GDPR Compliance

This page explains how culvers-menu.us complies with the EU General Data Protection Regulation (GDPR) and the UK GDPR. It supplements our Privacy Policy with the detail those regulations specifically require.

1. Data controller

For personal data processed through this Site, the data controller is the operator of culvers-menu.us.

Contact for all data protection matters: contact@culvers-menu.us

We are a small independent publisher and are not required to appoint a Data Protection Officer. Data protection enquiries are handled directly by the site operator.

2. What personal data we process

Data	Source	Why
Name, email, message content	You, via the contact form	To reply to your enquiry
IP address (often truncated)	Automatic	Security, abuse prevention, approximate geolocation for ad delivery
Device, browser, OS, screen size	Automatic	Correct page rendering, error diagnosis
Pages viewed, session behavior	Analytics cookies	Aggregate understanding of which pages are useful
Advertising identifiers	Ad vendor cookies	Ad selection, frequency capping, measurement

We do not process special category data. We don't ask for it and there's no reason a menu reference site would need it.

3. Legal bases (Article 6)

Processing	Legal basis
Replying to your contact form message	Legitimate interests (Art. 6(1)(f)) — responding to an enquiry you initiated
Essential site function and security	Legitimate interests (Art. 6(1)(f)) — operating a secure website
Analytics cookies	Consent (Art. 6(1)(a))
Advertising cookies and personalized ads	Consent (Art. 6(1)(a))
Retaining records where law requires	Legal obligation (Art. 6(1)(c))

Where we rely on legitimate interests, we've assessed that our interest in operating and securing the Site does not override your rights and freedoms, given the limited and non-sensitive nature of the data.

4. Consent and the ePrivacy Directive

Non-essential cookies — analytics and advertising — are set only after you give consent through our cookie notice.

• Consent is opt-in, not pre-ticked
• Refusing is as easy as accepting
• You can withdraw consent at any time by reopening cookie settings from the banner or footer
• Withdrawal doesn't affect processing that already lawfully occurred
• We record your consent choice so we can honour it

Full detail is on our Cookie Policy.

5. Your rights (Articles 15–22)

• Right of access — a copy of the personal data we hold about you
• Right to rectification — correction of inaccurate data
• Right to erasure — deletion of your data ("right to be forgotten")
• Right to restriction — limit how we process your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interests, and to direct marketing at any time
• Rights around automated decision-making — we do not carry out automated decision-making or profiling that produces legal or similarly significant effects
• Right to withdraw consent — at any time, without penalty

6. How to exercise your rights

Email contact@culvers-menu.us describing what you want.

• We respond within one month, extendable by two further months for complex requests — we'll tell you if that applies
• There is no charge, unless a request is manifestly unfounded or excessive
• We may ask for information to verify your identity, but only what's proportionate
• If we can't act on your request, we'll explain why and tell you how to complain

Because we hold very little identifiable data, most access requests result in a short answer — usually just your contact form correspondence, if any.

7. Data retention

• Contact form correspondence: kept while the enquiry is open, plus a limited record-keeping period, then deleted
• Analytics: retained in aggregate per our provider's configured retention window
• Server logs: retained briefly for security and troubleshooting
• Advertising data: held by third-party vendors under their own retention policies

8. Processors and third parties

We use third-party processors for hosting, content delivery, analytics, and advertising. Each is engaged under terms requiring appropriate security and lawful processing.

Advertising vendors may act as independent controllers for the data they collect through their own cookies. Their processing is governed by their own privacy policies, which we make available through our consent notice.

9. International transfers (Chapter V)

Some processors are based outside the EEA and UK, including in the United States. Transfers rely on appropriate safeguards such as Standard Contractual Clauses, UK International Data Transfer Addenda, adequacy decisions, or equivalent mechanisms offered by the relevant provider.

10. Security (Article 32)

• HTTPS across the entire Site
• Reputable infrastructure providers with their own security controls
• Access to any collected data limited to the site operator
• Minimal data collection by design — we don't gather what we don't need

11. Personal data breaches (Articles 33–34)

If a breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and notify affected individuals directly where the risk is high.

12. Children

The Site is aimed at a general adult audience. We do not knowingly process personal data of children under 16 (or the lower age set by your member state, minimum 13). Contact us if you believe we have, and we'll delete it.

13. Right to complain

You may lodge a complaint with your national data protection authority at any time. In the UK that's the Information Commissioner's Office (ico.org.uk). In the EU, contact the supervisory authority for your member state. We'd appreciate the chance to resolve it with you first, but you're not required to come to us before complaining.

14. Contact

Email: contact@culvers-menu.us
Or use: our Contact page