GDPR & privacy
Privacy policy
This page explains how data is processed on the DYF Nutrition website.
Last updatedMarch 5, 2026
Change history
- Cookie consent is now managed via the Google Funding Choices CMP.
- Audience measurement is listed as a future option that requires consent.
- Legal basis, processing purposes, and retention periods were fully rewritten.
- Policy text was aligned with the current technical implementation (Google CMP, AdSense, localStorage, Amazon affiliate links).
- Information about non-EU transfers and CNIL complaint rights was added.
Controller and processed data
Data controller: Lucas Berenguer (sole trader), 509 rue d'Anse, 69400 Villefranche-sur-Saône, France.
Data currently processed on the website
- Language preference (dyf-language cookie).
- Cookie/ads consent choices handled by Google Funding Choices CMP.
- Recipes and settings stored locally in your browser (localStorage).
- Technical browsing data and server logs (IP address, date/time, requests).
- Data related to clicks on affiliate links (e.g., Amazon).
- AdSense advertising data, depending on consent expressed via the CMP.
Future processing changes
- If new services are launched (account, newsletter, payment), this policy will be updated before additional collection starts.
- If audience measurement is added later, it will only be activated after your consent.
Purposes and legal bases
- Website operation, security, and abuse prevention (legitimate interest).
- Storing language and consent choices (legitimate interest / compliance obligations).
- Ad display and ad measurement via Google AdSense (consent).
- Affiliate link tracking and partner remuneration (legitimate interest).
Providers and recipients
Data may be processed by the following providers:
- Vercel Inc. (hosting and technical logs).
- Google (Funding Choices/CMP and AdSense, based on consent).
- Amazon Associates (affiliate links and redirects).
- Supabase (planned infrastructure for user accounts and application data storage).
- Vercel Analytics (only when explicitly enabled).
Some providers are located outside the European Union (notably in the United States). These transfers rely on applicable legal safeguards (e.g., standard contractual clauses).
Retention periods
- Language cookie: 12 months.
- CMP/cookie consent: according to retention periods set by Google Funding Choices.
- localStorage data (recipes/settings): until deleted by the user.
- Technical logs: according to the hosting provider retention policy.
- Affiliate/advertising data: according to relevant partner policies.
Your rights
Under the GDPR, you have the following rights:
- access, rectification, erasure, restriction, objection, and portability;
- withdraw consent at any time for processing based on consent;
- lodge a complaint with the CNIL (www.cnil.fr).
To exercise your rights, you can write to contact@dyfnutrition.com.