GDPR and your data rights

Last updated: 10 October 2026

This page says how 24cocktails.com handles personal data under the EU General Data Protection Regulation (GDPR), the UK GDPR and the Swiss Federal Act on Data Protection, and how to exercise your rights. The full Privacy Policy describes everything we collect.

1. Controller

The controller for the Site is Alex Semensky, publishing as 24cocktails, reachable at [email protected]. We have not appointed a data protection officer: the Site processes very little personal data and none of it is sensitive.

2. What we process, and why

Server logs (IP address, page requested, browser, time): to serve the pages and protect the Site from abuse. Legal basis: legitimate interest (Art. 6(1)(f)). Kept for a limited period, then deleted.
Visit statistics (pages viewed, language, a random browser identifier, the referring site, and what you do on the page: searches, the bottles you tick in the finder, the recipes you save, rate, mark as made, share or download): to see which recipes and sections are read. Legal basis: your consent (Art. 6(1)(a)) where the cookie banner is shown; legitimate interest elsewhere. See the Cookies Policy.
Messages you send us (your email address and what you write): to answer you. Legal basis: legitimate interest, or the steps you asked us to take. Kept as long as the conversation is open.
Recipes you submit through the "Add a cocktail" form (the recipe and, if you give it, your name): to publish them under your name. Legal basis: consent, which you can withdraw.

We do not sell personal data, do not profile anyone, do not make automated decisions, and do not use the data for advertising. No account is needed to use the Site.

3. Your rights

You can ask us to:

access the personal data we hold about you (Art. 15);
correct it (Art. 16);
delete it (Art. 17);
restrict its processing (Art. 18);
receive it in a portable form (Art. 20);
object to processing based on legitimate interest (Art. 21);
withdraw consent at any time, without affecting what was done before (Art. 7(3)) — for the analytics cookies, the Cookie settings button does this on the spot.

4. How to make a request

Email [email protected] and say which right you are using. Tell us the email address or the recipe submission the request concerns, so we can find the data; we may ask a question to confirm it is yours. We answer within one month, free of charge. If we cannot meet a request, we say why.

5. Complaints

If you think we handle your data unlawfully, you can complain to the data protection authority of the EU country where you live or work, to the UK Information Commissioner's Office, or to the Swiss Federal Data Protection and Information Commissioner. We would be glad to hear from you first.

6. Transfers outside the EEA

The Site is served through Cloudflare and its analytics are run by Google; both may process data outside the European Economic Area under the European Commission's standard contractual clauses and, for the United States, the EU-US Data Privacy Framework.