NUTRISMARTCHEF
Read the privacy notice
Notice version: launch-2026-10-20-v4
Who processes your data
Data controller: Carlo Siliato. Privacy enquiries and rights: [email protected]. This notice covers the presentation website and launch registrations, not future app services.
Data and purposes
For users, we collect only an email address. For creators, we collect the social channel or website links provided, with no mandatory email. We also store language, consent date and notice version. Users expressly authorise an email announcing the NutriSmartChef project launch date during registration; their email is used only for that purpose. Creators receive the creator-space launch announcement through their submitted channels. It is not published, sold or used for promotional newsletters. Social profiles are not automatically browsed.
Legal basis and your choice
The legal basis is consent (Article 6(1)(a) GDPR), given through an unchecked box. Providing data is optional; without the required details we cannot send the notification. You can withdraw consent at any time without affecting the lawfulness of earlier processing. There are no automated decisions or profiling.
Retention
Registration data will be kept until launch day, when the requested announcement will be sent to subscribers. After sending it, registration data will be deleted. If you withdraw before launch, it will be deleted upon withdrawal. Any technical delays in removal from backups are described in the supplier section; backups are not used for further messages.
Suppliers and transfers
Access is restricted to the controller and suppliers responsible for hosting and storage. Suppliers, locations and technical retention periods: netcup GmbH (hosting); Neon (AWS eu-central-1, Frankfurt, EU); Cloudflare, Inc. (CDN/security). Contacts are not sent to AI services. Providers’ technical copies follow their retention periods and are not used for further communications. International transfers and safeguards: The database is in the EU. Cloudflare operates a global network and Neon uses international suppliers: processing outside the EEA may occur. Their data processing agreements describe standard contractual clauses and other applicable safeguards. Request details and copies at [email protected]. Creator messages use the submitted platforms, whose own privacy notices also apply.
Security and technical data
For up to 15 minutes, the server uses temporary hashes of IP addresses to limit abusive submissions, based on a legitimate interest in website security (Article 6(1)(f) GDPR). These hashes are not linked to registrations. We do not log email addresses or channels in application logs. Any hosting logs are described above.
Your rights
You may request access, correction, erasure, restriction, portability where applicable, and object to processing based on legitimate interests. Withdraw using the personal link shown after registration or write to [email protected]; use the same address for other rights. You may complain to the Italian Garante or the supervisory authority in your country.
Consent evidence
To document consent, form submission records a receipt identifier, server date and time, authorised purpose, language, form page, checkbox wording and a copy of the notice version presented. Each submission is recorded separately without overwriting earlier evidence. Evidence is linked to the registration and deleted with it on withdrawal or after the launch notification. We do not retain IP addresses, location or device fingerprints in this evidence. Submission does not verify ownership of the email address or social channels provided.