Privacy Policy

This privacy policy explains how KitchenDiagnose collects, uses, and protects your personal data when you interact with our website and diagnostic services. We are committed to transparency and compliance with applicable data protection regulations, including the General Data Protection Regulation (GDPR).

1. Data Controller and Contact Information

KitchenDiagnose is the data controller responsible for your personal data. If you have questions about this privacy policy or how we handle your information, please contact us using the details below.

2. What Data We Collect

We collect personal data only when you voluntarily provide it or when it is necessary to deliver our services. The types of data we may collect include:

• Contact Information: Name, email address, phone number, and business address when you submit inquiry forms or request a diagnostic consultation.
• Business Information: Details about your restaurant or food service facility, including facility type, size, and compliance concerns you wish to address.
• Communication Records: Messages, emails, and notes from consultations or follow-up discussions related to your compliance diagnostic.
• Technical Data: IP address, browser type, pages visited, and time spent on our website (collected through standard web server logs and optional analytics tools).
• Cookies and Similar Technologies: We may use cookies and similar tracking technologies to improve user experience and understand how visitors interact with our site.

3. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

• Consent: When you submit a contact form or request our services, you consent to the processing of your data to respond to your inquiry.
• Contractual Necessity: If you engage us for a diagnostic inspection or remediation consultation, we process data necessary to fulfill that service.
• Legitimate Interest: We may process technical data to maintain website security, prevent fraud, and improve our services.
• Legal Obligation: We may be required to process data to comply with applicable laws and regulations in Germany and the European Union.

4. How We Use Your Data

We use the personal data we collect for the following purposes:

• Responding to your inquiries and providing diagnostic consultations or remediation services.
• Scheduling inspections, sending appointment confirmations, and follow-up communications.
• Creating inspection reports, compliance documentation, and remediation recommendations tailored to your facility.
• Improving our website functionality, user experience, and service offerings.
• Sending occasional updates about compliance regulations or new diagnostic services (only with your consent).
• Maintaining records necessary for audit trails and quality assurance.
• Complying with legal obligations and protecting against liability.

5. Data Sharing and Third Parties

We do not sell or rent your personal data to third parties. However, we may share your information with:

• Service Providers: We may engage third-party processors (such as email service providers, document storage platforms, or scheduling tools) to support our operations. These processors are contractually bound to protect your data and use it only for the purposes we specify.
• Legal Requirements: If required by law, court order, or regulatory authority in Germany or the EU, we may disclose your data to comply with legal obligations.
• Your Consent: If you explicitly consent, we may share your data with other parties (for example, if you request a referral to a specialized remediation contractor).

All third-party processors are required to implement appropriate technical and organizational measures to protect your data in accordance with GDPR standards.

6. Cookies and Tracking Technologies

Our website may use cookies and similar technologies to enhance your experience. These may include:

• Essential Cookies: Necessary for website functionality, security, and navigation.
• Analytics Cookies: We may use analytics tools to understand how visitors use our site, which pages are most popular, and how we can improve our content and services.
• Preference Cookies: Used to remember your settings and preferences on future visits.

You can control cookie settings through your browser. Most browsers allow you to refuse cookies or alert you when cookies are being sent. Please note that disabling cookies may affect the functionality of our website.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, or as required by law. Retention periods vary depending on the type of data and the context:

• Contact Inquiries: Retained for up to 12 months after your last interaction, unless you request deletion sooner.
• Diagnostic Reports and Inspection Records: Retained for the duration of your engagement plus 3 years, in accordance with German commercial record-keeping requirements and to support audit documentation.
• Technical Logs: Typically retained for 30 to 90 days unless longer retention is required for security or legal reasons.
• Marketing Communications: Retained until you unsubscribe or withdraw consent.

After the retention period expires, we securely delete or anonymize your data. If you request deletion of your data, we will comply within the timeframes required by GDPR, unless legal obligations require us to retain it.

8. Your Rights Under GDPR

As a data subject in the European Union, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete data.
• Right to Erasure: You may request deletion of your data (subject to legal retention obligations).
• Right to Restrict Processing: You may request that we limit how we use your data in certain circumstances.
• Right to Data Portability: You may request your data in a structured, commonly used format and have it transferred to another service provider.
• Right to Object: You may object to processing of your data for marketing or legitimate interest purposes.
• Right to Withdraw Consent: If we process data based on your consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at hello@amandinecrochet.com. We will respond to your request within 30 days. You also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest where applicable.
• Secure authentication and access controls for staff and systems.
• Regular security assessments and updates.
• Confidentiality agreements with employees and service providers.

While we strive to protect your data, no security system is completely impenetrable. We cannot guarantee absolute security, but we are committed to maintaining industry-standard protections.

10. International Data Transfers

KitchenDiagnose is based in Berlin, Germany, and your data is primarily processed within the European Union. If we transfer data outside the EU/EEA, we do so only with appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission, or with your explicit consent.

11. Children's Privacy

Our services are intended for business professionals (restaurant owners and facility managers) and are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will promptly delete such information and notify the parent or guardian.

12. Third-Party Links

Our website may contain links to third-party websites. This privacy policy applies only to KitchenDiagnose. We are not responsible for the privacy practices of external websites. We encourage you to review the privacy policies of any third-party sites before providing your personal information.

13. Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated policy on our website and updating the effective date. Your continued use of our website and services after such changes constitutes your acceptance of the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your data.

14. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data handling practices, please contact us:

We will respond to your inquiry promptly and work with you to resolve any concerns about your privacy.