Privacy Policy

Introduction

Pizza Djordjo ("we", "our", "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our food delivery services.

By using our services, you agree to the collection and use of information in accordance with this policy.

Data Controller

The data controller responsible for your personal data is:

Information We Collect

Personal Information

When you create an account or place an order, we collect:

• Name
• Email address
• Phone number
• Delivery address
• Order history and preferences

Automatically Collected Information

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent
• Referring website

How We Use Your Information

We use the collected information for:

• Processing and delivering your orders
• Communicating with you about your orders
• Creating and managing your account
• Sending promotional offers (with your consent)
• Improving our website and services
• Analyzing usage patterns and trends
• Preventing fraud and ensuring security
• Complying with legal obligations

Legal Basis for Processing

We process your personal data based on:

• Contract Performance: Processing necessary to fulfill your orders
• Consent: For marketing communications and non-essential cookies
• Legitimate Interest: For improving our services and fraud prevention
• Legal Obligation: For tax and accounting purposes

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience:

Essential Cookies

Required for the website to function properly. These include session cookies for your cart and authentication.

Analytics Cookies

We use Google Analytics to understand how visitors interact with our website. This helps us improve our services.

Marketing Cookies

With your consent, we use Facebook Pixel to deliver relevant advertisements and measure their effectiveness.

You can manage your cookie preferences using the cookie consent banner on our website or through your browser settings.

Data Sharing and Disclosure

We may share your information with:

• Delivery Personnel: Name, address, and phone number for order delivery
• Payment Processors: For processing online payments securely
• Analytics Providers: Google Analytics for website analytics
• Legal Authorities: When required by law or to protect our rights

We do not sell your personal information to third parties.

Data Retention

We retain your personal data for:

• Account Information: Until you request deletion
• Order History: 7 years for tax and legal purposes
• Marketing Data: Until you withdraw consent
• Analytics Data: 26 months (Google Analytics default)

Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us using the information provided below.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure password hashing
• Regular security updates and monitoring
• Access controls and authentication

International Data Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Commission for Personal Data Protection of Bulgaria (CPDP) if you believe your rights have been violated.