Privacy Policy
We take the protection of your personal data seriously and process it in accordance with the EU General Data Protection Regulation (GDPR) and applicable national laws.
Data controller
Massimo Di Chiara
Località Demanio snc
84040 Marina di Casal Velino (SA), Italia
Data we process
When you use Foodla we may process: account data (email, login), restaurant and menu data you submit, technical access data (IP, browser, timestamps) and cookies strictly necessary to operate the service.
Purposes of processing
Providing and securing the service, authentication, restaurant claim workflow, content moderation, and meeting legal obligations.
Legal basis
Art. 6(1)(b) GDPR (contract), Art. 6(1)(c) GDPR (legal obligation) and Art. 6(1)(f) GDPR (legitimate interest in operating a secure service).
Service providers
We use Supabase (hosting, authentication, database, storage) and Cloudflare (delivery) to operate Foodla. Data is stored on Supabase infrastructure in the European Union, region eu-west-2 (London, United Kingdom). These providers process data on our behalf under data processing agreements (Art. 28 GDPR).
Storage duration
Account data is stored for as long as your Foodla account exists and is deleted within 30 days after account deletion, unless statutory retention periods apply. Restaurant and menu data submitted by claimed restaurant owners is kept while the listing is active. Technical access logs are kept for up to 14 days for security and abuse-prevention purposes.
Transport security
All connections to Foodla are encrypted using TLS (HTTPS). Authentication sessions are stored only in your browser (localStorage) and are not shared with third parties. We do not use tracking, advertising or analytics cookies.
Fonts and external resources
Foodla does not load Google Fonts or other third-party fonts. All fonts are served from your device's system or our own infrastructure, so no font request transmits your IP address to a third country.
Your rights
You have the right to access, rectification, erasure, restriction, data portability and to object to processing. You may also lodge a complaint with a supervisory authority.
Contact
For privacy requests please contact: