GDPR Privacy Policy

Last Updated: 25 April 2025

1. Data Controller

DoTasty (“we”, “us”, or “our”) operates https://dotasty.com. For GDPR purposes, we are the data controller.
Contact: [email protected]

2. Lawful Basis for Processing

We process personal data under these lawful bases:

  • Consent (for newsletters and cookies)
  • Legitimate interest (for website analytics and security)
  • Contractual necessity (for user accounts if applicable)

3. Data We Collect

A. Personal Data You Provide:

  • Email address (for subscriptions)
  • Name (optional)
  • Comments or messages

B. Automatically Collected Data:

  • IP address & device information
  • Cookies (see Section 5)
  • Usage data via Google Analytics

4. Your GDPR Rights

You have the right to:
✅ Access your personal data
✅ Rectify inaccurate data
✅ Erase your data (“Right to be Forgotten”)
✅ Restrict processing
✅ Data portability (receive your data in a structured format)
✅ Object to processing (e.g., direct marketing)
✅ Withdraw consent at any time

To exercise these rights, email [email protected]. We respond within 30 days.

5. Cookies & Tracking Technologies

We use:

  • Essential cookies (for site functionality)
  • Google Analytics (anonymized data) – Opt-out
  • Google AdSense (personalized ads) – Customize ads
  • Amazon Affiliate cookies (to track referrals)

You can manage cookies via browser settings.

6. International Data Transfers

Data may be transferred outside the EU to:

  • Google LLC (USA) – Under Standard Contractual Clauses
  • Amazon EU Associates (Luxembourg)

7. Data Retention

We retain data:

  • Until you unsubscribe (for emails)
  • 26 months (Google Analytics)
  • As required by law (e.g., transaction records)

8. Security Measures

We implement:
🔒 SSL encryption
🔒 Regular security audits
🔒 Limited staff access to personal data

9. Third-Party Processors

We use:

  • Google AdSense (advertising)
  • Amazon Associates (affiliate program)
  • Email service providers (e.g., Mailchimp)

All processors comply with GDPR.

10. Data Breach Protocol

In case of a breach, we will:

  1. Notify affected users within 72 hours
  2. Report to relevant authorities (where required)

11. Changes to This Policy

We will notify subscribers of material changes via email.

12. Contact & Complaints

For privacy concerns:
📧 Email: [email protected]