Terms of Service

Login

Registration as a user is free of charge. Certain functionalities (such as participation in groups and forums or the creation of blog posts) are only available to registered users. Registered users can only be natural persons who are at least partially legally competent. Registration is done via user login (username/password), and the login must be confirmed via a personal email address.

The user assures that the information provided, particularly the user information, is correct and complete, and undertakes to always keep the contact details in the user profile up to date.

The user undertakes to store the transmitted access data carefully and protected from third-party access. They are not authorized to provide their access to third parties or to allow third parties to use it. In the event of misuse of the user access data, the user bears full responsibility. Misuse can lead to the suspension or deletion of the account.

The operator is entitled at any time to reject the registration of users and/or delete it without notice. This applies in particular to registrations with known spam domains, incomplete or obviously incorrect login information, accounts suspected of spam, as well as for the publication of irrelevant content or repeated posting of advertising messages or other commercial content or, for example, the operation of link farms (e.g., for link building, SEO optimization, affiliate business, etc.).

The operator reserves the right in exceptional cases to change a user's username (e.g., in case of ambiguous or inappropriate naming), in which case the operator will inform the user immediately by email.

User Obligations and Responsibility

By registering the user account, the user grants the operator, for the duration of the active user registration, an irrevocable, transferable, and non-exclusive right of use, which entitles the operator to utilize it within the online offering. The usage rights are unrestricted in terms of time, space, and medium (web, mobile, etc.). Upon deletion of the user account and deletion of user contributions, the content will also be irrevocably removed; see also our Privacy Policy.

The user is fully responsible for their behavior on the portal, the personal user blog, and all content posted by them (e.g., texts, images, videos, comments, etc.). Before posting content, the user must ensure that their behavior or the content submitted by them does not violate legal regulations, public morals, or third-party rights (e.g., trademark, name, copyright, and data protection law, youth protection regulations, etc.) and undertakes to comply with country-specific regulations of their home country and the EU, particularly the imprint obligation and GDPR. Furthermore, before posting texts or images, the user undertakes to obtain the necessary consent from the parties involved, such as photographers or depicted or mentioned individuals.

The user shall indemnify the operator against claims by third parties for content submitted by the user and shall reimburse the operator for any damages and costs, including the costs of legal defense against third-party claims.

Operator's Duties and Responsibility

The operator undertakes to publish the user's content in its original version; no content or legal review, nor editorial processing or modification of the content to be published will take place.

The retention period of the submitted content on the portal is indefinite; however, there is no guaranteed right to retrieval and availability for the free service. The user has the option to administer their content independently at any time (modify content, delete, etc.).

The operator reserves the right to reject registrations or content without stating reasons and to delete inactive user accounts during system cleanup. There is no entitlement to a free registration, not even after a registration has already taken place. Regardless of the fact that the operator does not review or edit the material, they reserve the right not to publish content under special circumstances without stating reasons or to remove already published content again. This applies particularly to users or blogs that do not comply with legal regulations (e.g., imprint obligation).

The operator will endeavor, within the scope of its capabilities, to keep the platform available as uninterruptedly as possible; no specific availability is promised. Liability for disruptions or failures is excluded.
The operator is entitled to change functionalities, appearance, or other features of the platform at its own discretion and to place advertising on or within the submitted content. The operator is not obligated to users for the storage or saving of content.

The operator is entitled to change or supplement the terms of use.

Our Terms of Service contain excerpts from the WordPress.com Terms of Service by Automattic, which are shared on Github under the Creative Commons Attribution-ShareAlike 4.0 International license.

As of: February 5, 2022

×

Privacy Policy

This Privacy Policy informs you about the type, scope, and purpose of the processing of personal data (hereinafter referred to as "data") within our online offering and its associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as "online offering"). With regard to the terminology used, such as "processing" or "controller," we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

Who we are

Foodies is a private and independent food community for gourmets and connoisseurs of foodies, by foodies. The project is currently still in its startup phase and will continue to be improved and optimized.

Controller: Ing. Eric Hallwachs 1070 Vienna, Austria

What personal data we collect and why we collect it

Types of data processed:

• Inventory data (e.g., names, usernames, addresses)
• Contact data (e.g., email, phone numbers)
• Content data (e.g., text entries, blog posts, contributions in discussion groups and forums, photographs, images, videos)
• Usage data (e.g., websites visited, interest in content, access times)
• Meta/communication data (e.g., device information, IP addresses)

Purpose of processing

• Provision of the online offering, its functions, and content
• Responding to contact requests and communication with users
• Security measures
• Reach measurement/Marketing

Terms used

"Personal data" means any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. "Processing" means any operation or set of operations which is performed upon personal data, whether or not by automated means. The term covers practically any handling of data. "Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person; "Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person in order to analyse or predict, in particular, personal preferences, interests, behaviour, location or movements of that natural person; "Controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. "Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller;

Relevant legal bases

In accordance with Art. 13 GDPR, we inform you about the legal bases of our data processing. If the legal basis is not mentioned in the privacy policy, the following applies: The legal basis for obtaining consent is Art. 6 para. 1 lit. a and Art. 7 GDPR, the legal basis for processing for the fulfillment of our services and the execution of contractual measures as well as answering inquiries is Art. 6 para. 1 lit. b GDPR, the legal basis for processing for the fulfillment of our legal obligations is Art. 6 para. 1 lit. c GDPR, and the legal basis for processing for the protection of our legitimate interests is Art. 6 para. 1 lit. f GDPR. In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 lit. d GDPR serves as the legal basis.

