User Rights Guide - Pantryverse App

Version: 1.0.0
Effective Date: June 22, 2025
Last Updated: January 19, 2025


Introduction

As a user of the Pantryverse App, you have comprehensive rights regarding your personal data. This guide explains your rights in understandable language and shows you how to exercise them.

Important: All rights are available to you free of charge and can be exercised at any time.

1. Right of Access (Art. 15 GDPR)

What does this mean?

You have the right to know which of your data we process, why, and for how long.

What do you receive?

How can you exercise it?

Option 1: Email Request

To: statue-speer-4p@icloud.com
Subject: Access Request - [Your Name]

Dear Sir/Madam,

I hereby request information about all data stored
about me pursuant to Art. 15 GDPR.

My account details:
- Email address: [Your Email]
- Name: [Your Full Name]

For identity verification, I attach a copy of my
identity document.

Best regards,
[Your Name]

Trusted Beta manual export
Self-serve “View My Data” is not shipped for Trusted Beta. Send an email
request and Pantryverse will prepare a structured manual export from Firebase
Auth, Firestore, and Storage for your account.

Response Time

Within 30 days (usually faster)

Format

2. Right to Rectification (Art. 16 GDPR)

What does this mean?

You can have incorrect or incomplete data corrected.

Examples of corrections:

How can you exercise it?

Option 1: Directly in the App

  1. Profile → Settings
  2. Select corresponding data
  3. Enter correct information
  4. Save

Email Request

To: statue-speer-4p@icloud.com
Subject: Rectification Request - [Your Name]

Dear Sir/Madam,

I hereby request rectification of the following data:

Incorrect data: [Description]
Correct data: [Correct Information]

Proof: [If required]

Best regards,
[Your Name]

Response Time

Without delay, at the latest within 30 days

3. Right to Erasure (“Right to be Forgotten”, Art. 17 GDPR)

What does this mean?

You can request deletion of your data when certain conditions are met.

When do you have the right to deletion?

Types of deletion:

Complete Account Deletion:

  1. Open app
  2. Profile → Settings
  3. Select “Delete Account”
  4. Enter confirmation
  5. Final confirmation

Partial Data Deletion:

Email Request for Complex Deletions:

To: statue-speer-4p@icloud.com
Subject: Deletion Request - [Your Name]

Dear Sir/Madam,

I hereby request deletion of the following data:
[Specific Description]

Reason: [e.g., no longer necessary, consent withdrawn]

Best regards,
[Your Name]

Exceptions (no deletion possible):

Response Time

Without delay, at the latest within 30 days

4. Right to Restriction of Processing (Art. 18 GDPR)

What does this mean?

You can request that your data be “frozen” - stored but not further processed.

When can you request this?

How does it work?

Email Request:

To: statue-speer-4p@icloud.com
Subject: Restriction of Processing - [Your Name]

Dear Sir/Madam,

I hereby request restriction of processing of my data
pursuant to Art. 18 GDPR.

Reason: [e.g., accuracy contested, objection lodged]

Affected data: [Specific Description]

Best regards,
[Your Name]

Effect

5. Right to Data Portability (Art. 20 GDPR)

What does this mean?

You can receive your data in a structured format and transfer it to another provider.

Which data is portable?

Available formats:

How can you exercise it?

Trusted Beta manual export
Self-serve data export is not shipped for Trusted Beta. Send an email request
with the desired format, and Pantryverse will prepare a structured export for
your account.

Email Request

To: statue-speer-4p@icloud.com
Subject: Data Transfer - [Your Name]

Dear Sir/Madam,

I hereby request transfer of my data pursuant to Art. 20 GDPR.

Desired format: [JSON/CSV/XML/PDF]
Purpose: [e.g., transfer to another provider]

Best regards,
[Your Name]

Direct Transfer

Upon request, Pantryverse will assess whether direct transfer to another
provider is technically possible for the specific destination. If direct
transfer is not practical, you will receive a structured export file.

6. Right to Object (Art. 21 GDPR)

What does this mean?

You can object to processing of your data when it is based on “legitimate interests.”

When can you object?

Areas in the Pantryverse App:

How can you object?

Option 1: In the App

  1. Profile → Privacy
  2. Select “Data Processing”
  3. Deactivate corresponding areas
  4. Save

Option 2: Email

To: statue-speer-4p@icloud.com
Subject: Objection - [Your Name]

Dear Sir/Madam,

I hereby object to processing of my data for the
following purposes:
[Specific Areas]

Reason: [Optional but helpful]

Best regards,
[Your Name]

Effect

What does this mean?

You can withdraw any given consent at any time.

How can you withdraw?

Email

To: statue-speer-4p@icloud.com
Subject: Withdrawal of Consent - [Your Name]

Dear Sir/Madam,

I hereby withdraw my consent for:
[Specific Consents]

Date of original consent: [If known]

Best regards,
[Your Name]

Important Notes:

8. Right to Lodge a Complaint (Art. 77 GDPR)

What does this mean?

You can complain to the data protection supervisory authority if you believe your rights have been violated.

Competent Authority:

Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Str. 153
53117 Bonn
Germany

Contact:

Online Complaint:

https://www.bfdi.bund.de/SharedDocs/Downloads/DE/Beschwerde/BeschwerdeformularBfDI.html

When should you complain?

Complaint Procedure:

  1. Fill out complaint form
  2. Attach relevant documents
  3. Submit to BfDI
  4. Processing by authority
  5. Decision and possible measures

9. Judicial Remedy (Art. 79 GDPR)

What does this mean?

You can sue us in court if your data protection rights have been violated.

Competent Courts:

Claims:

10. Practical Tips for Exercising Rights

Preparing Your Request:

  1. Prove Identity: Attach copy of ID
  2. Be Specific: Describe exactly what you want
  3. Observe Deadlines: 30 days processing time
  4. Document: Keep all communication

Sample Checklist for Requests:

Escalation Levels:

  1. Direct Request: statue-speer-4p@icloud.com
  2. Follow-up: After 30 days without response
  3. Complaint: To data protection authority
  4. Court Action: As last resort

Free Support:

11. Special Situations

Minors (under 16 years):

Deceased Persons:

Companies and Self-Employed:

12. Frequently Asked Questions (FAQ)

Q: Do the information requests cost anything?

A: No, all data protection rights are free of charge.

Q: How long does processing take?

A: Maximum 30 days, usually faster.

Q: Can I request my data by phone?

A: For security reasons, only in writing (email/letter).

Q: What happens after account deletion?

A: All data is deleted after retention periods.

Q: Can I restore deleted data?

A: No, deletions are final (except during backup periods).

Q: Are my requests logged?

A: Yes, for evidence and quality assurance.


Contact and Support

Privacy Team

Email: statue-speer-4p@icloud.com
Response Time: Within 48 hours
Languages: German, English

Specialized Contacts

Postal Address

Torsten Hubertus Kunz
Attn: Privacy Team
Pistoriusstraße 9a
13086 Berlin
Germany


Last Updated: January 19, 2025
Next Review: July 22, 2025

This guide is regularly updated to reflect current jurisprudence and practice.

For questions about your rights, please contact: statue-speer-4p@icloud.com