Privacy Policy

1. Controller

The controller within the meaning of the GDPR is: [PLACEHOLDER — insert the operator's name, address and e-mail address.]

2. Hosting (Vercel)

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. When the pages are accessed, technically necessary data is transmitted to and processed on Vercel's servers (see Server log files). The legal basis is our legitimate interest in secure and stable operation (Art. 6(1)(f) GDPR). The transfer to the USA is based on the EU-U.S. Data Privacy Framework and standard contractual clauses.

3. Server log files

When you visit the website, information that your browser transmits is automatically recorded: in particular IP address, date and time of the request, the page/file accessed, the amount of data transferred, the referrer URL and browser/operating-system details. This data is used solely for technical operation, security and error analysis and is not merged with other data sources. The legal basis is Art. 6(1)(f) GDPR.

4. No cookies, no tracking, local fonts

The public pages of this cookbook do not set any cookies and do not use any analytics, tracking or advertising services. Consent is therefore not required. The fonts used are served locally from our server; there is no connection to Google Fonts or other third parties.

5. Contacting us

If you contact us by e-mail, we process the data you provide (e.g. name, e-mail address, content of the message) in order to handle your request. The legal basis is Art. 6(1)(f) GDPR. The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

6. Internal editorial area

For maintaining the recipes there is a password-protected admin area used exclusively by the editorial team. Login and management are handled via the service provider Supabase; a technically necessary session cookie is set in the process. This area is irrelevant for visitors to the public pages.

7. AI services (Anthropic, Google)

We use two AI services to prepare the content. To Anthropic PBC, 548 Market St, PMB 90375, San Francisco, CA 94104, USA we transmit texts as well as recipe photos and PDF documents uploaded by the editorial team, so that structured recipes, descriptive texts and translations can be produced from them. To Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA we transmit textual descriptions (image prompts) from which hero images are generated. Only content that is deliberately uploaded or entered in the internal editorial area is processed — no data from visitors to the public pages. If an uploaded document contains personal data (for example a handwritten dedication or a name on a recipe card), that data is transmitted along with it.

Both services are based in the USA, so processing takes place wholly or partly outside the EU. We are currently reviewing which data-protection role each provider takes on and which transfer instrument the third-country transfer relies on in detail; this section will be supplemented accordingly.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). To exercise these rights, please contact us at the address above.

9. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular the authority responsible for the operator. [PLACEHOLDER — insert the competent state authority.].