Introduction

This GDPR Policy explains how we collect, use, store, and protect your personal data in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). We are committed to ensuring that your privacy is protected and that we process your personal data lawfully, fairly, and transparently.

Data Controller

For the purposes of the GDPR, the data controller is Easy Sweet Meal. If you have any questions about this policy or our data practices, please contact us using the details provided at the bottom of this page.

What Data We Collect

We may collect and process the following categories of personal data:

  • Identity Data: Name, username, or similar identifier
  • Contact Data: Email address
  • Technical Data: IP address, browser type and version, time zone setting, browser plug-in types, operating system, and platform
  • Usage Data: Information about how you use our website, products, and services
  • Cookie Data: Data collected through cookies and similar technologies (see our Cookie Policy)

Legal Basis for Processing

We process your personal data on the following legal bases:

  • Consent: Where you have given clear consent for us to process your personal data for a specific purpose
  • Legitimate Interest: Where processing is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests
  • Legal Obligation: Where processing is necessary for compliance with a legal obligation
  • Contract: Where processing is necessary for the performance of a contract with you

Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your personal data:

  • Right of Access: You have the right to request a copy of the personal data we hold about you
  • Right to Rectification: You have the right to request that we correct any inaccurate or incomplete personal data
  • Right to Erasure: You have the right to request that we delete your personal data (the "right to be forgotten")
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format
  • Right to Object: You have the right to object to the processing of your personal data
  • Right to Withdraw Consent: Where we rely on consent, you have the right to withdraw it at any time

To exercise any of these rights, please contact us at the email address provided below. We will respond to your request within 30 days.

Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Data Security

We have implemented appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Third-Party Services

We may share your personal data with the following categories of third parties:

  • Analytics Providers: Such as Google Analytics, to help us understand website usage
  • Advertising Partners: To serve relevant advertisements
  • Hosting Providers: To host and serve our website

All third-party processors are required to respect the security of your personal data and treat it in accordance with the law.

Contact Us

If you have any questions about this GDPR Policy, wish to exercise your data rights, or have concerns about how we handle your personal data, please contact us:

Email: contact@qeasysweetmeal

Subject Line: GDPR Request

You also have the right to lodge a complaint with a supervisory authority if you believe that our processing of your personal data violates the GDPR.