GDPR Policy - Mealplatecenter

GDPR Compliance Policy – Mealplatecenter

Last Updated: April 03, 2026
Contact: [email protected]

1. Who We Are

Mealplatecenter (the “Company”, “we”, “our”, or “us”) operates the website mealplatecenter.com. We are committed to protecting your personal data and ensuring that all processing activities comply with the General Data Protection Regulation (GDPR) and related EU data protection laws.

2. What Personal Data We Collect

When you interact with our website, we may collect the following categories of personal data:

Email addresses: collected when you sign up for newsletters, create an account, or contact us.
Cookies & Similar Technologies: we use first‑party cookies to remember your preferences, session data, and to provide a smoother browsing experience.
Analytics Data: we employ Google Analytics and Matomo to understand how visitors use the site. This data includes IP addresses, device type, browser, and page views.

3. How We Protect Your Data

We implement a multi‑layered security strategy to protect your personal data:

Transport Layer Security (TLS/SSL): all data transmitted between your browser and our servers is encrypted using TLS 1.3.
Secure Hosting: our servers are hosted in GDPR‑certified data centers with physical security controls, firewalls, and intrusion detection.
Access Controls: only authorised staff with a legitimate business need can access personal data. Access is logged and audited.
Data Minimisation & Retention: we retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Email addresses are kept for a maximum of 12 months after the last interaction unless you request deletion.
Encryption at Rest: all personal data stored in our databases is encrypted using AES‑256.

4. Legal Basis for Processing

Our processing activities are based on the following lawful bases:

Consent: for marketing communications and newsletters. You can withdraw consent at any time.
Legitimate Interest: for website analytics and improving user experience. We conduct a balancing test to ensure that our interests do not override your privacy rights.
Contractual Necessity: for account creation and order fulfilment when you use our services.

5. Your GDPR Rights

Under the GDPR, you have the following rights with respect to your personal data. Below we outline each right, provide a short icon for quick reference, and explain how you can exercise them.

Right to Access

You have the right to obtain confirmation that we are processing your personal data, a copy of that data, and details of how it is processed. This includes the purposes of processing, categories of data, and recipients.

Right to Rectification

If any personal data we hold about you is inaccurate or incomplete, you can request that we correct it. We will rectify the data within a reasonable timeframe.

Right to Erasure (Right to be Forgotten)

You may request that we delete your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent and no other legal basis exists.

Right to Restrict Processing

You can ask us to suspend the processing of your data while we verify its accuracy or the legality of the processing.

Right to Data Portability

You can receive your personal data in a structured, commonly used, machine‑readable format and transfer it to another controller.

Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. Upon objection, we will cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent

You can withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

6. How to Exercise Your Rights

To exercise any of the above rights, please contact us using one of the following methods:

Email: [email protected] – include your name, email address, the specific request, and any supporting documentation.
Phone: +1 555‑123‑4567 (available Monday‑Friday, 9 a.m.‑5 p.m. CEST).
Postal Mail: Mealplatecenter, Data Protection Officer, 123 Food Lane, Culinary City, 98765.

When submitting a request, please provide enough information for us to verify your identity. We may ask for a copy of a government‑issued ID or a signed statement confirming your request.

7. Response Time and Further Actions

We will respond to your request within 30 days of receipt. If additional time is required—for example, to verify your identity or consult with a third‑party service provider—we will inform you within the initial 30‑day period and provide an updated deadline.

Should you be unsatisfied with our response, you may lodge a complaint with the relevant supervisory authority in the EU member state where you reside, or where the alleged infringement took place.

8. Changes to This Policy

We may update this GDPR Compliance Policy from time to time. When we make material changes, we will notify you via email or by posting a prominent notice on our website. The date of the last update will be shown at the top of this page.

9. Contact Us

If you have any questions, concerns, or wish to exercise any of your GDPR rights, please contact our Data Protection Officer:

Mealplatecenter – Data Protection Officer
Email: [email protected]
Phone: +1 555‑123‑4567