Privacy Policy

1. Who is responsible

This website, carlas-world.com, is operated by CARLA / Carla's World, based in Switzerland ("CARLA", "we", "us"). We are responsible for the processing of personal data described in this Privacy Policy.

2. Contact

If you have any questions about this Privacy Policy or about your personal data, please contact us at hello@carlas-world.com.

3. What personal data we may collect

We only collect personal data that is necessary to run this website and our email service. This may include:

• Your email address, if you sign up for our newsletter or free guide.
• Information about your consent and your subscription status (for example, the date you signed up or unsubscribed).
• Technical data that is automatically processed when you visit the website, as described in section 7.
• Any information you choose to send us when you contact us by email.

You can browse and read all recipes and stories on this website without creating an account.

4. Newsletter and free guide signup

When you sign up to join Carla's World and receive the free 7-Day Healthy Breakfast Guide, we collect your email address. We use it to give you access to the guide, send you a welcome email and, based on your consent, send you occasional emails with recipes, travel stories and lifestyle inspiration.

By signing up, you consent to receiving these emails. The legal basis for this processing is your consent. You can withdraw your consent at any time by unsubscribing (see section 12). Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. Email delivery provider (Resend)

We use Resend to send our emails, including the welcome email and newsletters. For this purpose, your email address and the content of the email are processed by Resend on our behalf. Resend may also process technical delivery data, such as whether an email was delivered. Resend acts as a service provider and processes data only as necessary to deliver our emails.

6. Website hosting and backend infrastructure

This website is built and hosted through Lovable, including its backend (database, file storage and server functions). Lovable and its underlying infrastructure and cloud service providers host the website and store data, such as newsletter subscriber records, on our behalf. These providers process personal data to operate, secure and maintain the website, in accordance with their own terms and privacy policies.

7. Technical and server data

When you visit the website, certain technical data is automatically processed by our hosting and infrastructure providers where this is technically necessary. This may include your IP address, browser type and version, device and operating system information, the pages requested, the date and time of access, and access or error logs.

This data is used to deliver the website to you, ensure its stability and security, and detect and prevent misuse. We do not use this data to identify you personally.

8. Cookies and similar technologies

We have not added advertising or analytics cookies to this website. Our hosting and infrastructure providers may use technically necessary cookies or similar technologies where required for the website to function and remain secure; we do not control these in detail.

The private admin area of the website uses your browser's local storage to keep the site administrator signed in. This does not apply to regular visitors.

Websites you reach through external links (such as affiliate links) may set their own cookies. Please see section 9.

9. Affiliate links and external websites

Some pages contain affiliate links. If you click an affiliate link and make a booking or purchase, we may earn a small commission at no extra cost to you. More details can be found in our Affiliate Disclosure.

• Viator: some travel stories contain affiliate links to Viator tours and experiences. When you click such a link, you leave our website and Viator may process your data (for example, through cookies used to attribute the booking) according to its own privacy policy.
• 21-Day Smoothie Plan: where the website links to the 21-Day Smoothie Plan or other external affiliate offers, the provider of that offer processes your data according to its own privacy policy.

Based on how these programmes normally work, we do not expect to receive your name or payment details from these providers. We may receive general reporting about clicks, bookings or commissions earned.

10. Data retention

We keep your email address for as long as you are subscribed. If you unsubscribe, your record is kept in a marked, unsubscribed state so that we can respect your choice and do not email you again, and to be able to demonstrate your consent history. You can ask us to delete it completely at any time.

Technical server data and logs are kept only for as long as necessary for security and operational purposes by our hosting providers. Emails you send us are kept for as long as needed to handle your request.

11. Data security

We take appropriate technical and organisational measures to protect your personal data against loss, misuse and unauthorised access. Subscriber data is stored in a protected database that is not publicly accessible, and access to the admin area is restricted to authorised administrators. No method of transmission over the internet is completely secure, but we work to protect your data to a high standard.

12. Unsubscribing from marketing emails

You can unsubscribe at any time by clicking the "Unsubscribe" link included in every email we send you, or by writing to hello@carlas-world.com. After unsubscribing, you will no longer receive marketing emails from us.

13. Your rights under Swiss data protection law

Under the Swiss Federal Act on Data Protection (FADP), you have the right, subject to legal limitations, to:

• request information about the personal data we process about you;
• request the correction of inaccurate personal data;
• request the deletion of your personal data;
• object to the processing of your personal data and withdraw your consent;
• receive your personal data in a common electronic format, where applicable.

To exercise your rights, please contact us at hello@carlas-world.com. You also have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC).

14. Your rights under the GDPR (EU/EEA)

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) may apply. In that case, you have the right of access, rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw your consent at any time.

Our legal bases are your consent (newsletter and free guide) and our legitimate interest in operating a secure and functional website (technical data). You also have the right to lodge a complaint with a data protection supervisory authority in your country of residence.

15. International data transfers

Some of our service providers, such as our email delivery provider and our hosting and infrastructure providers, may process personal data outside Switzerland and the EU/EEA, for example in the United States. Where this is the case, the transfer is based on the safeguards offered by these providers under their terms, such as standard contractual clauses or other legally recognised mechanisms, where applicable.

16. Sharing data with service providers

We do not sell your personal data. We share personal data only with trusted service providers where this is necessary to operate the website and our email service, as described above, or where we are required to do so by law.

17. Links to third-party websites

This website contains links to third-party websites, such as social media platforms and affiliate partners. We are not responsible for the content or privacy practices of these websites. Please review the privacy policy of each website you visit.

18. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example when we add new features or services. The current version is always available on this page, with the "Last updated" date shown at the top of the page.