FoodFool

Privacy Policy

§ 1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) for data processing on the website foodfool.org and in connection with use of the application provided there is:

Vincenzo Auricchio
Margaretenstraße 28
82152 Krailling
Germany
Email: kontakt@foodfool.org

§ 2 General information on processing

(1) The protection of personal data is of great importance to FoodFool. Personal data is processed exclusively in accordance with applicable legal provisions, in particular the GDPR and the German Federal Data Protection Act (BDSG).

(2) Processing takes place only to the extent necessary to provide a functional website and application, to manage user accounts, to communicate with users, to ensure the security of the service, or on the basis of consent.

§ 3 Processing when using the website for information purposes

(1) When using the website for information purposes only — i.e. without registration — technically necessary data is processed that is automatically transmitted by the browser or server infrastructure.

(2) This may include in particular:

  • IP address
  • Date and time of access
  • Page or resource accessed
  • Referrer URL
  • Browser type and version, operating system used
  • Other technical log data

(3) Processing serves to provide, stabilize, secure, and technically deliver the service as well as to prevent abuse. The legal basis is Art. 6 (1) lit. f GDPR.

§ 4 Registration and user account

(1) To use FoodFool, you create a user account. In doing so, we process in particular:

  • Email address
  • Password exclusively in encrypted or hashed form (never in plain text)
  • Time of registration

(2) Processing is carried out to set up and manage the account, for authentication, and to provide application features. The legal basis is Art. 6 (1) lit. b GDPR.

§ 5 Use of application features

(1) To the extent that you record and manage content within the application, the data required for this is processed, in particular information about food items, supplies, storage locations, and households, as well as the times of entries and changes.

(2) Processing serves the technical provision of the features you request. The legal basis is Art. 6 (1) lit. b GDPR.

§ 6 Contact

When you contact us by email, the data you provide (in particular email address and message content) is processed to handle your inquiry. The legal basis is Art. 6 (1) lit. b GDPR where the inquiry relates to the usage relationship, otherwise Art. 6 (1) lit. f GDPR.

§ 7 IT security and abuse prevention

Personal data may be processed to the extent necessary to ensure the security, integrity, and availability of the service, to detect and prevent unauthorized use, or to assert and defend legal claims. The legal basis is Art. 6 (1) lit. f GDPR.

§ 8 Hosting and technical provision

(1) The application is operated on a rented server with the following provider: STRATO AG, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany.

(2) The provider processes on our behalf the data required to provide and secure the service (in particular server log and connection data) on the basis of a data processing agreement pursuant to Art. 28 GDPR. Data transmission is encrypted via TLS (HTTPS).

§ 9 Cookies

We use only a technically necessary session cookie that maintains your login. It contains no tracking information and is not used for analytics or advertising purposes. As it is required for the operation of the service, no consent is required (§ 25 (2) TDDDG; Art. 6 (1) lit. f GDPR). Analytics, tracking, and marketing technologies are not used.

§ 10 Recipients of data

Personal data is not disclosed to third parties except to the hosting provider named in § 8 within the scope of data processing, and to the extent necessary to fulfill legal obligations or to enforce or defend legal claims. No transfer to third countries outside the EU/EEA takes place.

§ 11 Storage period

Personal data is stored only for as long as necessary for the respective purposes or as required by statutory retention obligations. Registration and content data is generally stored for the duration of the user account and removed or anonymized after deletion of the account. Server log data is stored only for a limited period.

§ 12 Rights of data subjects

Subject to applicable law, you have in particular the right to:

  • request information about your processed data (Art. 15 GDPR)
  • have inaccurate data corrected (Art. 16 GDPR)
  • request deletion of your data (Art. 17 GDPR)
  • request restriction of processing (Art. 18 GDPR)
  • object to processing (Art. 21 GDPR)
  • withdraw consent given with effect for the future
  • request data portability (Art. 20 GDPR)
  • lodge a complaint with a data protection supervisory authority

The competent supervisory authority is the Bavarian State Office for Data Protection Supervision (BayLDA).

§ 13 Right to object

Where personal data is processed on the basis of Art. 6 (1) lit. f GDPR, you have the right to object to processing at any time on grounds relating to your particular situation.

§ 14 Obligation to provide data

Where data is required for registration, account management, or essential features, providing it is necessary to use the service. Without this data, the account may not be set up or the respective feature may not be provided.

§ 15 No automated decision-making

No automated decision-making, including profiling within the meaning of Art. 22 GDPR, takes place.

§ 16 Changes to this privacy policy

We reserve the right to amend this privacy policy with effect for the future where necessary due to technical developments, changes to the service, or changed legal requirements. The current version is available on this website.

Last updated: [Month Year]