Privacy notice
1. Data controller
PizzaRicca di Riccardo Carli
via Magnolfi 70, 59100 Prato (PO), Italy
VAT no. 02004010977
Telephone 0574 966334 · PEC (certified email) carliriccardo@pec.it
2. What data we process
- Order data: name, phone number, chosen products, total, pickup time and notes.
- Special request data (parties, birthdays, events): type of request, date, number of people, name, phone, email if you provide it and the text of the request.
- Allergies and intolerances: only if you write them in the notes. This is health data (Art. 9 GDPR): we use it solely to prepare your order.
- Technical data: IP address and browser information, recorded by the providers that host the site and receive orders, so that the site works and is protected from abuse.
3. Why we process it and on what basis
| Purpose | Legal basis |
|---|---|
| Receiving and preparing the order, contacting you if needed (e.g. a product is sold out) | Performance of a contract or pre-contractual steps taken at your request (Art. 6.1.b) |
| Replying to a special request and arranging the supply | Pre-contractual steps taken at your request (Art. 6.1.b) |
| Taking into account allergies or intolerances stated in the notes | Your explicit consent (Art. 9.2.a), which you give by writing them and submitting the order; you can withdraw it at any time |
| Site security and prevention of abusive submissions | Legitimate interest of the controller (Art. 6.1.f) |
Name and phone number are required to order: without them, we cannot handle the order. We do not use your data for advertising or profiling, and we do not sell it.
4. Who receives the data
The owners and staff of PizzaRicca who prepare the orders, and the providers who help us do so, appointed as data processors (Art. 28):
- Procmail — platform that receives and stores the orders sent from the site and forwards them to the pizzeria. Provider: Monema S.r.l.
- Telegram (Telegram Messenger Inc.) — the order reaches the pizzeria as a message in the restaurant's Telegram group.
- Vercel Inc. (USA) — hosts the site.
- Upstash Inc. (servers in the EU) — database that counts orders per pickup time and limits repeated submissions; it keeps your IP address for about 10 minutes.
While you browse the site, your browser also contacts:
- OpenStreetMap Foundation — to show the map in the "Where we are" section.
Links to Google Maps and Facebook open only if you tap them: from that moment the privacy notices of those services apply.
5. Transfers outside the European Union
Some providers (Vercel, Telegram) may process data outside the EU. The transfer takes place on the basis of the EU-US Data Privacy Framework, adequacy decisions or the standard contractual clauses approved by the European Commission. [To be verified for each provider.]
6. How long we keep it
Order data is kept for the time needed to handle it and in any case no longer than 30 days, and is then deleted. Messages in the pizzeria's Telegram group are deleted within 30 days.
7. Data saved on your device
The site saves some information only in your browser, without sending it to anyone: the cart, the language you chose, and your name and phone number if you leave "Remember name and phone on this device" ticked. You can delete it from the cookie policy. The details are on the same page.
8. Your rights
You can at any time ask to access your data, correct it, delete it, restrict its processing, receive it in a portable format, object to processing based on legitimate interest and withdraw your consent (Arts. 15–22 GDPR). Write to our certified email (PEC) carliriccardo@pec.it or call 0574 966334.
If you believe the processing violates the GDPR, you can lodge a complaint with the Garante per la protezione dei dati personali (the Italian data protection authority).