Privacy

Short version: you can read the whole menu, prices and allergens without giving us anything. We only receive something if you message us on WhatsApp — and you are the one who presses send.

1. Who handles your data

Esperia Naxos Soc. Coop. — Via Naxos 33, 98035 Giardini Naxos (ME), Italy
VAT 03866700838 · REA 265885 · Co-op register C145350
Phone: 351 4454366 · Email: [ADD EMAIL]

We have not appointed a Data Protection Officer: the conditions in Art. 37 GDPR do not apply, as we carry out no large-scale systematic monitoring.

2. How little we collect

This is a shop-window site with a menu. No sign-up, no accounts, no payments, no advertising profiling and no analytics: no Google Analytics, no pixels, no tracking. Even the fonts are hosted on our own server, so your browser calls nobody while you read.

3. What we process, and why

a) Browsing data

The server automatically logs IP address, browser and device type, pages viewed, date and time. This is what makes the pages arrive and keeps them safe from abuse.
Legal basis: legitimate interest in security and operation (Art. 6.1.f GDPR).
Retention: [ADD — typically 7-30 days], unless needed to investigate an offence.

b) Your basket

Whatever you add stays on your device only, in browser storage (localStorage, key vdc-cart-v1). It is never sent to us: until you send the message, that basket does not exist as far as we are concerned.

c) Ordering over WhatsApp

Pressing the order button makes the site compose a message with your items, quantities, the name you gave, any pickup time and your notes. The message opens in WhatsApp: you send it. From that moment we receive your phone number, name, order and notes.
Legal basis: steps taken at your request before a contract (Art. 6.1.b GDPR).
Retention: the conversation stays in the shop's WhatsApp account and is deleted within [ADD — e.g. 30 days] of your order, unless tax rules or a dispute require otherwise.

d) If you mention an allergy

Writing an allergy or intolerance in the notes means sharing health data (Art. 9 GDPR).
Legal basis: your explicit consent (Art. 9.2.a), given by freely choosing to write it. You can order without mentioning it and tell us at the counter instead.
Use: only to prepare your order correctly. [CHECK: if the shop records allergies in a paper or software log, say so here]

4. What we never do

• We do not sell or share your data for commercial purposes.
• No profiling, no automated decisions (Art. 22 GDPR).
• No newsletters, no promotional messages.
• We do not knowingly process data of children under 14: this service is for adults, and an order for a child is placed by whoever has parental responsibility.

5. You are free to give us nothing

Everything is optional. Withholding your name and number only prevents one thing: sending a request ahead of time. The menu stays readable and the counter works as it always has.

6. Who else sees the data

Data may be disclosed to public authorities on a lawful request, and to our tax or legal advisers where necessary.

7. The map and outside links

The contact page can show a Google map. Loading it gives Google your IP address and lets it set its own cookies, so the map only loads if you agree. Without consent you still get the address, the phone number and a link to open Maps whenever you choose.

The buttons to Google, Tripadvisor, Instagram, Facebook and WhatsApp are plain links: they install nothing until you tap them. Once open, those services' own policies apply and we have no control over them.

8. Your rights

At any time you can request access, correction, erasure, restriction, portability and objection, and withdraw consent without affecting what was lawful before (Arts. 15-22 GDPR).

Write to [EMAIL] or call 351 4454366. We answer within one month, extendable by two in complex cases.

You may also complain to the Italian Data Protection Authority (piazza Venezia 11, 00187 Rome) or go to court.

Want it all gone right now, without asking us? Empty the basket on the site or clear this site's data in your browser — that part leaves your device. For the conversation, delete it in WhatsApp and ask us to do the same on our side.

9. Security

The site is served over HTTPS. Only authorised staff read the messages. WhatsApp encrypts conversations end to end, but messages stay stored on both phones: don't send us anything you would rather not leave on the shop's device.

10. If something changes

Any update appears here with its revision date. Anything substantial will also be flagged on the home page.