Effective Date: January 1, 2024
General Data Protection Regulation Compliance
Bake Value Collective is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) for all users within the European Union and European Economic Area.
Legal Basis for Processing
We process personal data based on the following legal grounds:
- Consent: When you explicitly agree to processing
- Contract: To fulfill our contractual obligations
- Legal Obligation: To comply with applicable laws
- Legitimate Interest: For business operations and improvements
Your Rights Under GDPR
As a data subject, you have the following rights:
- Right of Access: Request information about your personal data
- Right of Rectification: Correct inaccurate personal data
- Right of Erasure: Request deletion of your personal data
- Right of Restriction: Limit processing of your data
- Right of Portability: Receive your data in a structured format
- Right to Object: Object to processing based on legitimate interests
- Rights Related to Automated Decision-Making: Including profiling
Data Protection Measures
We implement appropriate technical and organizational measures to ensure data security:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and staff training
- Data backup and recovery procedures
Data Retention
We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, or resolve disputes.
Data Transfers
When transferring data outside the EU/EEA, we ensure adequate protection through appropriate safeguards such as standard contractual clauses or adequacy decisions.
Data Breach Notification
In the event of a data breach likely to result in high risk to your rights and freedoms, we will notify you without undue delay.
Contact Information
Data Protection Officer:
Bake Value Collective
847 North Michigan Avenue
Chicago, IL 60611, USA
Email: [email protected]
Phone: +1 (312) 555-8974
Supervisory Authority
You have the right to lodge a complaint with your local data protection authority if you believe your rights have been violated.