that give personal data the same protection it has in Europe
Transferring data to US-based service providers who are certified under the EU-US Privacy Shield or other appropriate frameworks

Data Security

We have implemented appropriate technical and organizational measures to secure your personal data from accidental loss, unauthorized access, alteration, or disclosure. However, no method of electronic transmission or storage is 100% secure, so we cannot guarantee absolute security.

Children’s Data

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so that we can take necessary actions.

Changes to This GDPR Policy

We may update our GDPR Policy from time to time. We will notify you of any changes by posting the new GDPR Policy on this page and updating the “Last Updated” date.

Cookie Policy

We use cookies and similar tracking technologies to track activity on our website and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier. For more information about the cookies we use, please see our separate Cookie Policy.

Data Breach Notification

In the event of a personal data breach, we will notify relevant supervisory authorities within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify you without undue delay.

Data Protection Impact Assessment

Where processing operations are likely to result in a high risk to your rights and freedoms, we will carry out data protection impact assessments to address these risks.

Contact Us

If you have any questions about this GDPR Policy or our data processing practices, please contact us at: