User Rights Guide - Pantryverse App
Version: 1.0.0
Effective Date: June 22, 2025
Last Updated: January 19, 2025
Introduction
As a user of the Pantryverse App, you have comprehensive rights regarding your personal data. This guide explains your rights in understandable language and shows you how to exercise them.
Important: All rights are available to you free of charge and can be exercised at any time.
1. Right of Access (Art. 15 GDPR)
What does this mean?
You have the right to know which of your data we process, why, and for how long.
What do you receive?
- Complete list of all stored data
- Purpose of processing
- Legal bases
- Recipients of data
- Storage duration
- Your additional rights
How can you exercise it?
Option 1: Email Request
To: statue-speer-4p@icloud.com
Subject: Access Request - [Your Name]
Dear Sir/Madam,
I hereby request information about all data stored
about me pursuant to Art. 15 GDPR.
My account details:
- Email address: [Your Email]
- Name: [Your Full Name]
For identity verification, I attach a copy of my
identity document.
Best regards,
[Your Name]
Trusted Beta manual export
Self-serve “View My Data” is not shipped for Trusted Beta. Send an email
request and Pantryverse will prepare a structured manual export from Firebase
Auth, Firestore, and Storage for your account.
Response Time
Within 30 days (usually faster)
Format
- Structured overview (PDF)
- Machine-readable data (JSON/CSV)
- English language
2. Right to Rectification (Art. 16 GDPR)
What does this mean?
You can have incorrect or incomplete data corrected.
Examples of corrections:
- Incorrect email address
- Outdated preferences
- Erroneous recipe data
- Incorrect profile information
How can you exercise it?
Option 1: Directly in the App
- Profile → Settings
- Select corresponding data
- Enter correct information
- Save
Email Request
To: statue-speer-4p@icloud.com
Subject: Rectification Request - [Your Name]
Dear Sir/Madam,
I hereby request rectification of the following data:
Incorrect data: [Description]
Correct data: [Correct Information]
Proof: [If required]
Best regards,
[Your Name]
Response Time
Without delay, at the latest within 30 days
3. Right to Erasure (“Right to be Forgotten”, Art. 17 GDPR)
What does this mean?
You can request deletion of your data when certain conditions are met.
When do you have the right to deletion?
- Data is no longer necessary for original purpose
- You withdraw your consent
- Data was processed unlawfully
- Deletion is required to fulfill legal obligations
Types of deletion:
Complete Account Deletion:
- Open app
- Profile → Settings
- Select “Delete Account”
- Enter confirmation
- Final confirmation
Partial Data Deletion:
- Delete individual recipes
- Remove shopping lists
- Clear search history
- Reset specific preferences
Email Request for Complex Deletions:
To: statue-speer-4p@icloud.com
Subject: Deletion Request - [Your Name]
Dear Sir/Madam,
I hereby request deletion of the following data:
[Specific Description]
Reason: [e.g., no longer necessary, consent withdrawn]
Best regards,
[Your Name]
Exceptions (no deletion possible):
- Ongoing contracts
- Legal retention obligations
- Legitimate interests (e.g., security)
Response Time
Without delay, at the latest within 30 days
4. Right to Restriction of Processing (Art. 18 GDPR)
What does this mean?
You can request that your data be “frozen” - stored but not further processed.
When can you request this?
- You contest the accuracy of data
- Processing is unlawful
- You have objected
- Data is needed for legal claims
How does it work?
Email Request:
To: statue-speer-4p@icloud.com
Subject: Restriction of Processing - [Your Name]
Dear Sir/Madam,
I hereby request restriction of processing of my data
pursuant to Art. 18 GDPR.
Reason: [e.g., accuracy contested, objection lodged]
Affected data: [Specific Description]
Best regards,
[Your Name]
Effect
- Data is marked and “frozen”
- No further processing (except storage)
- You are informed about lifting of restriction
5. Right to Data Portability (Art. 20 GDPR)
What does this mean?
You can receive your data in a structured format and transfer it to another provider.
Which data is portable?
- All data provided by you
- Recipes and ingredients
- Shopping lists
- Preferences and settings
- Usage history
Available formats:
- JSON: Structured, machine-readable
- CSV: For spreadsheet applications
- XML: For other apps
- PDF: Human-readable
How can you exercise it?
Trusted Beta manual export
Self-serve data export is not shipped for Trusted Beta. Send an email request
with the desired format, and Pantryverse will prepare a structured export for
your account.
Email Request
To: statue-speer-4p@icloud.com
Subject: Data Transfer - [Your Name]
Dear Sir/Madam,
I hereby request transfer of my data pursuant to Art. 20 GDPR.
Desired format: [JSON/CSV/XML/PDF]
Purpose: [e.g., transfer to another provider]
Best regards,
[Your Name]
Direct Transfer
Upon request, Pantryverse will assess whether direct transfer to another
provider is technically possible for the specific destination. If direct
transfer is not practical, you will receive a structured export file.
6. Right to Object (Art. 21 GDPR)
What does this mean?
You can object to processing of your data when it is based on “legitimate interests.”
When can you object?
- Processing is based on legitimate interests
- Direct marketing (at any time and unconditionally)
- Profiling for direct marketing
Areas in the Pantryverse App:
- Analytics Data: Usage statistics
- Performance Optimization: App performance data
- Security Measures: Fraud detection
- Marketing: Newsletter, product information
How can you object?
Option 1: In the App
- Profile → Privacy
- Select “Data Processing”
- Deactivate corresponding areas
- Save
Option 2: Email
To: statue-speer-4p@icloud.com
Subject: Objection - [Your Name]
Dear Sir/Madam,
I hereby object to processing of my data for the
following purposes:
[Specific Areas]
Reason: [Optional but helpful]
Best regards,
[Your Name]
Effect
- Processing is stopped
- Exception: Compelling legitimate grounds
- Immediate effect for direct marketing
7. Withdrawal of Consent (Art. 7(3) GDPR)
What does this mean?
You can withdraw any given consent at any time.
Consent-based processing in Trusted Beta:
- Optional user-submitted feedback screenshots
- Optional future beta features if introduced with a separate consent prompt
- Marketing communications only if separately requested
How can you withdraw?
To: statue-speer-4p@icloud.com
Subject: Withdrawal of Consent - [Your Name]
Dear Sir/Madam,
I hereby withdraw my consent for:
[Specific Consents]
Date of original consent: [If known]
Best regards,
[Your Name]
Important Notes:
- Withdrawal only affects the future
- Previous processing remains lawful
- Immediate implementation
- No disadvantages for you
8. Right to Lodge a Complaint (Art. 77 GDPR)
What does this mean?
You can complain to the data protection supervisory authority if you believe your rights have been violated.
Competent Authority:
Federal Commissioner for Data Protection and Freedom of Information (BfDI)
Graurheindorfer Str. 153
53117 Bonn
Germany
Contact:
- Website: https://www.bfdi.bund.de/
- Email: poststelle@bfdi.bund.de
- Phone: +49 (0)228 997799-0
Online Complaint:
https://www.bfdi.bund.de/SharedDocs/Downloads/DE/Beschwerde/BeschwerdeformularBfDI.html
When should you complain?
- Your requests are ignored
- Rights are not respected
- Unlawful data processing
- Insufficient information
Complaint Procedure:
- Fill out complaint form
- Attach relevant documents
- Submit to BfDI
- Processing by authority
- Decision and possible measures
9. Judicial Remedy (Art. 79 GDPR)
What does this mean?
You can sue us in court if your data protection rights have been violated.
Competent Courts:
- Civil Courts: At our location or your residence
- Applicable Law: German law
- Legal Aid: Possible with low income
Claims:
- Damages: Material and immaterial damage
- Injunction: Stop unlawful processing
- Removal: Deletion of unlawfully processed data
10. Practical Tips for Exercising Rights
Preparing Your Request:
- Prove Identity: Attach copy of ID
- Be Specific: Describe exactly what you want
- Observe Deadlines: 30 days processing time
- Document: Keep all communication
Sample Checklist for Requests:
- [ ] Full name
- [ ] Email address of account
- [ ] Specific description of request
- [ ] Identity verification
- [ ] Desired action
- [ ] Contact details for follow-up
Escalation Levels:
- Direct Request: statue-speer-4p@icloud.com
- Follow-up: After 30 days without response
- Complaint: To data protection authority
- Court Action: As last resort
Free Support:
- Consumer Centers: Advice on data protection rights
- Data Protection Officers: Independent advice
- Legal Consultation: For complex cases
11. Special Situations
Minors (under 16 years):
- Legal guardians can exercise rights
- Proof of authorization required
- Special protection in data processing
Deceased Persons:
- Heirs can assert certain rights
- Proof of inheritance required
- Limited rights
Companies and Self-Employed:
- Same rights as private individuals
- Additional commercial protection interests
- Special deletion periods possible
12. Frequently Asked Questions (FAQ)
Q: Do the information requests cost anything?
A: No, all data protection rights are free of charge.
Q: How long does processing take?
A: Maximum 30 days, usually faster.
Q: Can I request my data by phone?
A: For security reasons, only in writing (email/letter).
Q: What happens after account deletion?
A: All data is deleted after retention periods.
Q: Can I restore deleted data?
A: No, deletions are final (except during backup periods).
Q: Are my requests logged?
A: Yes, for evidence and quality assurance.
Contact and Support
Privacy Team
Email: statue-speer-4p@icloud.com
Response Time: Within 48 hours
Languages: German, English
Specialized Contacts
- Access Requests: statue-speer-4p@icloud.com
- Deletion Requests: statue-speer-4p@icloud.com
- Complaints: statue-speer-4p@icloud.com
- Technical Issues: statue-speer-4p@icloud.com
Postal Address
Torsten Hubertus Kunz
Attn: Privacy Team
Pistoriusstraße 9a
13086 Berlin
Germany
Last Updated: January 19, 2025
Next Review: July 22, 2025
This guide is regularly updated to reflect current jurisprudence and practice.
For questions about your rights, please contact: statue-speer-4p@icloud.com