GDPR Privacy Policy

# FoodX GDPR Privacy Policy — internal working draft

For people in the EEA, UK, or Switzerland, FoodX will provide the applicable local notice. The final notice must identify the controller, purposes and lawful bases, data categories, recipients, retention, international-transfer safeguards, automated decision-making, and rights.

Rights may include access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. People may complain to their supervisory authority. The final version must state whether FoodX appoints a representative or data-protection officer and must not claim safeguards that are not implemented.