GDPR Policy

Effective Date: July 24, 2025

1. Who We Are (Data Controller)

• Website: https://paulakitchen.com/
• Owner & Data Controller: Diana Lopes, Founder of Paula Kitchen
• Email: [email protected]

We are the data controller responsible for any personal data collected through this website.

2. What Personal Data We Collect

We may collect the following personal data from you:

• Name and Email Address – When you subscribe to our newsletter, contact us, or leave a comment
• Technical Information – Your IP address, browser type, operating system, referring URLs, and location (city/country)
• Usage Data – How you interact with the site, such as pages visited and time spent
• Device Data – Information about the type of device used (mobile, desktop, tablet)

3. Why We Collect Your Data

We use your personal data to:

• Send you recipe updates, newsletters, or wellness content (only with your consent)
• Respond to inquiries or comments you submit
• Improve website performance, usability, and recipe content
• Fulfill legal obligations and protect against fraud
• Provide personalized content or advertising (only with your cookie consent)

4. Legal Bases for Processing

We process your personal data on the following legal grounds:

• Consent – When you opt in to receive emails or accept cookies
• Legitimate Interest – For analytics, site security, and service improvements
• Legal Obligation – Where required by applicable laws
• Contractual Necessity – When responding to your specific service or content requests

5. Your Rights Under GDPR

If you are a resident of the EU or EEA, you have the right to:

• Access your personal data
• Correct inaccurate or outdated data
• Request the deletion of your data (“right to be forgotten”)
• Restrict how we process your data
• Object to certain processing activities
• Withdraw previously given consent at any time
• Request a copy of your data in a portable format

To exercise these rights, contact us at: [email protected]

6. Data Retention

We only retain your personal data for as long as necessary to fulfill the purposes stated in this policy or to comply with legal obligations. You may request data deletion at any time.

7. Sharing Your Data

We do not sell or rent your personal data. We may share your data with trusted third parties, including:

• Email marketing platforms (e.g., MailerLite, ConvertKit)
• Website hosting providers
• Website analytics providers (e.g., Google Analytics)
• Legal authorities when legally required

All third-party processors are GDPR-compliant and handle your data only as needed to support our services.

8. Cookies and Tracking

We use cookies to enhance your browsing experience and analyze site usage. Essential cookies are necessary for the website to function. Non-essential cookies (e.g., for marketing or analytics) require your consent.

You may manage or disable cookies at any time via your browser settings or our cookie consent banner.

A full [Cookie Policy] will be made available separately.

9. International Data Transfers

As we are located in the United States, your data may be transferred and stored outside the European Economic Area (EEA). When such transfers occur, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission.

10. Data Security

We take appropriate technical and organizational measures to protect your personal data, including:

• HTTPS encryption
• Firewalls and security monitoring
• Secure, GDPR-compliant third-party services

However, no digital system is completely secure. By using our site, you acknowledge and accept any risk in sharing personal data online.

11. Contact

If you have any questions or concerns regarding your personal data or this GDPR Policy, please reach out to us:

📧 Email: [email protected]
🌐 Contact Page: https://paulakitchen.com/contact