Privacy Policy for What4Lunch.com

1. Data Protection Overview

General Information

This policy provides a simple overview of what happens to your data when you visit our website, What4Lunch.com. Personal data is any information that can be used to personally identify you. For detailed information on data protection, please read our complete Privacy Policy below.

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Contact details for the responsible party can be found under the section "Responsible Party Information" in this Privacy Policy.

How do we collect your data?

Your data is collected, firstly, by providing it to us, for example, through information entered in a contact form. Other data is collected automatically or upon your consent by our IT systems when you visit the website, primarily technical data (e.g., internet browser, operating system, or time of page access). This data is collected automatically as soon as you enter our website.

What do we use your data for?

Some of the data is collected to ensure the website functions properly. Other data may be used to analyze user behavior.

What are your rights regarding your data?

You have the right to obtain information, free of charge, about the source, recipient, and purpose of your stored personal data at any time. You also have the right to request the correction or deletion of this data. If you have consented to data processing, you can withdraw this consent at any time. Furthermore, under certain circumstances, you have the right to request the restriction of your data's processing. Additionally, you have the right to lodge a complaint with the relevant supervisory authority.

If you have questions about this Privacy Policy or data protection at What4Lunch.com, feel free to contact us at any time.

Analysis Tools and Third-Party Tools

When you visit this website, your browsing behavior may be analyzed statistically, mainly through analytics programs. For detailed information, please refer to the following sections.

2. Hosting

Squarespace

Our website is hosted by Squarespace Ireland Ltd., Le Pole House, Ship Street Great, Dublin 8, Ireland (hereafter referred to as "Squarespace"). When you visit our website, your data is processed on Squarespace servers, with possible data transfer to the parent company, Squarespace Inc., 8 Clarkson St, New York, NY 10014, USA. Squarespace may also store cookies necessary for displaying the site and ensuring security (essential cookies).

Squarespace is used based on our legitimate interest in a reliable website display (Art. 6(1)(f) GDPR). If consent is obtained, processing occurs exclusively under Art. 6(1)(a) GDPR and § 25(1) TTDSG, where applicable, for cookie storage or access to device information (e.g., device fingerprinting) under TTDSG. Consent is revocable at any time.

Data transfer to the USA is based on EU Commission Standard Contractual Clauses, available at: https://support.squarespace.com/hc/en/articles/360000851908-DSGVO-and-Squarespace.

3. General Information and Mandatory Details on Data Protection

We at What4Lunch.com take your personal data protection seriously, treating it confidentially and by legal data protection regulations and this Privacy Policy.

Note on Data Transmission Security

We would like to remind you that data transmission over the internet (e.g., in email communication) may have security vulnerabilities. Complete protection from third-party access is not possible.

Responsible Party Information

The responsible party for data processing on this website is:

Antonia at What4Lunch

Email: hello@what4lunch.com

The responsible party is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g., names, email addresses).

Storage Duration

Unless a specific storage period is specified in this Privacy Policy, your peronal data will remain with us until the purpose for data processing no longer applies. If you request deletion or withdraw consent for data processing, we will delete your data unless legally permissible grounds for retention exist (e.g., tax or commercial law retention periods). In such cases, data deletion will occur after these reasons no longer apply.

4. Data Collection on this Website

Cookies

Our website uses "cookies," small text files stored on your device. Cookies are harmless and can be session-based (deleted after your visit) or persistent (stored until manually deleted or automatically by your browser). Third-party cookies may also be used when you enter our site.

Necessary cookies, used for essential website functions or optimized display, are stored under our legitimate interest in reliable service (Art. 6(1)(f) GDPR). Where consent is given for cookies or similar technology, the processing is based on your consent (Art. 6(1)(a) GDPR and § 25(1) TTDSG) and is revocable at any time.

Browser settings can be adjusted to notify you about cookies and allow cookies on a case-by-case basis, prevent cookies entirely, or delete cookies automatically on browser closure. Please note, that disabling cookies may impact the functionality of our website.

Contact Form

If you use the contact form, we store the details and contact data you provide to respond to your inquiry. We do not share this data without your permission. Processing is based on Art. 6(1)(b) GDPR if related to a contract or pre-contractual measures, or on your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

5. Social Media

Instagram Plugin

This website includes features from Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. If logged into Instagram, content shared on our website can link to your Instagram account.

Data storage and analysis for this integration are based on our legitimate interest in broad social media visibility (Art. 6(1)(f) GDPR). If consent is obtained, data processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be withdrawn at any time.

Further details are available in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/.

6. Newsletter

Newsletter Data

If you subscribe to our newsletter, we collect your email and any voluntary information to verify ownership and send requested information. Your data will not be shared without your consent. Processing is based on your consent (Art. 6(1)(a) GDPR), which you can withdraw via the “unsubscribe” link in any newsletter.

Data used for the newsletter will be retained until you unsubscribe, at which point it is deleted or stored in a blacklist solely to prevent future mailings, based on our legitimate interest in lawful email practices (Art. 6(1)(f) GDPR). Objection to blacklist storage is possible if your interest overrides ours.