Privacy Policy
Last updated: May 14, 2025
1. Introduction
This privacy notice describes how the Gourmet website and mobile app, owned by Nicolò Flavio Campaniolo, located at via Raffaele Piria 11, 10144 Turin (TO), Italy, process users' personal data. Gourmet is committed to complying with EU Regulation 2016/679 (GDPR) and applicable Italian data protection laws.
2. Data Controller
Controller: Nicolò Flavio Campaniolo
Address: via Raffaele Piria 11, 10144 Turin (TO), Italy
Email: service.assistance@gourmetcommunity.it
3. Types of Data Collected
- Registration data: username, email, password
- Access data via Google or Facebook (ID, name, email, photo)
- Profile data: biography, profile photo, preferences
- Created content: recipes, articles, comments, reports
- Data provided during use of the AI tool (OpenAI API)
- Payment data via PayPal API (excluding banking details, handled by PayPal)
- Data viewed and shared via YouTube videos (Google/YouTube API)
- Technical and navigation data: IP address, browser type, operating system, cookies
4. Purposes of Processing
- To provide and improve the Gourmet Service
- To manage user authentication, preferences, and content
- To use AI models for culinary suggestions and responses (via OpenAI)
- To handle payments and donations (via PayPal)
- To embed video content via YouTube API
- To respond to reports and provide support
- To perform anonymous usage analytics and statistics
5. Legal Basis for Processing
Data are processed based on:
- User’s explicit consent
- Contractual necessity for service provision
- Legal obligations
- Legitimate interests of the Controller for service improvements and security
6. Cookies and Similar Technologies
We use technical cookies and, with prior consent, profiling and third-party cookies (e.g., Google, YouTube, PayPal). For more information, please visit our Cookie Policy.
7. Data Retention
Data are retained only as long as strictly necessary to provide the service or as required by legal or fiscal obligations. Public content may be retained even after account closure, after anonymization.
8. Sharing with Third Parties
- Google/YouTube API for video content
- OpenAI API for AI functionalities
- PayPal for payment management
- Hosting providers, analytics, email, and technical support providers
Your data will never be sold to third parties.
9. Transfer of Data Outside the EU
Some services (e.g., Google, OpenAI, PayPal) may involve transfers to non-EU countries. Such transfers comply with Articles 44-49 of the GDPR, through standard contractual clauses or other adequacy mechanisms.
10. Data Security
We apply technical and organizational measures to prevent unauthorized access, loss, or misuse of data (encryption, strong authentication, regular backups, firewalls).
11. User Rights
As a data subject, you may exercise the rights provided by Articles 15-22 of the GDPR at any time:
- Access your personal data
- Rectify or update your data
- Request deletion (“right to be forgotten”)
- Restrict or object to processing
- Data portability
- Withdraw consent at any time
- File a complaint with the Data Protection Authority (garanteprivacy.it)
12. Changes to This Policy
We reserve the right to update this privacy notice at any time. Changes will be published on this page and, if significant, notified via email or within the app.
13. Contact
For questions or to exercise your rights: service.assistance@gourmetcommunity.it