Privacy & Cookie Policy
Last updated: 2 June 2026
Pursuant to EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003. This policy covers El Parrillero's showcase website. Online bookings take place on the dedicated app (elparrillero.app), which has its own policy.
1. Data controller
- Company: El Parrillero S.r.l.
- Registered office: Via Amilcare Ponchielli 30, 21052 Busto Arsizio (VA), Italy
- VAT no.: IT03987160128
- Email: elparrillerobustoarsizio@gmail.com
2. What data we collect
This is an informational showcase site with no registration or booking forms, so it does not collect identifying data through forms.
- Voluntary contact data: if you write to us via WhatsApp, phone or email, we process the data you provide (e.g. name, contact, message) solely to reply to you.
- Browsing data (aggregated and anonymous): pages visited, country/region, referrer, device and browser type, collected via a cookieless analytics tool (Vercel Web Analytics).
- Technical logs: IP address and access data kept temporarily by the server for security and operation.
3. Purposes and legal basis
- Replying to contact requests — pre-contractual measures / legitimate interest (Art. 6.1.b/f).
- Aggregated, anonymous usage statistics to improve the site — legitimate interest (Art. 6.1.f), without identifying the user.
- Site security and abuse prevention — legitimate interest (Art. 6.1.f).
4. Cookies and tracking
This site uses no profiling or third-party cookies. The analytics tool (Vercel Web Analytics) is cookieless: it sets no cookies, does not store your IP in an identifying way and does not track you across sites or sessions.
For this reason, under the Italian Garante's Guidelines of 10/06/2021, no cookie consent banner is required.
5. Data recipients
Data is processed by the controller's authorised staff and by the following provider (data processor under Art. 28 GDPR):
- Vercel Inc. — website hosting and aggregated analytics (Vercel Web Analytics) — USA / EU regions, under Standard Contractual Clauses.
We do not sell or share your data with third parties.
6. Transfers outside the EU
The provider Vercel Inc. is based in the United States. Any transfer of data outside the European Economic Area takes place under the Standard Contractual Clauses (SCC) approved by the European Commission (Decision 2021/914/EU).
7. Retention period
- Contact messages: for as long as needed to handle your request.
- Usage statistics: aggregated and anonymous, per the provider's terms.
- Technical logs: about 30 days.
8. Your rights
At any time you may exercise your rights under Arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to elparrillerobustoarsizio@gmail.com; we will reply within 30 days.
9. Complaints to the supervisory authority
You always have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) if you believe the processing infringes the GDPR.
10. Security and applicable law
We apply appropriate measures: encrypted HTTPS connections, security headers, self-hosted resources (no third-party fonts or scripts). This policy is governed by Italian law; the Court of Busto Arsizio has jurisdiction over any dispute.