Privacy notice

This notice describes how the personal data of anyone visiting this site is handled, under articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

Data controller

Devil App Development LLC
16192 Coastal Highway, Lewes, Delaware 19958 — United States of America
info@pizza-eat.com

What we collect

This site collects personal data in one case only: when you fill in the information request form. The data is what you write yourself: name, name of the pizzeria, email address, phone number (optional), country, number of premises, preferred language and the text of the message.

When you send it we also record the date and time of the request and an encrypted, non-reversible version of your IP address, used solely to limit automated submissions. The original IP cannot be recovered from the encrypted one.

Counting visits

We count how many people open the site, so we know whether it is any use. We do it with our own counter, running on our own server, and of each visit we keep only this:

• the date and time;
• the country, as a two-letter code — «IT», «DE». Nothing else: not the city, not the region;
• the page you opened and the language it was shown in;
• the site you came from, if you came from another site, and only its name;
• whether the visit comes from a person or a program (search engines and the like).

Your IP address is not kept. It is used only at the moment of the visit, to derive the country code, and it is not written to any store: there is nowhere it could be recovered from afterwards.

To tell two visitors apart within the same day we use a code computed on the spot, which changes every night and does not let us recognise you the day after. It counts how many people came today; it is not a way to follow anyone over time.

What we do not collect

The counter above uses no cookies, stores nothing on your device and runs no script in your browser: it is entirely server-side. We use no third-party analytics — no Google Analytics or the like — and no browsing data leaves here.

This site uses no profiling cookies and calls no external service: no fonts from a content delivery network, no embedded maps, no social buttons, no advertising tracker.

That is why no cookie consent banner appears: there are no cookies for which consent is required, and counting visits does not need one because it stores nothing on your device.

Where the data sits

The server that hosts this site and receives the form submissions is located in the European Union. What you write to us stays there.

For email delivery we use Twilio SendGrid (Twilio Inc., United States), acting as data processor: the message you send us passes through their servers on its way to our inbox. The transfer outside the European Economic Area is covered by the European Commission's Standard Contractual Clauses, incorporated in the data processing agreement that governs the service.

Google Search Console

The site is registered with Google Search Console, the tool we use to check that pages are being indexed properly and to see which searches bring people here. It is not an analytics system installed in the pages: it adds no code to the site, it neither reads nor writes cookies on your device, and it does not tell us who you are. What it shows us is aggregate data about searches made on Google, already collected by Google within its own search engine and under its privacy policy.

The video guides

The home page carries a few films explaining how the system is used. They are hosted on YouTube (Google Ireland Limited), but they are not loaded when the page opens: what you see is a preview image served from our own server. Until you press play, YouTube receives no request and does not know you are here.

When you press play, and only then, the player is loaded from the youtube-nocookie.com domain. From that moment Google receives your IP address, the address of the page you came from and your browser's technical details, and may record the view; if you have a Google account open, it may link the view to that account. That processing is Google's, not ours, and follows Google's privacy policy. Legal basis: your consent, which you give by pressing play — press nothing and nothing happens.

Cookies and local storage

The site uses two cookies and no more, both of them technical and necessary:

• pe_lang — the language you chose, so you find it again next time. Lasts a year.
• pe_sito — a temporary session identifier that protects the form against forged submissions. Deleted when you close the browser.

If you have never chosen a language, the site tries to guess it from your device settings: that information is read there and then, and is not stored anywhere.

Why we handle your data

• To reply to you. Legal basis: your consent (art. 6.1.a GDPR) and steps taken at your request before entering into a contract (art. 6.1.b).
• To defend the site against automated submissions. Legal basis: the legitimate interest (art. 6.1.f) in keeping the service working.
• To know how many people visit the site and from which countries. Legal basis: the legitimate interest (art. 6.1.f) in understanding whether the site works and who it reaches. The measurement is kept to the strict minimum: no identifier on your device, no IP address kept, no data passed to anyone else.

Your data is not used to send you advertising unless you explicitly and separately ask for it, and it is never handed over or sold to anyone.

Who can see it

Form data is visible only to the people who deal with commercial enquiries, and to the email provider named above. Nobody else.

How long we keep it

Information requests are kept for 24 months from the last contact, then deleted. The anti-spam counters delete themselves after 48 hours. The visit-counting data — which, as said, does not contain your IP address — is kept for 180 days, then deleted.

Your rights

At any time you can ask to access your data, to correct it, to erase it, to restrict its processing, to receive it in a readable format or to object to the processing. You can also withdraw consent already given, without affecting the validity of what was done beforehand.

To exercise these rights write to info@pizza-eat.com.

The Pizza EAT product

This notice covers the site only, the one you are reading. Data handling inside the Pizza EAT system — where pizzerias manage their own customers' data — is governed by a separate agreement, under which each pizzeria is the controller of its own customers' data and Pizza EAT acts as processor.

Changes

If this notice changes, the date at the top of the page is updated.