Privacy Policy

Last updated: August 2026. Document drawn up pursuant to EU Regulation 2016/679 (GDPR) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. Draft to be legally validated before publication.

1. Data Controller

The Controller of the processing of personal data is Nerone Food Experience S.r.l. (VAT 04143490920), with registered office at Via Roma 59, 09013 Carbonia (SU), Italia.
For any request regarding your data you can write to: info@pizzerianerone.it

2. Types of data collected

Through this website we process the following categories of data:

• Contact data provided voluntarily via the site form: name, email address, telephone number and any information you decide to share with us in the message.
• Browsing data: automatically collected by the IT systems (e.g. IP addresses, browser type, pages visited, date and time), necessary for the operation and security of the site.
• Cookies and similar technologies: as described in the Cookie Policy.
• Conversations with the virtual assistant (chatbot), where active: the content you type into the artificial-intelligence-based assistant, processed to provide you with answers.

Online bookings and orders. Table bookings and orders (takeaway and home delivery) are managed through the external platform Smart App Food (app.pizzerianerone.it). The data entered into that platform (e.g. name, contact details, delivery address, payment data) are processed in accordance with the privacy notice of the relevant provider, which acts as an autonomous controller or processor.

3. Purposes and legal bases

• Responding to contact and information requests — legal basis: performance of pre-contractual measures at your request (art. 6.1.b GDPR).
• Managing bookings and orders made through the ordering platform — performance of the contract (art. 6.1.b GDPR).
• Providing and securing the site, preventing abuse — legitimate interest of the Controller (art. 6.1.f GDPR).
• Complying with legal obligations (accounting, tax) — art. 6.1.c GDPR.
• Analytics and marketing cookies and any promotional communications/newsletters — on the basis of your consent (art. 6.1.a GDPR), freely revocable at any time.

4. Methods of processing

The data are processed using IT and electronic tools, with security measures adequate to guarantee their confidentiality, integrity and availability and to prevent unauthorised access. The processing is carried out by the Controller and by specifically instructed authorised persons/processors.

5. Recipients and external processors

The data may be processed, on our behalf (art. 28 GDPR) or as autonomous controllers, by the following parties:

• Hosting provider: Hetzner Online GmbH (Germania/Finlandia, UE), for the provision and technical storage of the site's data.
• Email provider for receiving and sending emails.
• Booking and ordering platform (Smart App Food) for managing tables, takeaway and deliveries, and its related payment providers (e.g. card, PayPal, Stripe, Klarna).
• Analytics and advertising service providers (e.g. Google, Meta Platforms Ireland Ltd.), only with your prior consent to the relevant cookies.
• Artificial intelligence providers for any virtual assistant, which process the messages sent to the chat.

The updated list of data processors is available on request by writing to the Controller.

6. Transfer of data outside the EU

Some providers (e.g. analytics, advertising or AI services) may process data outside the European Economic Area. In such cases the transfer takes place in compliance with articles 44 et seq. GDPR, with adequate safeguards such as the Standard Contractual Clauses approved by the European Commission or adequacy decisions.

7. Retention period

• Contact data/requests: for the time necessary to handle your request and, in the event of a relationship, within the subsequent legal terms (generally up to 10 years for accounting/tax obligations).
• Browsing data and logs: for the technically necessary time, subject to security needs or legal obligations.
• Cookie consent register: 6 months.
• Cookies: according to the durations indicated in the Cookie Policy.

8. Rights of the data subject

You may exercise at any time the rights provided for by articles 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent (without affecting the lawfulness of the processing based on the consent given before the withdrawal). To exercise them write to info@pizzerianerone.it.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) (www.garanteprivacy.it).

9. Cookies

This site uses technical cookies and, subject to consent, analytics and marketing cookies. For details and to manage your preferences, see the Cookie Policy.

10. Artificial intelligence (transparency — EU Reg. 2024/1689 "AI Act")

The site may provide a conversational assistant (chatbot) based on artificial intelligence. We inform you, clearly and transparently, that you are interacting with an AI system and not with a natural person. Automatically generated content may contain inaccuracies. The possibility of contacting the restaurant's staff directly is always guaranteed.

11. Changes to this notice

The Controller reserves the right to update this notice. Changes will be published on this page with an indication of the update date.