Data controller: [ĮRAŠYKITE: vardas, pavardė arba įmonės pavadinimas, kodas, adresas]. Website: kagaminti.eu (“Ką gaminti?”). Questions and requests: info@kagaminti.eu.
2. What data we collect
Email address – to run your account and send emails.
Household and diet details: number of people, diet type, allergies and intolerances, disliked foods, cuisine preferences, cooking time, equipment, delivery day, time and time zone, language. Allergies can reveal health information (special category data).
Your ratings (“liked / disliked”) and the taste profile built from them.
Payments: we never see or store your card details – Stripe processes payments. We keep only Stripe customer and subscription identifiers and the subscription status.
Technical data: IP address and request logs for security and abuse prevention.
3. Why and on what legal basis
Creating and sending menus, managing your account and payment – performance of a contract (GDPR Art. 6(1)(b)).
Allergy and other health-related data – your explicit consent (Art. 9(2)(a)), given in the sign-up form. You can withdraw it at any time by deleting your account.
Accounting records – legal obligation (Art. 6(1)(c)).
4. Who we share data with
Our service providers (processors) handle data on our behalf:
Hosting and email provider (serveriai.lt, Lithuania) and email delivery services.
Anthropic (USA) – the AI service that builds menus. We send diet, allergy, preference and rating data, but not your email address.
Stripe (Ireland / USA) – payments and subscription management.
Transfers outside the EEA rely on a European Commission adequacy decision or Standard Contractual Clauses. We do not sell data or use it for advertising.
5. How long we keep it
Account data – while you use the service. When you delete your account (“Delete account” on your account page), your data, menus, ratings and taste profile are erased and the subscription is cancelled.
AI request log contents – up to 60 days.
Accounting records (e.g. payments) – as long as the law requires.
6. Your rights
You may access, correct or delete your data, restrict or object to processing, receive a portable copy, and withdraw consent. Most of this is available on your account page (the link is in every email); otherwise write to info@kagaminti.eu. We reply within 30 days. You may complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or your local supervisory authority.
7. Cookies
We use no analytics or advertising cookies and do not track you. Only strictly necessary technical mechanisms are used (e.g. the administrator session, visible only to the administrator).
8. Security
We use encrypted connections (HTTPS), signed email links, access controls and regular backups. No method is perfectly secure, but we keep improving protection.
9. Children
The service is for adults. We do not intend to process data of people under 16.
10. Changes
We may update this policy; material changes will be posted on this page with the update date.