MySimpleDishes GDPR Compliance Policy

Our Commitment to Data Protection

MySimpleDishes (the “Company”, “we”, “us”, or “our”) operates the website mysimpledishes.com. We are dedicated to protecting the personal data of our users in accordance with the European Union General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This policy explains what personal data we collect, how we process it, the legal bases for processing, the security measures we employ, and how you can exercise your GDPR rights.

Data We Collect

When you interact with MySimpleDishes, we may collect the following categories of personal data:

• Email address: Provided when you subscribe to our newsletter, register for an account, or contact us.
• Cookies & tracking identifiers: Small data files placed on your device to remember preferences, manage sessions, and analyse site usage.
• Analytics data: Information such as IP address (anonymised where possible), browser type, operating system, pages visited, and time spent on each page. This data is collected through standard analytics tools to improve site performance and user experience.

We do not collect any sensitive personal data (e.g., health information, political opinions, biometric data) unless you voluntarily provide it through a specific request, in which case it will be handled with the same level of care.

How We Use Your Data

We process your personal data for the following legitimate purposes:

• Sending newsletters, promotional offers, and transactional emails.
• Analyzing website traffic and user behaviour to enhance functionality and content relevance.
• Ensuring security, preventing fraud, and complying with legal obligations.

The legal bases for processing are:

• Consent: When you voluntarily subscribe to our newsletter or accept cookies, you provide explicit consent.
• Legitimate interest: Processing analytics data and maintaining site security are necessary for the legitimate interests of MySimpleDishes.

How We Protect Your Data

Protecting your personal information is a top priority. We employ a layered security approach that includes:

• SSL/TLS encryption: All data transmitted between your browser and our servers is encrypted using HTTPS.
• Secure servers: Our hosting environment is regularly audited, runs up‑to‑date operating systems, and uses firewalls and intrusion‑detection systems.
• Limited retention: Personal data is retained only as long as necessary for the purposes described in this policy, after which it is securely deleted or anonymised.
• Access controls: Only authorised personnel with a legitimate need can access personal data, and they are bound by confidentiality obligations.

Your GDPR Rights

Under GDPR, you enjoy a series of rights concerning your personal data. Below is a summary of each right, the associated icon, and how you can exercise it with MySimpleDishes.

• Right to Access

  You may request a copy of the personal data we hold about you, together with information about how we process it. To exercise this right, email gdpr@mysimpledishes.com with a clear request stating “Right to Access”.

• Right to Rectification

  If any of your personal data is inaccurate or incomplete, you can ask us to correct it. Send the details of the correction needed to gdpr@mysimpledishes.com and we will update the records promptly.

• Right to Erasure (“Right to be Forgotten”)

  You may request the deletion of your personal data where there is no compelling reason for us to retain it. To do so, email us with the subject line “Right to Erasure” and specify the data you wish to be removed.

• Right to Restrict Processing

  You can ask us to limit the way we use your data while we verify its accuracy or while a dispute is resolved. Submit a request titled “Right to Restrict Processing” to gdpr@mysimpledishes.com.

• Right to Data Portability

  You may receive your personal data in a structured, commonly used, machine‑readable format and transmit it to another controller. To request a portable copy, email us with “Right to Data Portability” in the subject line.

• Right to Object

  You have the right to object to the processing of your data for direct marketing, profiling, or any other legitimate‑interest basis. To object, send a message titled “Right to Object” to gdpr@mysimpledishes.com.

• Right to Withdraw Consent

  Where we rely on your consent (e.g., for newsletters or non‑essential cookies), you may withdraw it at any time. Simply click the “Unsubscribe” link in any of our emails or adjust your cookie preferences via the cookie banner. You may also email us with “Withdraw Consent” for confirmation.

Response time: We will acknowledge your request within 5 business days and provide a substantive response no later than 30 calendar days, as required by GDPR. If additional verification is needed, we will inform you of the extension and the reasons for it.

Contact Information

For any questions, concerns, or to exercise any of the rights listed above, please contact our Data Protection Officer at: