GDPR Policy - Cozyrecipekitchen

Cozyrecipekitchen GDPR Compliance Policy

Last Updated: April 03, 2026

1. Introduction

Cozyrecipekitchen (the “Site”) is committed to protecting the privacy of our users and complying with the European Union General Data Protection Regulation (GDPR). This policy explains what personal data we collect, why we collect it, how it is processed, and the rights you have as a data subject under the GDPR.

2. Data We Collect

Email addresses – collected when users subscribe to newsletters, create an account, or request recipe downloads.
Cookies and similar tracking technologies – used to remember preferences, track site usage, and deliver personalized content.
Analytics data – aggregated, anonymous statistics collected via Google Analytics and Matomo to understand traffic patterns and improve the Site.

3. Legal Basis for Processing

We process personal data under the following lawful bases:

Consent – for email subscriptions, newsletter delivery, and optional marketing communications. Consent is freely given, specific, informed, and unambiguous.
Legitimate Interest – for improving the Site’s functionality, analyzing usage patterns, and ensuring security. We conduct a legitimate interest assessment and provide opt‑out mechanisms.

4. How We Protect Your Data

Our security measures include:

SSL/TLS encryption – all data transmitted between your browser and our servers is encrypted with HTTPS.
Secure servers – hosted on industry‑standard, hardened platforms with regular security audits.
Access controls – personal data is accessible only to authorized staff who require it for legitimate business purposes.
Retention policy – data is retained only as long as necessary for the purposes it was collected. Email addresses are kept for the duration of the subscription unless the user unsubscribes.

5. Your GDPR Rights

Under the GDPR you have the following rights. Each right is illustrated with an icon for quick reference.

Right to Access

You may request a copy of any personal data we hold about you. This includes the purposes of processing, categories of data, recipients, and any third‑party transfers.

Right to Rectification

If your data is inaccurate or incomplete, you can ask us to correct it. We will update the records promptly.

Right to Erasure

You may request that we delete personal data that no longer serves its purpose or was obtained unlawfully. We will comply unless a legal obligation requires us to retain the data.

Right to Restrict Processing

You can ask us to suspend processing of your data while you contest its accuracy, or if you object to processing for legitimate interest purposes.

Right to Data Portability

We can provide your data in a structured, commonly used, machine‑readable format. You can then transfer it to another controller.

Right to Object

You may object to processing for direct marketing, profiling, or legitimate interest. Upon objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you gave consent, you can withdraw it at any time. Withdrawal will not affect the lawfulness of any processing carried out before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected]. When you send a request, include:

Your full name and contact details.
A description of the request (e.g., “I would like to request a copy of all data you hold about me”).
Any relevant identifiers (e.g., email address used on the Site).
Proof of identity if the request involves sensitive data (optional but recommended).

We will respond to your request within 30 days, as required by the GDPR. If additional time is needed for complex requests, we will inform you of the delay and provide a new estimated deadline.

7. Contact Information

For any questions about this policy or to exercise your rights, reach out to our Data Protection Officer:

Cozyrecipekitchen – GDPR Office
Email: [email protected]

8. Updates to This Policy

We may update this policy from time to time. The revised version will be posted on the Site with a new effective date. We encourage you to review the policy periodically to stay informed about how we protect your personal data.