GDPR Policy - pamdishes

1. Introduction

pamdishes (accessible at https://pamdishes.com) is committed to protecting the privacy and personal data of its users, customers, and visitors in accordance with the European Union General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679). This policy explains what personal data we collect, why we process it, how we safeguard it, and the rights you enjoy under the GDPR.

If you have any questions about this policy or wish to exercise any of your rights, please contact our Data Protection Officer at gdpr@pamdishes.com.

2. Personal Data We Collect

Email addresses – collected when you subscribe to newsletters, create an account, or contact us via the website.
Cookies and similar technologies – used to remember your preferences, analyse site usage, and improve your experience. This includes first‑party session cookies, analytics cookies, and marketing cookies.
Analytics data – aggregated information such as page views, click‑through rates, and device type, collected through services like Google Analytics.

We do not collect any special categories of data (e.g., health, biometric, or political data) and we never process personal data of children under the age of 16 without parental consent.

3. Legal Basis for Processing

Our processing activities are based on the following lawful grounds under Article 6 of the GDPR:

Consent (Art. 6(1)(a)) – When you voluntarily sign up for our newsletter or accept cookie settings, you give explicit consent for us to process your email address and related cookie data.
Legitimate Interests (Art. 6(1)(f)) – We process analytics data and use essential cookies to maintain site security, improve performance, and understand user behaviour. Your interests are balanced against our legitimate business needs, and you may object at any time (see Right to Object).

4. How We Protect Your Data

SSL Encryption – All data transmitted between your browser and our servers is encrypted using HTTPS (TLS 1.3).
Secure Servers – Our hosting environment is hardened, regularly patched, and monitored 24/7 for unauthorized access.
Limited Retention – Email addresses are retained for as long as you remain subscribed or until you request deletion. Analytics data is anonymised after 12 months. Cookies are set with expiration dates ranging from session‑only to 2 years, depending on purpose.
Access Controls – Only authorised personnel with a business need can access personal data, and they are bound by confidentiality agreements.
Data Breach Procedures – In the unlikely event of a breach, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

5. Your GDPR Rights

Under the GDPR you enjoy the following rights. Each right is illustrated with a Bootstrap Icon for quick reference.

Right to Access

You may request confirmation that we process your personal data and obtain a copy of the data we hold about you. This includes information on the purposes of processing, categories of data, and recipients.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to have it corrected without undue delay.

Right to Erasure (Right to be Forgotten)

You may ask us to delete your personal data when it is no longer necessary for the purposes for which it was collected, you withdraw consent, or the processing is unlawful.

Right to Restrict Processing

You can request that we limit the processing of your data while we verify the accuracy of the data, resolve a dispute, or when you have exercised your right to object.

Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, machine‑readable format and to transmit it to another controller where technically feasible.

Right to Object

You may object to the processing of your data for direct marketing, profiling, or where processing is based on legitimate interests. Upon objection, we will cease the processing unless we demonstrate compelling legitimate grounds.

Right to Withdraw Consent

Where processing is based on your consent (e.g., newsletter subscription or cookie preferences), you can withdraw that consent at any time, free of charge. Withdrawal does not affect the lawfulness of processing before the withdrawal.

6. How to Exercise Your Rights

To exercise any of the rights listed above, please send a written request to our Data Protection Officer at gdpr@pamdishes.com. Include the following information to help us verify your identity and locate your data:

Full name and contact details (email address used with pamdishes)
Specific right you wish to invoke (e.g., “Right to Access”)
Details of the data concerned, if known (e.g., newsletter subscription date)
Any supporting documentation that proves your identity (optional, but may speed up processing)

We will acknowledge receipt of your request within 5 business days and will respond within the statutory period of 30 calendar days. If the request is complex or numerous, we may extend the deadline by up to two additional months, but we will inform you of the extension and the reasons for it within the original 30‑day period.

7. International Data Transfers

All personal data processed by pamdishes is stored on servers located within the European Economic Area (EEA). When we use third‑party services (e.g., Google Analytics), data may be transferred to the United States. Such transfers are protected by standard contractual clauses approved by the European Commission, ensuring an adequate level of protection.

8. Changes to This Policy

We review this GDPR Compliance Policy regularly. Any material changes will be posted on this page with an updated “Last Updated” date. Continued use of the website after changes indicates acceptance of the revised policy.

9. Contact Information

For any privacy‑related inquiries, complaints, or to exercise your rights, please contact:

Data Protection Officer
pamdishes
Email: gdpr@pamdishes.com

GDPR Compliance Policy – pamdishes