GDPR Compliance Policy – foodkitchenstudio.com

Last Updated: April 03, 2026

At foodkitchenstudio, we are committed to protecting your personal data and respecting your privacy rights. This policy explains how we collect, use, share, and safeguard the information you provide to us, and how you can exercise your rights under the General Data Protection Regulation (GDPR).

1. What Personal Data We Collect

Email Addresses: We collect your email address when you subscribe to our newsletter, create an account, or contact us via the website.
Cookies: We use first‑party and third‑party cookies to remember your preferences, analyse traffic, and personalise content.
Analytics Data: We employ Google Analytics (with IP anonymisation) and Matomo to gather anonymous statistics such as page views, session duration, and device type.
Contact Form Data: When you send an inquiry, we record the message content along with your name and email address.

2. How We Protect Your Data

SSL/TLS Encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
Secure Servers: Our hosting infrastructure is located in the European Economic Area and is regularly audited for security compliance (ISO 27001, SOC 2). Access to personal data is restricted to authorised personnel only.
Limited Retention: We retain personal data only as long as necessary to fulfil the purposes for which it was collected, or as required by law. For example, newsletter subscriptions are kept for a maximum of 5 years, and contact form messages are deleted after 12 months.
Data Breach Response: In the unlikely event of a data breach, we will notify the relevant supervisory authority within 72 hours and take immediate remedial action.

3. Legal Basis for Processing

We process your data under two primary legal bases:

Consent: When you sign up for our newsletter or opt‑in to marketing communications, you provide explicit consent. You may withdraw this consent at any time by clicking the “unsubscribe” link in our emails.
Legitimate Interest: We process data to improve our website’s functionality, analyse traffic, and provide a personalised user experience. This interest is balanced against your privacy rights and is justified by the benefits we provide to users.

4. Your GDPR Rights

Right to Access

You have the right to obtain confirmation that we are processing your personal data, and, if so, to receive a copy of that data. You may request this by emailing [email protected]. We will respond within 30 days.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can request correction. Contact us at [email protected] and we will rectify the information promptly.

Right to Erasure

Also known as the “right to be forgotten,” you may ask us to delete your personal data. We will honour such requests within 30 days, subject to legal obligations to retain certain information.

Right to Restrict Processing

If you contest the accuracy of your data or if the processing is unlawful, you may request that we restrict its use. We will comply within 30 days, provided the restriction does not impede compliance with legal duties.

Right to Data Portability

You can receive your personal data in a structured, commonly used, and machine‑readable format. Send a request to [email protected] and we will provide the data within 30 days.

Right to Object

At any time, you may object to the processing of your data for direct marketing or profiling. Once you object, we will cease processing for those purposes and will not use your data for similar activities.

Right to Withdraw Consent

You can withdraw consent at any time by following the unsubscribe link in marketing emails or by contacting us at [email protected]. Withdrawal will take effect immediately.

5. How to Exercise Your Rights

To exercise any of the rights listed above, please contact us at [email protected] with a brief description of your request. We will ask for a form of identification if necessary to verify your identity and will process the request within 30 days, in accordance with GDPR. If you need additional assistance, we can provide guidance or forward your request to the relevant department.

6. Contact Information

Data Protection Officer (DPO): [email protected]

Our mailing address is: 123 Culinary Lane, Food City, FL 12345, USA.

7. Policy Updates

We reserve the right to amend this policy at any time. Updated versions will be posted on our website and the effective date will be indicated at the top of the policy. Your continued use of the website after any changes constitutes acceptance of the updated policy.