1 Introduction
I am happy that you are visiting my website, thank you for your interest. In the following policy, I inform you about the handling of your personal data when you are using our website. Personal data is considered all data with which you can be personally identified.
10. December 2021
1.1 Content
- Introduction
- Data controller
- Security measures
- Data collection when visiting my website
- Cookies
- Contacting
- Comments
- Rights of the data subject
2 Data controller
More Than Just Cooking
Anna Grozeva
6850 Dornbirn, Austria
E-Mail: morethanjust.cooking@outlook.de
Legal notice: https://morethanjust.cooking/en/legal-notice/
3 Security measures
I shall take appropriate technical and organizational measures to ensure a level of security appropriate to the risk, in accordance with the law and considering the state of the art, the cost of implementation and the nature, scope, context and purposes of the processing, as well as the various probabilities of occurrence and the level of risk to the rights and freedoms of natural persons.
SSL encryption (https): To protect your personal data and other confidential information transmitted via my website, I use SSL encryption. You can recognize encrypted connections by the prefix https:// in the address bar of your browser.
4 Data collection when visiting my website
4.1 Provision of the website web hosting
In order to provide my website securely and efficiently, I use the services of one or more web hosting providers from whose servers (or servers managed by them) the website can be accessed. For these purposes, I may use infrastructure and platform services, computing capacity, storage space and database services as well as security services and technical maintenance services.
4.2 Collection of access data and log files
When using my website only for informational purposes, e.g. if you do not leave any comments or transmit personal information in a similar way, I (or my web hosting provider) only collect data that your browser transmits to the web server, so-called server log files. These log files may be used for security purposes, e.g. to prevent server overload (especially in the case of abusive attacks, so-called DDoS attacks) and also to ensure server utilization and stability.
Types of data processed: Content data (e.g. entries in online forms), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors).
Purposes of processing: Stability and functionality of my website, as well as user-friendliness.
Legal basis: Legitimate interests (Art. 6 (1) point f GDPR).
5 Cookies
For the purpose of functionality, security and comfort of my website, I use the so-called Cookies on various pages. These are small text files that are stored on your end device. If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which can vary depending on the cookie.
Storage duration: In regards to the storage duration, the following types of cookies are distinguished:
- Temporary cookies (session cookies): Temporary cookies are deleted at the latest after a user has left the website and closed their end device (e.g. browser or mobile app).
- Permanent cookies: Permanent cookies remain stored even after the end device is closed. For example, the login status can be saved, or preferred content can be displayed directly when the user visits a website again.
If personal data is also processed by individual cookies set by me, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard my legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
General information on revocation and objection (opt-out): Users can revoke the consent for cookies they have given at any time and also object to processing in accordance with the legal requirements in Art. 21 DSGVO. Users can also declare their objection using the settings of their browser.
Please note that the functionality of our website may be limited if cookies are not accepted.
6 Contacting
When contacting me (e.g. via contact form, email or via social media), personal data is being collected.
This data is stored and used exclusively for the purpose of answering your request or for contacting you, as well as for the associated technical administration.
Types of data processed: User data (e.g. names), Contact data (e.g. e-mail), content data (e.g. entries in online forms).
Data subjects: Communication partners.
Purposes of processing: Contact requests and communication.
Legal basis: Legitimate interests (Art. 6 (1) point f GDPR).
7 Comments
Within the scope of this function and in addition to your comment, information on the time of writing the comment and the name of the commentator you have chosen are stored and published on the website.
If you leave comments, your IP address may also be stored based on my legitimate interests. This is done for my security in case someone leaves unlawful content in the comment (insults, forbidden political propaganda, etc.). In this case, I can be prosecuted myself for the comment and am therefore interested in the identity of the author.
I need your e-mail address to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 (1) point b and f GDPR. I reserve the right to delete comments if they are objected to as unlawful by third parties.
Furthermore, I reserve the right, on the legal basis of my legitimate interests, to process users’ details for the purpose of spam detection.
The personal information provided in the context of comments and contributions, any contact and website information as well as the content-related information will be permanently stored by me until the user objects.
Types of data processed: User data (e.g. names), Contact data (e.g. e-mail), Content data (e.g. entries in online forms), Usage data (e.g. websites visited, interest in content, access times), Meta/communication data (e.g. device information, IP addresses).
Data subjects: Users (e.g. website visitors).
Purposes of processing: Administration and response to requests.
Legal basis: Contract performance and pre-contractual enquiries (Art. 6 (1) point b GDPR), Legitimate Interests (Art. 6 (1) point f GDPR).
8 Rechte der betroffenen Personen
As a data subject, you are entitled to various rights under the GDPR, which are described more specifically in Art. 15 to 21 GDPR:Right to object: You have the right to object at any time, on grounds relating to your situation, to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) point e or f GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Right to withdraw consent: You have the right to revoke any consent given at any time. In the event of withdrawal, we will immediately erase the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to information: You have the right to request confirmation as to whether data in question is being processed and information about this data as well as further information and a copy of the data in accordance with the legal requirements.
Right to rectification: You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and/or the right to have incomplete personal data completed.
Right to erasure and restriction of processing (“right to be forgotten”): You have the right, in accordance with the law, to request that data concerning you be erased without delay or, alternatively, to request restriction of the processing of the data in accordance with the law.
Right to data portability: You have the right to receive data concerning you, which you have provided to me, in a structured, common and machine-readable format in accordance with the legal requirements or to require that those data be transmitted to another controller, where technically feasible.
Complaint to the supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the requirements of the GDPR.