Thank you for visiting Odessa Recipes, located at www.odessarecipes.com. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in compliance with the General Data Protection Regulation (GDPR).
1. Data Controller
Odessa Recipes (“we”, “us”, “our”) acts as the data controller when processing your personal data. You can contact us at any time regarding this Privacy Policy or your personal data using the details provided at the end of this policy.
2. Types of Personal Data We Collect
- Personal Information: When you visit Odessa Recipes, we may collect personal data that you voluntarily provide to us, such as your name, email address, postal address, phone number, and any other information you choose to provide when subscribing to our newsletter, creating an account, making a purchase, or contacting us through the website.
- Automatically Collected Information: We may also automatically collect certain information about your device and usage of our website through cookies and similar technologies. This may include your IP address, browser type, operating system, referring URLs, pages visited, and other interactions with our website.
3. Legal Basis for Processing
We will only process your personal data when we have a valid legal basis under GDPR, which may include:
- Contractual Necessity: Processing is necessary for the performance of a contract with you or to take steps at your request prior to entering into a contract.
- Legal Compliance: Processing is necessary to comply with our legal obligations, such as tax and accounting requirements.
- Consent: You have given us explicit consent to process your personal data for specific purposes, such as when you consent to receive marketing communications.
- Legitimate Interests: Processing is necessary for our legitimate interests, provided that such interests are not overridden by your rights and interests.
4. Purposes of Processing Your Personal Data
We may process your personal data for the following purposes:
- To provide and personalize our services, including fulfilling your orders, processing payments, and communicating with you about your account and transactions.
- To send you marketing communications, newsletters, and other information regarding our products, services, and promotions, where permitted by law and where you have provided your consent.
- To improve our website, products, and services, including analyzing usage trends and preferences.
- To comply with legal obligations, such as maintaining records for tax purposes and responding to lawful requests from public authorities.
5. Sharing Your Information
We do not sell your personal data to third parties. However, we may share your personal data with trusted third parties who assist us in operating our website, conducting our business, or providing services to you, such as payment processors, shipping providers, and marketing service providers. These third parties are contractually obligated to use your personal data only as necessary to provide the services they are providing to us.
6. Your Rights
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: You have the right to request access to and obtain a copy of your personal data.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data.
- Right to Erasure: You have the right to request deletion of your personal data under certain circumstances, such as when the data is no longer necessary for the purposes for which it was collected.
- Right to Restriction of Processing: You have the right to request restriction of processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or when the processing is unlawful.
- Right to Data Portability: You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another data controller.
- Right to Object: You have the right to object to processing of your personal data where we are relying on legitimate interests (or those of a third party) as the legal basis for processing, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms.
- Right to Withdraw Consent: If we are processing your personal data based on your consent, you have the right to withdraw your consent at any time.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, use, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, so we cannot guarantee absolute security.
8. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
9. International Data Transfers
Your personal data may be transferred to and processed in countries outside of the European Economic Area (EEA) or your country of residence. We will take all steps reasonably necessary to ensure that your personal data is treated securely and in accordance with this Privacy Policy.
10. Contact Us
If you have any questions about this Privacy Policy, if you would like to exercise your rights under GDPR, or if you have concerns about how we process your personal data, please contact us at:
Email: [email protected]