Security measures

In accordance with Art. 32 GDPR, taking into account the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk; these measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, disclosure, safeguarding availability and separation thereof. Furthermore, we have established procedures that ensure the exercise of data subject rights, deletion of data, and response to data threats. We also consider the protection of personal data from the outset in the design and/or selection of hardware, software and procedures, in accordance with the principle of data protection through technology design and data protection-friendly default settings (Art. 25 GDPR). SSL or TLS encryption For security reasons and to protect the transmission of all web content, this website uses SSL encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the padlock symbol in your browser bar. If SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

Cooperation with processors and third parties

If we disclose data to other persons and companies (contract processors or third parties) within the scope of our processing, transmit it to them, or otherwise grant them access to the data, this is only done on the basis of a legal permit (e.g., if the transfer of data to third parties is necessary for the fulfillment of the contract according to Art. 6 para. 1 lit. b GDPR), you have consented, a legal obligation provides for this, or on the basis of our legitimate interests (e.g., when using agents, web hosts, etc.). If we commission third parties to process data on the basis of a so-called "order processing contract", this is done on the basis of Art. 28 GDPR.

Comments

When visitors write comments on the site, we collect the data shown in the comment form, and also the visitor's IP address and browser user agent string to help spam detection. An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to see if you are using it. Gravatar service privacy policy can be found here: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you are a registered user and upload photos to this website, you should avoid uploading photos with EXIF GPS location data. Visitors to this website can download photos stored on this website and extract the location information.

Cookies

When you leave a comment on our site, you may opt-in to save your name, email address, and website in cookies. These are for your convenience so that you do not have to fill in your details again when you leave another comment. These cookies will last for one year. If you have an account and you log in to this site, we will set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser. When you log in, we will also set up several cookies to save your login information and your screen display choices. Login cookies last for two days, and screen options cookies last for a year. If you select "Remember me", your login will persist for two weeks. When you log out of your account, the login cookies will be erased. When you edit or publish an article, an additional cookie will be saved in your browser. This cookie includes no personal data and simply indicates the post ID of the article you just edited. It expires after 1 day.

Embedded content from other websites

Posts on this site may contain embedded content (e.g., videos, images, posts, aggregated content from user blogs, etc.). Embedded content from other websites behaves exactly as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking services, and record your interaction with this embedded content, including your interaction with the embedded content if you have an account and are logged into this site.

How long we store your data

If you write a comment, it and its metadata are stored indefinitely. This way, we can automatically recognize and approve follow-up comments instead of holding them in a moderation queue. For users who register on our website, we also store the personal information they provide in their user profiles. All users can view, change, or delete their personal information at any time (the username cannot be changed). Website administrators can also view and change this information. If you publish your own post (e.g., a recipe) on our website, we store it until the post or the respective uploads (e.g., photos, videos, etc.) are deleted. Deleted content cannot be restored. Registered users can delete their posts and uploads themselves.

What rights you have over your data

If you have an account or a blog on this website, or have written comments, you can request an export of your personal data from us, including all data you have provided to us. Furthermore, you can request the deletion of all personal data that we have stored about you. This does not include data that we must retain for administrative, legal, or security reasons.

Where we send your data

Visitor comments and activity updates in the "Activity Feed" may be checked by an automated spam detection service; see the "Akismet Anti-Spam Check" section.

Hosting

The hosting services we use are for the provision of the following services: infrastructure and platform services, computing capacity, storage space and database services, security services, and technical maintenance services, which we use for the purpose of operating this online offering. In doing so, we or our hosting provider process inventory data, contact data, content data, usage data, meta and communication data of users, interested parties, and visitors to this online offering based on our legitimate interests in an efficient and secure provision of this online offering in accordance with Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).

Collection of access data and log files

We, or our hosting provider, collect data about every access to the server on which this service is located (so-called server log files) on the basis of our legitimate interests within the meaning of Art. 6 (1) lit. f GDPR. Access data includes the name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address, and the requesting provider. Log file information is stored for a maximum of 7 days for security reasons (e.g., to investigate abuse or fraud) and then deleted. Data whose further storage is required for evidence purposes is excluded from deletion until the respective incident has been finally clarified.

Registration function

Users can optionally create a user account. During registration, users will be informed of the required mandatory information. The data entered during registration will be used for the purposes of using the service. Users may be informed via email about service or registration-related information, such as changes to the scope of the service or technical circumstances. If users have terminated their user account, their data relating to the user account will be deleted, subject to the condition that retention is necessary for commercial or tax reasons pursuant to Art. 6(1)(c) GDPR. It is the users' responsibility to back up their data before the end of the contract upon termination. We are entitled to irrevocably delete all data stored by the user during the service's usage period. When using our registration and login functions, as well as the user account, we store the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user's interest in protection against abuse and other unauthorized use. This data will generally not be passed on to third parties, unless it is necessary for the enforcement of our claims or there is a legal obligation to do so pursuant to Art. 6(1)(c) GDPR. IP addresses will be anonymized or deleted no later than 7 days later.

