Flavor Tastes respects the privacy rights of all individuals, including those covered by the General Data Protection Regulation (GDPR), regardless of their location. This GDPR Compliance Statement outlines how we collect, use, disclose, and safeguard personal information, specifically addressing the rights of individuals under the GDPR.
Data Collection:
We may collect personal information from visitors to our website, including but not limited to:
- Name
- Email address
- Mailing address
- Phone number
- IP address
- Browser type
- Device information
- Usage data
This information may be collected when you subscribe to our newsletter, submit comments, or engage with our content in any other manner.
Lawful Basis for Processing:
We process personal information based on one or more of the following lawful bases:
- Consent: You have given explicit consent to the processing of your personal data for one or more specific purposes.
- Contractual Necessity: Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.
- Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject.
- Legitimate Interests: Processing is necessary for the purposes of our legitimate interests or those of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms.
Data Subject Rights:
Under the GDPR, you have certain rights regarding your personal data, including but not limited to:
- The right to access your personal data and receive a copy of the information we hold about you.
- The right to rectify inaccurate personal data or complete incomplete personal data.
- The right to erase your personal data in certain circumstances, also known as the “right to be forgotten.”
- The right to restrict the processing of your personal data in certain circumstances.
- The right to data portability, allowing you to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format.
- The right to object to the processing of your personal data in certain circumstances, including processing based on legitimate interests or direct marketing.
- The right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Data Security:
We take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.
Data Transfers:
We may transfer personal data to countries outside the European Economic Area (EEA) that may not provide the same level of data protection as your home country. In such cases, we will ensure that adequate safeguards are in place to protect your personal data, such as standard contractual clauses or other approved mechanisms.
Data Protection Officer (DPO):
We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data protection laws. If you have any questions or concerns regarding the processing of your personal data or wish to exercise your data subject rights, please contact our DPO using the information provided below.
Contact Us:
If you have any questions, comments, or concerns about our GDPR compliance or data protection practices, please contact our Data Protection Officer (DPO) at [email protected].
Changes to This GDPR Compliance Statement:
We reserve the right to update or modify this GDPR Compliance Statement at any time. Any changes will be effective immediately upon posting the updated statement on our website.
By using our website, you acknowledge and consent to the processing of your personal data in accordance with this GDPR Compliance Statement.