GDPR Compliance Policy – Cleverrezepte

Last Updated: April 03, 2026

At Cleverrezepte (the “Website”), we respect your privacy and are committed to protecting the personal data you share with us. This policy explains how we collect, use, store, and share your information in compliance with the European Union’s General Data Protection Regulation (GDPR). By using our Website, you consent to the practices described herein.

1. What Personal Data We Collect

• Email addresses: When you subscribe to our newsletter, create an account, or request recipes, we capture your email address to send you relevant content, updates, and promotional offers.
• Cookies and similar tracking technologies: We place cookies on your device to personalize content, measure traffic, and improve user experience. You can manage cookie preferences via your browser settings.
• Analytics data: We use third‑party analytics services (e.g., Google Analytics) to collect aggregated data about page views, session duration, and navigation patterns. This data is anonymized and does not identify you personally.

2. How We Protect Your Data

We implement robust technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using industry‑standard SSL/TLS protocols.
• Secure servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular vulnerability scans.
• Limited retention: We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Email addresses are stored for the duration of your subscription, while analytics data is retained for a maximum of 12 months.

3. Legal Basis for Processing

We process your personal data on the following lawful bases:

• Consent: When you voluntarily provide your email address or opt‑in to cookies, we rely on your explicit consent. You may withdraw consent at any time.
• Legitimate interest: We process data to improve website functionality, deliver relevant content, and analyse user engagement. These interests are balanced against your privacy rights and are documented in our privacy impact assessment.

4. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with an icon for quick reference.

Right to Access

You may request a copy of all personal data we hold about you. This includes the categories of data, sources, intended recipients, and the purposes of processing.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you can ask us to correct or complete it.

Right to Erasure

Also known as the “right to be forgotten,” you can request the deletion of your personal data where no lawful basis for retention remains.

Right to Restrict Processing

You may ask us to suspend the processing of your data (e.g., if you contest its accuracy). We will continue to store the data but will not use it for any purpose until the restriction is lifted.

Right to Data Portability

You can obtain your personal data in a structured, commonly used, and machine‑readable format, and transfer it to another controller if you wish.

Right to Object

If you object to the processing of your data for direct marketing or profiling purposes, we will stop processing your data for those purposes.

Right to Withdraw Consent

You can withdraw consent at any time, and we will cease processing your data based on that consent.

5. How to Exercise Your Rights

To exercise any of the rights above, please contact us:

• Email: [email protected]
• Postal address: Cleverrezepte GmbH,
  Musterstraße 12, 10115 Berlin, Germany

When you contact us, please provide:

• Your full name and contact details.
• A clear description of the request (e.g., “I wish to access all personal data we hold about me”).
• Any supporting evidence that confirms your identity (e.g., a copy of a passport or ID).

We will respond to your request within 30 days of receipt. If we need additional information to verify your identity, we will inform you of the required steps. Where a request is complex or involves multiple data subjects, we may need up to 90 days, but we will keep you updated on the progress.

6. Data Security and Breach Notification

In the unlikely event of a personal data breach, we will:

• Immediately assess the breach’s severity and potential impact.
• Notify the relevant supervisory authority within 72 hours, if the breach poses a risk to your rights and freedoms.
• Inform affected individuals via email if the breach is likely to result in a high risk of harm.

7. Updates to This Policy

We may update this policy from time to time to reflect changes in legal requirements or our practices. Any updates will be posted on this page with a new “Last Updated” date. We encourage you to review this policy regularly.

8. Contact Us

For any questions, concerns, or additional information about how we process your personal data, please reach out to us at:

Email: [email protected]

Thank you for trusting Cleverrezepte with your data. We are dedicated to safeguarding your privacy and ensuring your rights are respected.