GDPR - emmascakestudio.net

General Data Protection Regulation (GDPR) Compliance Statement for Emma’s Cake Studio
Effective Date: November 15, 2025

Introduction

At Emma’s Cake Studio (https://emmascakestudio.net), we are committed to protecting your personal data and respecting your privacy rights in compliance with the General Data Protection Regulation (GDPR).

This GDPR Compliance Statement supplements our Privacy Policy and provides additional information for users located in the European Union (EU) and European Economic Area (EEA).

Data Controller

The data controller for emmascakestudio.net is:

Emma’s Cake Studio
1247 Sugar Maple Lane, Suite 508
San Diego, CA 92101, USA
Email: support@emmascakestudio.net
Phone: +1 (619) 845-7724

Personal Data Collection and Purpose

We may collect and process personal data to enhance your experience and provide essential website services. Personal data may be processed for:

Responding to messages, comments, or inquiries
Sending newsletters, baking updates, or promotional content (if you subscribe)
Improving website content, performance, and user experience
Maintaining website security and preventing fraudulent or unauthorized activities

The legal bases for processing include:

Consent – When you voluntarily subscribe, submit forms, or provide personal information.
Contract – When data processing is necessary to provide requested services.
Legitimate Interests – To maintain website functionality, optimize user experience, and ensure site security.

If you are located in the EU or EEA, you have the right to:

Access – Request copies of your personal data
Rectification – Correct inaccurate or incomplete information
Erasure – Request deletion of your personal data where applicable
Restriction – Limit how your data is processed
Portability – Request your data in a structured, commonly used format
Objection – Object to processing based on legitimate interests or direct marketing

Data Security

We apply appropriate technical and organizational measures to safeguard your personal data, including:

Secure hosting environments and encrypted data transmission
Regular security monitoring and updates
Restricted access to authorized personnel only

Data Transfers

Personal data may be processed outside the EU or EEA. When such transfers occur, we ensure appropriate safeguards (such as Standard Contractual Clauses or equivalent protections) are in place to ensure lawful and secure processing.

If your personal data is processed based on consent, you may withdraw your consent at any time by contacting us using the details provided below.

Complaints

If you believe your data protection rights have been violated, you have the right to file a complaint with your local data protection authority within the EU or EEA.

Changes to This Statement

We may update this GDPR Compliance Statement periodically to reflect legal, technical, or operational changes. Any updates will be posted on this page with a revised effective date.

Contact Us

For questions or requests regarding your personal data, please contact: