Privacy Policy

This policy explains which personal data we collect when you use the ordering website, why we use it and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

PEPERONCINO DI CARPINO GIUSEPPE — VIA POPILIA 84/A, 87100 Cosenza (CS), IT — VAT no. 03151730789. For any request concerning your data: giuseppecarpino85@gmail.com — +39 3391122463.

2. What we collect

To handle an order: name, phone number, delivery address when you choose home delivery, any notes you leave for the kitchen or the courier, the contents of the order and the amount.

If you create an account: email address, password (stored encrypted only — we cannot read it), date of birth if you provide it to receive the birthday offer, loyalty points, order history, and any allergies or preferences you declare.

If you write to the virtual assistant: the text of the messages you send.

Technical data: IP address, browser type and browsing data essential to the operation and security of the site.

Payments: card details never pass through our systems and are not stored by us. They are handled directly by the payment service provider; we only keep the outcome, the amount and a transaction reference.

3. Why we use it, and on what basis

Purpose	Legal basis
Preparing, delivering and invoicing your order	Performance of the contract (Art. 6.1.b)
Answering your requests and handling complaints and refunds	Performance of the contract
Keeping tax and accounting records	Legal obligation (Art. 6.1.c)
Preventing fraud, abuse and misuse of the service	Legitimate interest (Art. 6.1.f)
Loyalty programme, offers and promotional messages	Your consent (Art. 6.1.a), withdrawable at any time

4. Virtual assistant

The site offers a virtual assistant that answers questions and helps you build your order. The messages you write are sent to an artificial intelligence provider that generates the reply on our behalf, as a data processor. Those conversations are not used to train models. We keep extracts in a form that cannot be traced back to you, to check the quality of the service.

Please do not write in the chat any data the order does not need: in particular health data beyond the allergies you wish to declare, or payment details.

5. Who we share it with

Only those we need in order to get your order to you, and always under a contract that binds them:

• the payment service provider, to collect payment;
• the provider hosting the database and the website;
• the services that send order-related emails, text messages and notifications;
• the virtual assistant provider, for conversations only;
• our accountant and the authorities, where the law requires it.

We do not sell your data and we do not pass it to third parties for their own marketing.

Some of these providers may process data outside the European Union: where that happens, the transfer relies on the standard contractual clauses approved by the European Commission or on an adequacy decision.

6. How long we keep it

• Order data and accounting records: 10 years, as tax law requires.
• Account and loyalty programme: as long as your account is active. If you close it, we delete what we are not required to keep.
• Assistant conversations: for as long as quality checks require, then in a form that cannot be traced back to you.
• Marketing consent: until you withdraw it.

7. Cookies

The site uses only technical cookies and equivalent technologies: they keep your session, remember the language you chose and store your cart on your device. We use no profiling cookies and no third-party analytics or advertising tools, so you are not asked for consent. You can delete them from your browser settings: some features of the site may stop working.

8. Your rights

At any time you may ask us to access your data, correct it, erase it, restrict its processing, object to processing based on legitimate interest, and receive your data in a readable format (portability). Where you have given consent, you may withdraw it at any time, without affecting what was done before.

Write to giuseppecarpino85@gmail.com: we reply within one month. If you believe your data is handled improperly, you may contact the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or the authority of the country where you live.

9. Providing your data

The data marked as necessary is what we need to complete and deliver your order: without it we cannot provide the service. Everything else — date of birth, preferences, consent to promotional messages — is optional and does not affect your ability to order.

10. Changes

If we change this policy we publish the updated version here, with the date of the last change shown at the top of the page.