1. Introduction

Welcome to TalkAboutBeer ("we," "our," or "us"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and protect your personal information. This Privacy Policy explains how we handle your data when you use our beer recommendation and discussion platform.

2. Data Controller Information

3. Legal Basis for Processing

We process your personal data based on the following legal grounds under the GDPR:

• Consent (Article 6(1)(a)): For marketing communications and optional features
• Contract Performance (Article 6(1)(b)): To provide our services and fulfill our obligations to you
• Legitimate Interests (Article 6(1)(f)): For analytics, security, and service improvement
• Legal Obligation (Article 6(1)(c)): To comply with applicable laws and regulations

4. Information We Collect

4.1 Information You Provide Directly

• Account Information: Username, email address, password (encrypted)
• Profile Information: Display name, profile picture, bio, location (optional)
• Beer Preferences: Taste preferences, ratings, reviews, favorites
• Communications: Messages, comments, forum posts, customer support inquiries
• User-Generated Content: Photos, reviews, ratings, discussion posts

4.2 Information Collected Automatically

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, features used, time spent on platform, click patterns
• Cookies and Tracking: Session cookies, preference cookies, analytics cookies
• Location Data: General location (if permitted) for local recommendations

4.3 Information from Social Media Platforms

5. How We Use Your Information

5.1 Service Provision

• Create and manage your user account
• Provide personalized beer recommendations using AI (Claude)
• Enable social features (reviews, ratings, discussions)
• Process and respond to your inquiries
• Deliver requested features and functionality

5.2 AI-Powered Recommendations

9. Your Rights Under GDPR

As a data subject, you have the following rights:

9.1 Access Rights

• Request access to your personal data
• Receive a copy of your data in a structured, machine-readable format

9.2 Correction and Updates

• Request correction of inaccurate or incomplete data
• Update your profile information at any time

9.3 Deletion Rights ("Right to be Forgotten")

• Request deletion of your personal data
• Request removal of specific content or information

9.4 Facebook Data Deletion

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data encrypted in transit and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Security Monitoring: Continuous monitoring for security threats
• Regular Audits: Regular security assessments and updates
• Staff Training: Regular privacy and security training for our team

12. Cookies and Tracking Technologies

We use cookies and similar technologies as described in our Cookie Policy. You can manage your cookie preferences at any time.

16. Contact Information