Contact

When contacting us (e.g., via contact form, email, phone, or social media), user data will be processed to handle the contact request and its execution pursuant to Art. 6(1)(b) GDPR. User data may be stored in a Customer Relationship Management System ("CRM System") or a comparable inquiry organization. We delete inquiries when they are no longer required. We review the necessity every two years; furthermore, statutory retention periods apply.

Akismet Anti-Spam Check

Our online offering uses the service "Akismet", which is offered by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Its use is based on our legitimate interests within the meaning of Art. 6 (1) (f) GDPR. With the help of this service, comments from real people are distinguished from spam comments. To do this, all comment data is sent to a server in the USA, where it is analyzed and stored for comparison purposes for four days. If a comment is classified as spam, the data will be stored beyond this period. This data includes the entered name, email address, IP address, comment content, referrer, information about the browser used and the computer system, and the time of entry. Further information on the collection and use of data by Akismet can be found in Automattic's privacy policy: https://automattic.com/privacy/. Users are welcome to use pseudonyms or refrain from entering their name or email address. You can prevent the transfer of data entirely by not using our comment system. That would be a shame, but unfortunately, we do not see any other alternatives that work just as effectively.

Retrieval of profile pictures from Gravatar

Within our online services and particularly in the blog, we use the Gravatar service from Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA. Gravatar is a service where users can log in and store profile pictures and their email addresses. When users leave posts or comments on other online presences (especially in blogs) using their respective email addresses, their profile pictures can be displayed next to their posts or comments. To do this, the email address provided by the users is encrypted and transmitted to Gravatar to check if a profile is stored for it. This is the sole purpose of transmitting the email address, and it will not be used for any other purpose but will be deleted afterward. The use of Gravatar is based on our legitimate interests within the meaning of Art. 6(1)(f) GDPR, as we use Gravatar to offer contributors of posts and comments the opportunity to personalize their contributions with a profile picture. By displaying the images, Gravatar learns the IP address of the users, as this is necessary for communication between a browser and an online service. Further information on the collection and use of data by Gravatar can be found in Automattic's privacy policy: https://automattic.com/privacy/. If users do not want a user image linked to their email address with Gravatar to appear in the comments, they should use an email address for commenting that is not stored with Gravatar. We also point out that it is possible to use an anonymous or no email address at all if users do not wish their own email address to be sent to Gravatar. Users can prevent the transmission of data entirely by not using our comment system.

Google Analytics

We use Google Analytics, a web analytics service provided by Google LLC ("Google"), based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6(1)(f) GDPR). Google uses cookies. The information generated by the cookie about the use of the online offering by users is generally transmitted to a Google server in the USA and stored there. Google is certified under the Privacy Shield agreement and thus offers a guarantee of compliance with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active). Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering, and to provide us with other services related to the use of this online offering and internet usage. Pseudonymous usage profiles of users can be created from the processed data. We only use Google Analytics with IP anonymization enabled. This means that users' IP addresses are truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. The IP address transmitted by the user's browser will not be merged with other Google data. Users can prevent the storage of cookies by adjusting their browser software settings; users can also prevent the collection of data generated by the cookie and related to their use of the online offering to Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information about data usage by Google, settings, and opt-out options can be found in Google's privacy policy (https://policies.google.com/technologies/ads) and in the settings for displaying Google ads (https://adssettings.google.com/authenticated). Users' personal data will be deleted or anonymized after 14 months.

Online presences on social media

We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties, and users there and to inform them about our services. The terms and conditions and data processing policies of the respective providers apply when accessing the respective networks and platforms. Unless otherwise stated in our privacy policy, we process user data if they communicate with us within the social networks and platforms, e.g., by posting on our online presences or sending us messages.

Integration of third-party services and content

Based on our legitimate interests (i.e., interest in the analysis, optimization, and economic operation of our online offering within the meaning of Art. 6 (1) lit. f. GDPR), we use content or service offerings from third-party providers within our online offering to integrate their content and services, such as videos or fonts (hereinafter collectively referred to as "content"). This always requires that the third-party providers of this content perceive the IP address of the users, as they could not send the content to their browser without the IP address. The IP address is therefore necessary for the presentation of this content. We endeavor to use only such content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" allow information such as visitor traffic on the pages of this website to be evaluated. The pseudonymous information may also be stored in cookies on the users' devices and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, as well as further information about the use of our online offering, and may be combined with such information from other sources.

This privacy policy is currently valid and dated June 2024.

Due to the further development of the online offering or due to changed legal or official requirements, it may become necessary to change this privacy policy. The current version of the privacy policy can be accessed and printed out on the website at any time.

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke and the WordPress Privacy Policy by Automattic

×