Privacy Policy

Last updated: 1 June 2025

This Privacy Policy applies to the CercaMenu platform (cercamenu.com) and describes how your personal data is collected, processed and protected in accordance with EU Regulation 2016/679 (GDPR).

1. Data Controller

Innovalis di Damiano Marti
VAT: IT03199680731
Email: info@cercamenu.com

2. Data We Collect

Account data — name, surname, email, password (hashed), phone number, provided at registration.
Restaurant data — name, address, VAT, opening hours, menu content (categories, products, images, promotions).
Technical data — IP address, browser type, device, pages visited and session duration, collected for security and service operation.
Analytics data — aggregated statistics via Google Analytics 4, only with explicit consent and anonymised IP.

3. Legal Basis for Processing

Contract execution (Art. 6.1.b GDPR) — account management, menu and service delivery.
Legitimate interest (Art. 6.1.f GDPR) — service security, fraud prevention, technical logs.
Consent (Art. 6.1.a GDPR) — Google Analytics 4 analytics cookies, granted via cookie banner.

4. Cookies

Technical cookies (always active) — session management, language preference, security. No consent required.
Analytics cookies (optional) — Google Analytics 4 with anonymised IP, loaded only after consent.

You can change your preferences by clearing your browser's localStorage data for this site.

5. Google Analytics 4

With your consent, we use Google Analytics 4 (Google LLC, USA). Data may be transferred to the USA under the EU-US Data Privacy Framework. Google's privacy policy is at policies.google.com/privacy.

6. Data Retention

Account data: for the duration of the contractual relationship and up to 10 years after closure for legal obligations.
Technical logs: 12 months.
Analytics data: 14 months (Google Analytics default).

7. Data Sharing

We do not sell or transfer personal data to third parties for commercial purposes. Data may be shared with:

Technical providers acting as data processors (hosting, email delivery).
Google LLC — for analytics purposes only, with your consent.
Judicial or administrative authorities — when required by law.

8. Your Rights

Under the GDPR you have the right to: access, rectification, erasure ("right to be forgotten"), portability, restriction of processing and objection. Write to info@cercamenu.com. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

9. Changes to this Policy

We may update this Privacy Policy at any time. Material changes will be notified on this page with an updated date. Continued use of the service after a change constitutes acceptance.