Privacy policy and cookies

Who handles your data

Il Mondo, owner Dario Fišter, OIB 37921451920, Ul. Davora Zbiljskog 26, 10000 Zagreb (Pizzeria Il Mondo).

For any question about your data, write to ilmondopizzeria64@gmail.com or call +385 1 6132 150.

Data with your order

When you order we keep your name, phone number, delivery address (floor and door code if you give them), the dishes and notes you ordered, the payment method and the time of the order. We need them to prepare and deliver your order, to reach you if something is wrong, and to meet our legal duties (receipts, taxes). The legal basis is the contract and our legal obligations (Art. 6(1)(b) and (c) GDPR).

If you pay by card, Teya (Borgun) processes the payment. We never see your card number, only the confirmation that you paid.

The address you type is looked up through Mapbox, to show it on the map and check it is inside our delivery zone.

We keep order data for as long as we need it for delivery, complaints and our business records, and at most as long as tax and accounting rules require (business records must be kept for up to 11 years). Anything we are not obliged to keep, we delete sooner on your request.

How you found us

With each order we also keep how you reached the site: a Google ad (and which ad or search term), Google Maps, a flyer, social media, another website, or directly. These are the tags in the page address (utm_..., gclid), only the name of the site you came from (not its full address), and the page you arrived on. That is how we know whether ads and flyers pay off. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR).

Without your consent these tags are not stored on your device: they are only sent with an order from the same visit. If you accept cookies, they are kept on your device for 30 days.

Cookies and storage on your device

Without consent we store only what the site needs to work as you asked:

• Your cookie choice (ilmondo.consent), so we don't ask every time.
• The order you are tracking (ilmondo_active_order) and whether to ask you for a rating (ilmondo_rating_prompt), while the order is under way.
• Your name, phone and address for next time (ilmondo_customer_details), so you don't have to type them again.

Only if you click “Accept”:

• Google Analytics 4 (cookies _ga and _ga_*, up to 2 years): how many people visit and order.
• Google Ads (cookie _gcl_au and the gclid click tag, up to 90 days): which Google ads lead to orders.
• How you found us (ilmondo.attribution, 30 days) and which orders we already reported to Google (ilmondo.reportedOrders).

If you decline, Google stores no cookies. The site then sends it only anonymous cookieless signals (Google Consent Mode), from which it cannot recognise you or your device. We never personalise ads to you. The legal basis for cookies is your consent (Art. 6(1)(a) GDPR and the Croatian Electronic Communications Act). You can withdraw it at any time: with the “Change cookie settings” button on this page or the “Cookie settings” link at the bottom of the site.

Who else sees the data

We never sell data. Only the service providers we use process it, and only for us: Netlify (website), Railway (server), Supabase (database), Mapbox (map and addresses), Teya (card payments) and, with your consent, Google (Analytics and Ads). Some of them are based in the USA; the transfer relies on the European Commission's adequacy decision (EU–US Data Privacy Framework) or on the Commission's standard contractual clauses.

Your rights

You can ask to see, correct, erase or move your data, or to restrict its processing, and you can object to processing based on legitimate interest. Write to ilmondopizzeria64@gmail.com. If you think we handle your data unlawfully, you can complain to the Croatian Personal Data Protection Agency (azop.hr).