Privacy Policy

Privacy Policy – Gamberofood


Last updated: August 2026


1. Data Controller

The controller responsible for the processing of personal data in connection with the Gamberofood online platform is:

Gamberofood
Operator: Maurizio D Agostino/ Gamberofood]
Kalkstr.3
59269 Beckum
Germany

Email:  info@gamberofood.com

Phone: 01742496141

Whatsapp: +491742496141

2. General Information on Data Processing

Gamberofood is an online platform where users can purchase digital recipes.

We process personal data only where this is necessary to provide the platform, process orders and payments, provide purchased digital content, communicate with customers, and comply with legal obligations.

We process personal data in accordance with the applicable data protection laws, in particular the General Data Protection Regulation (GDPR).

3. What Personal Data Do We Process?

Depending on how you use Gamberofood, we may process the following personal data:

  • First and last name

  • Email address

  • Billing and contact information

  • Order information

  • Purchased recipes or digital products

  • Payment and transaction information

  • IP address

  • Date and time of access

  • Browser and device information

  • Information voluntarily provided when contacting us

We limit the collection of personal data to information that is necessary for the respective purpose.

4. Use of the Website

When you access the Gamberofood website, technically necessary information may be processed by our web server.

This may include:

  • IP address

  • Date and time of access

  • Pages accessed

  • Browser type and version

  • Operating system

  • Technical access information

This information is processed in particular to provide the website, maintain its stability and security, and prevent misuse.

Where applicable, the legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in providing a secure and properly functioning online service.

5. User Registration and Account

If Gamberofood provides the option to create a user account, the information required for registration and account management will be processed.

This may include:

  • Name

  • Email address

  • Password or securely stored authentication information

  • Account information

  • Order history

The data is processed to create and manage the user account and provide the requested services.

The legal basis is generally Article 6(1)(b) GDPR where processing is necessary for the performance of the user agreement or contract.

6. Purchase of Digital Recipes

Gamberofood allows users to purchase digital recipes.

When a purchase is made, we process the information required to process the transaction.

This may include:

  • Name

  • Email address

  • Billing information

  • Purchased digital recipe

  • Order date

  • Purchase price

  • Payment status

  • Transaction number or payment reference

The data is processed to:

  • process the purchase;

  • process and assign the payment;

  • provide access to the purchased recipe;

  • provide order confirmations;

  • fulfill legal accounting and record-keeping obligations.

The legal basis is Article 6(1)(b) GDPR for contract performance and Article 6(1)(c) GDPR where processing is required to comply with legal obligations.

7. Delivery of Purchased Recipes

After a successful purchase, the purchased recipe may be provided digitally.

The customer's email address may be used to send, for example:

  • access information;

  • a download link;

  • a purchase confirmation;

  • information relating to the purchased digital product.

This processing is necessary to fulfill the purchase contract.

8. Payment Processing

Gamberofood may use external payment service providers to process payments.

[Only insert the payment providers actually used by Gamberofood, for example PayPal and/or Stripe.]

During payment processing, payment and transaction information may be transmitted to the respective payment service provider.

The payment provider may independently process personal data in accordance with its own privacy policy.

Gamberofood generally receives only the information necessary to process and assign the payment transaction.

The legal basis is Article 6(1)(b) GDPR for contract performance and, where applicable, Article 6(1)(c) GDPR for compliance with legal obligations.

9. Order Confirmations and Email Communication

The email address provided by the customer may be used to send important information relating to an order.

This may include:

  • order confirmations;

  • payment confirmations;

  • information about access to purchased recipes;

  • information relating to the order;

  • necessary information regarding the user account.

Such communication is necessary for the performance of the contract.

10. Contacting Gamberofood

If users contact Gamberofood by email or through a contact form, the information provided will be processed in order to handle and respond to the inquiry.

This may include:

  • name;

  • email address;

  • content of the message;

  • other information voluntarily provided by the user.

The legal basis is Article 6(1)(b) GDPR if the inquiry relates to a contract or pre-contractual measures. In other cases, Article 6(1)(f) GDPR may apply.

11. Cookies

Gamberofood may use technically necessary cookies.

These cookies may be required for functions such as:

  • user login;

  • session management;

  • storing technical settings;

  • shopping cart functionality;

  • processing orders;

  • website security.

Technically necessary cookies are used to provide functions expressly requested by the user and to operate the website properly.

Gamberofood does not use non-essential analytics, marketing or tracking cookies unless such services are actually integrated into the website.

12. Disclosure of Personal Data

Personal data will generally not be sold to third parties for advertising purposes.

However, personal data may be disclosed where this is necessary to operate Gamberofood or fulfill contractual obligations.

Recipients may include:

  • hosting and server providers;

  • payment service providers;

  • technical service providers;

  • email service providers;

  • tax advisors or other professional service providers;

  • public authorities where disclosure is legally required.

Service providers receive only the information necessary to perform their respective services.

13. Transfers to Third Countries

If Gamberofood uses service providers that process personal data outside the European Union or the European Economic Area, the applicable requirements of data protection law will be observed.

Depending on the service provider and the destination country, this may include an adequacy decision by the European Commission or appropriate safeguards under the GDPR.

14. Data Retention

Personal data is generally retained only for as long as necessary for the respective purpose.

Statutory retention obligations may require certain information to be retained for longer periods, particularly under tax and commercial law.

Once the applicable retention periods have expired, the relevant data will be deleted unless there is another legal basis for continued storage.

15. Data Security

Gamberofood implements appropriate technical and organizational measures to protect personal data against:

  • loss;

  • misuse;

  • unauthorized access;

  • unauthorized alteration;

  • unauthorized disclosure;

  • destruction.

Security measures are regularly adapted to technical developments and the risks associated with processing personal data.

16. Rights of Data Subjects

Subject to the applicable legal requirements, users have the following rights under the GDPR:

Right of Access

You have the right to request information about whether we process personal data concerning you and, where applicable, to obtain access to that data.

Right to Rectification

You have the right to request correction of inaccurate personal data or completion of incomplete personal data.

Right to Erasure

Under certain legal conditions, you have the right to request the deletion of your personal data.

Right to Restriction of Processing

Under certain conditions, you may request that the processing of your personal data be restricted.

Right to Data Portability

Where the applicable legal requirements are met, you have the right to receive personal data concerning you in a structured, commonly used and machine-readable format.

Right to Object

You have the right to object to certain processing activities where the legal requirements for exercising this right are met.

17. Right to Withdraw Consent

Where processing is based on your consent, you have the right to withdraw that consent at any time with effect for the future.

The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

18. Right to Lodge a Complaint

You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data violates applicable data protection law.

You may generally contact the supervisory authority responsible for your habitual residence, place of work, or the location of the alleged infringement.

19. Automated Decision-Making

Gamberofood does not use automated decision-making, including profiling within the meaning of Article 22 GDPR, unless such functionality is specifically introduced and disclosed separately.

20. Changes to This Privacy Policy

Gamberofood may update this Privacy Policy where necessary due to changes in legal requirements, technical developments, or changes to the services and functions offered by the platform.

The current version published on the Gamberofood website shall apply.

Last updated: August 2026

Important Information

This Privacy Policy is specifically designed for Gamberofood as an online platform for selling digital recipes.

Services that are not actually used by Gamberofood, such as Google Analytics, Google Maps, newsletters, social media plugins, advertising tracking or other third-party tracking technologies, should not be included in the final version.

Before publication, the placeholders for the data controller's identity, address, email address and actual payment providers should be completed.