Kitchendishstudio GDPR Compliance Policy

Last Updated: April 03, 2026
Site: Kitchendishstudio
GDPR Contact Email: [email protected]

1. Introduction

Kitchendishstudio (“we”, “us”, “our”) is committed to protecting the privacy and personal data of our website visitors and customers in accordance with the European Union General Data Protection Regulation (GDPR) and applicable data‑protection laws. This policy explains what personal data we collect, how we use it, and your rights under the GDPR.

2. Data We Collect

We collect the following types of personal data:

• Email addresses: When you subscribe to our newsletter, create an account, or contact us via the form on our website.
• Cookies: We place non‑essential cookies for analytics, marketing, and performance. Essential cookies are required for the basic operation of the website.
• Analytics data: We use services such as Google Analytics to collect anonymised usage data, which may include IP addresses, device type, and browsing behaviour.

3. How We Protect Your Data

We implement technical and organisational measures to safeguard your personal data:

• SSL/TLS encryption: All data transmitted between your browser and our servers is protected with HTTPS.
• Secure servers: Our hosting environment is protected by firewalls, intrusion detection systems, and regular security audits.
• Limited retention: Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected or as required by law. After that, it is securely deleted.

4. Legal Basis for Processing

We process personal data on the following legal bases:

• Consent: When you voluntarily provide your email address or opt‑in to marketing communications, we rely on your explicit consent.
• Legitimate interest: We process data that is necessary for the operation of our website, providing user experience improvements, and maintaining security. This interest is balanced against your rights and freedoms.

5. Your GDPR Rights

Under the GDPR, you have the following rights regarding your personal data. Each right is illustrated with a Bootstrap icon for quick reference.

Right to Access

You can request a copy of any personal data we hold about you, as well as information about how it is processed. To exercise this right, send an email to [email protected] with a brief description of your request.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you may ask us to correct or update it. Please contact us at [email protected] and specify the data that needs rectification.

Right to Erasure

You have the right to request the deletion of your personal data, provided it is not required for legal obligations or legitimate business purposes. Email [email protected] to initiate this request.

Right to Restrict Processing

Under certain circumstances, you may request that we limit the processing of your data (e.g., if you contest its accuracy). Contact us at [email protected] to discuss this option.

Right to Data Portability

You can obtain a copy of your personal data in a structured, commonly used, and machine‑readable format, allowing you to transfer it to another service. Send a request to [email protected] with the details of the data you wish to receive.

Right to Object

You may object to the processing of your personal data for direct marketing or profiling purposes. Notify us at [email protected] and we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

If you have given us consent to process your data, you can withdraw it at any time. Simply reply to any marketing email with “Unsubscribe” or contact us directly at [email protected].

6. How to Exercise Your Rights

To exercise any of the rights listed above, follow these steps:

1. Identify the specific right you wish to exercise.
2. Send a clear, written request to [email protected] specifying your name, contact details, the type of request, and any relevant supporting information.
3. We will verify your identity to protect your privacy. This may involve asking for proof of identity or additional details.
4. We will respond to your request within 30 days, or longer if the request is complex. In the latter case, we will inform you of the delay and the reasons.

7. Response Time and Communication

All GDPR rights requests will be addressed within 30 days from the date we receive your request. If we require additional time, we will notify you of the extension and provide a reason. All communications will be conducted via email unless you specify an alternative method.

8. Contact Us

If you have any questions about this policy, your rights, or our data practices, please reach out:

GDPR Officer: [email protected]

We value your privacy and are committed to ensuring your personal data is handled responsibly and transparently.