GDPR Compliance Statement for Harmony Meal
Effective Date: [25/10/2024]
At Harmony Meal (« we, » « us, » or « our »), accessible at harmonymeal.com, we respect your privacy and are committed to protecting your personal data in compliance with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable U.S. federal and state laws. This page outlines our GDPR and privacy compliance practices and your rights regarding personal data.
For questions or concerns about your data or to exercise any of your rights, please contact us at [email protected].
1. Introduction
This GDPR Compliance Statement provides information about the types of personal data we collect, how we use and protect it, and the rights available to individuals, especially those within the European Economic Area (EEA) and California, under GDPR, CCPA, and U.S. laws. By accessing or using Harmony Meal, you agree to the terms of service of this statement.
2. Personal Data We Collect
We collect personal data through:
- Information You Provide Directly: This includes personal data like your name, email address, and preferences when you subscribe to our newsletter, leave a comment, or contact us.
- Automatically Collected Data: This includes IP address, device type, browser type, and information about how you use our website through cookies and tracking technologies.
- Third-Party Services: We may also collect data from external services such as social media platforms, analytics providers, and affiliates when you interact with these services via our website.
For more details on data collection, please refer to our Privacy Policy.
3. How We Use Your Data
We process your personal data to:
- Provide Our Services: This includes managing your subscriptions, responding to inquiries, and enabling comments.
- Improve Our Website: We use analytics to monitor traffic, improve website functionality, and enhance user experience.
- Marketing and Personalization: With your consent, we use data for marketing, personalized content, and relevant advertisements.
- Legal Compliance: We may process data as required to comply with legal obligations.
Legal Bases for Processing Data (under GDPR):
- Consent: When you give us permission (e.g., newsletter sign-ups).
- Contractual Necessity: For transactions and fulfilling our services.
- Legal Obligation: To comply with legal requirements.
- Legitimate Interests: For purposes such as improving the site and safeguarding its security.
4. Data Sharing and Third Parties
We may share your data with third parties under the following conditions:
- Service Providers: We partner with third-party providers for analytics, website hosting, email marketing, and advertising.
- Legal Obligations: We may disclose information to comply with regulatory or legal requests.
- Business Transfers: In case of mergers or acquisitions, data may be transferred to the new entity.
- Third-Party Advertising: Some of our advertising partners may use cookies and similar tracking technologies to display relevant ads to you.
For more details, refer to our Privacy Policy.
5. International Data Transfers
Harmony Meal operates in the United States, meaning your data may be transferred to the U.S. or other countries outside the EEA. We follow legal mechanisms, including Standard Contractual Clauses (SCCs) or similar measures, to safeguard international transfers of personal data in compliance with GDPR requirements.
6. Data Retention
We retain personal data for as long as necessary to provide our services and fulfill the purposes outlined in this document, unless a longer retention period is required by law. When personal data is no longer needed, we securely delete it in accordance with our data retention policy.
7. Data Protection Measures
We implement technical and organizational security measures to protect your data from unauthorized access, alteration, or destruction. These measures include:
- Encryption: Secure data encryption protocols for transmission and storage.
- Access Controls: Restricted access to personal data based on role-specific permissions.
- Regular Audits: Periodic reviews and testing of our security practices and measures.
Despite these safeguards, no online platform can guarantee absolute security. We advise users to take additional measures, such as choosing strong passwords.
8. Your Rights Under GDPR and CCPA
GDPR Rights (for EEA Residents)
Under GDPR, you have the following rights:
- Right of Access: Request access to the personal data we hold about you.
- Right to Rectification: Request corrections to any inaccurate or incomplete data.
- Right to Erasure (“Right to be Forgotten”): Request deletion of your data under certain conditions.
- Right to Restrict Processing: Request restriction on processing your data under certain circumstances.
- Right to Data Portability: Obtain a copy of your data in a commonly used format.
- Right to Object: Object to data processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Withdraw consent at any time where data processing relies on it.
CCPA Rights (for California Residents)
Under CCPA, you have the following rights:
- Right to Know: Request disclosure of the categories and specific pieces of personal information we collect.
- Right to Delete: Request deletion of personal information we hold about you.
- Right to Opt-Out of Sale: Opt-out of the sale of your personal information (we do not sell data).
- Right to Non-Discrimination: You will not be discriminated against for exercising your privacy rights.
To exercise these rights, please contact us at [email protected]. Verification of identity may be required to process requests.
9. Exercising Your Rights
To exercise any of your rights under GDPR or CCPA, please submit your request by email to [email protected]. We will respond within the time frames required by applicable laws (typically within 30 days for GDPR and 45 days for CCPA).
10. Cookies and Tracking Technologies
Harmony Meal uses cookies, pixels, and other tracking technologies to:
- Recognize your device,
- Improve the functionality of our website, and
- Serve relevant advertisements.
Managing Cookies: You can control cookies through your browser settings or by using our cookie preferences tool, if available. However, disabling cookies may limit some functionality on our site. For detailed information, see our Cookie Policy.
11. Changes to this GDPR Compliance Statement
We may update this GDPR Compliance Statement periodically to reflect changes in our practices or legal requirements. When changes are made, we will update the effective date at the top of this page. We encourage you to review this page regularly to stay informed about our data practices.
Contact Information
If you have questions about this GDPR Compliance Statement, or if you would like to exercise any of your rights, please reach out to us:
Email: [email protected]