Privacy Policy

1. Data controller

The controller responsible for processing the personal data collected on this website is dishity.com. You can contact us through the contact page.

2. Data we collect

We collect the following personal data when you use our service:

• Registration data: name, email address and password (encrypted).
• Google authentication data: name, email and Google identifier, if you choose to sign in with Google OAuth.
• Profile data: avatar and public name you choose to display.
• Generated content: ratings, comments and photos you post on the platform.
• Browsing data: IP address, browser type, pages visited and technical cookies necessary for the site to function.
• Analytics data: aggregated and anonymous usage statistics collected via Google Analytics (page views, traffic source). See our cookie policy for more detail.

3. Purpose of processing

We use your data for the following purposes:

• Managing your user account and authentication.
• Allowing you to rate dishes, post comments and upload photos.
• Displaying your public name and avatar alongside your content.
• Sending you communications related to your account (email verification, password reset).
• Improving the service and user experience.
• Complying with applicable legal obligations.

4. Legal basis for processing

The processing of your data is based on the consent you give when registering and using the platform, as well as on the performance of the service contract (terms of use). In certain cases, processing may be based on the legitimate interest of dishity in improving its services or on compliance with legal obligations.

5. Data retention

We retain your personal data for as long as you keep your account active. If you request the deletion of your account, we will proceed to delete your personal data within a reasonable period, unless we must retain it to comply with legal obligations. Comments and ratings may be kept in anonymized form.

6. Disclosure of data to third parties

We do not sell or transfer your personal data to third parties for commercial purposes. We only share data with:

• Service providers: companies that help us operate the platform (hosting, sending emails) and that process data on our behalf under confidentiality agreements.
• Google: if you use Google OAuth authentication, basic profile data is exchanged with Google in accordance with its privacy policy. We also use Google Analytics to obtain aggregated usage statistics for the site.
• Authorities: when required by law or to protect our legal rights.

7. Security

We implement technical and organizational measures to protect your personal data, including password encryption with bcrypt, the use of HTTPS connections, secure cookies (httpOnly, sameSite) and secure session storage.

8. Your rights

In accordance with the General Data Protection Regulation (GDPR), you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data.
• Restriction: request the restriction of the processing of your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data under certain circumstances.

To exercise these rights, contact us through the contact page. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).

9. Changes to this policy

We reserve the right to modify this privacy policy at any time. Any change will be published on this page with the corresponding update date. We recommend reviewing it periodically.