Privacy policy

Data controller

Il Fornaccio / Annicchiarico Gerard, Rue d'Anthée 3A, 5620 Morville, Belgium, is responsible for processing the data used by the Il Fornaccio website and app. For any questions about your data: info@il-fornaccio.be.

1. Data collection

When you place an order, we collect the following information:

• First and last name
• Phone number
• Email address, if you choose to provide it to receive your order confirmation
• Preferred collection time
• Allergies, intolerances or instructions you voluntarily provide
• Customer session identifiers, favourites and order history when you use your account or the mobile app
• Push notification token, only if you allow notifications in the mobile app
• Account identifier and basic profile information provided by Apple, Google or Facebook when you choose social sign-in
• Technical security data, such as IP address and device type, used to protect accounts and limit abuse

This data is necessary to process your takeaway order.

2. Use of data

Your data is used exclusively to:

• Manage and prepare your takeaway order.
• Contact you if there is a question or problem with your order.
• Take into account allergies, intolerances or instructions you have voluntarily provided.
• Allow you to find your current order, history and favourites, and reorder more easily.
• Send transactional notifications about your order status, if you have accepted them.
• Secure accounts, prevent abuse and diagnose technical errors.

We do not sell or rent your personal data to third parties.

This processing is based on fulfilling your order or request, our legal obligations, our legitimate interest in securing the service and, for optional notifications, your consent.

3. Payment and service providers

Online payments are processed by Viva Smart Checkout. Il Fornaccio does not receive or store your full payment card details.

Strictly necessary data may be processed by our hosting and email providers, Viva for payments, Apple, Google or Facebook for your chosen social sign-in, and Expo for sending notifications you have enabled. Some providers may process data outside the European Economic Area under their applicable contractual safeguards and transfer mechanisms.

4. Retention and security

Account data is kept while the account remains active. Orders and necessary records are kept for the applicable commercial, accounting and legal retention periods. Sign-in codes expire quickly, sessions are removed on sign-out or expiry, and notification tokens are disabled on sign-out, account deletion or when no longer valid.

Access to information is restricted to people who need it to prepare, manage or track orders. Communications use HTTPS and authentication secrets are stored in a protected form.

5. Cookies and local storage

The website uses cookies and local storage necessary for the basket, user session and remembering your consent choice. If you accept advertising measurement, Google Analytics and Google Ads may measure page visits and attribute a confirmed order to a campaign. The amount, currency and a transaction identifier are then transmitted without your name, address, phone number, email or private order tracking link.

These optional tools are only loaded after your consent in the banner. You can decline by choosing “Essential only” and withdraw consent by deleting the website’s data in your browser settings.

6. Your rights

Under the GDPR, you can request access, correction, erasure, restriction or portability of your data, and object to certain processing. You can withdraw notification permission at any time in your device settings. To exercise your rights: info@il-fornaccio.be.

If you use a customer account on the website or mobile app, you can also delete it directly in the Account area. Deletion removes sessions, devices and favourites. Completed orders may be kept in anonymised form where necessary for the restaurant’s accounting, legal or operational management. A current order must be completed or cancelled before the account can be deleted.

The full procedure, including requests without app access, is available on the page Delete your Il Fornaccio account.

You can lodge a complaint with the Belgian Data Protection Authority if you believe your rights have not been respected.