Personal data notice
1. Controller
PR il Caffe Matvei Kazantsev, Ustanička 205v, Beograd, Serbia, PIB 114522335, MB 67643909, operates il Caffe. Contact delivery@ilcaffe.pizza, +381 11 456 1290, or write to the address above. Effective 23.09.2026. This notice covers the website, related account and restaurant service under Serbian personal data law. Acknowledging it is not general permission for marketing or future unrelated processing.
2. Data, purposes and grounds
- Account, sign-in and recovery: telephone, name, supplied email, account ID, verification results and access information, to provide the requested service and protect access.
- Orders: dishes, modifiers, quantities, prices, discounts, contact, time, payment method and status, to prepare and perform the contract.
- Delivery and requested saved addresses: address, entrance, floor, apartment, selected location and delivery notes, for fulfilment and the requested account feature.
- Loyalty: participant identity, relevant purchases, balance, transactions and participation status under the programme rules. Marketing is not a prerequisite.
- Accounts and complaints: sales/payment and business-invoice information where requested, and necessary complaint records, to meet legal duties.
- Support and disputes: enquiries, contact and relevant order data, for service, legal obligations and legitimate defence of claims.
- Security: IP, request time, browser, errors and access events, proportionately to protect users and reliable operation under a legitimate interest.
- Optional Google/location features: the address or location provided and necessary technical information, following the separate choice where required.
Required fields are identified in the process. Without essential contact/delivery details the requested service cannot be completed; menu browsing does not require a delivery address. Do not put passwords, codes, card details or medical documents in comments. Data comes from you, service use and restaurant records of your orders/programme participation. Access requires verified identity, not just a typed name.
3. Recipients
Authorised restaurant staff, delivery providers, hosting, technical support, business-system and email services receive information needed for their role. Couriers do not need your entire account history. Authorities receive data where lawfully required or permitted.
Timeweb supplies service email delivery, involving the recipient address, message and delivery information. Infobip handles the selected SMS code method and telephone/delivery/verification data. Telegram Gateway handles selected Telegram verification, telephone and delivery/verification results, not access to private chats. Google Maps, Places and Embed receive technical information when enabled, and search addresses or route points when used. A route to the pizzeria does not itself save its origin in your profile.
See Google privacy, Infobip privacy and Telegram privacy. These notices do not replace the restaurant's responsibilities in selecting and using providers.
4. Locations and transfers
The website and central business system use a server in Germany. Fulfilment information is accessible in Serbia; central-system backups also transfer to Serbia. External providers may process or access data in other countries. We do not claim exclusive storage in Serbia, Russia or the EU. International transfers require a basis permitted by Serbian law, such as adequate protection, appropriate safeguards or a statutory exception. Ask the controller about relevant recipients, countries and applicable safeguards or how to obtain a copy where applicable.
5. Retention
Retention depends on purpose, not one universal duration: profiles/addresses for the account service with rights to request correction, closure or erasure; orders/invoices for fulfilment, required accounting/tax records and applicable claims; complaints for at least two years after submission and longer only with a proper basis; security/support records for proportionate incident, enquiry and claim handling. Restricted-access backups support recovery, with retention depending on the copy type and recovery need, subject to erasure requirements and statutory exceptions. Closing an account does not automatically erase documents legally required to be retained. Cookie duration is not database retention.
Automatic deletion of all server records on one fixed schedule is not implemented. Expiry disables a code/session but does not itself delete all related records. You may request erasure of information no longer needed; retention must have a specific lawful basis.
6. Rights and contact
Subject to legal conditions, you may seek access/copy, correction, erasure, restriction and portability, or object to legitimate-interest processing. Consent can be withdrawn for the future without affecting prior lawful processing. Direct-marketing objections are respected under law. Contact delivery@ilcaffe.pizza. Identity checks are proportionate, not a routine passport-copy demand. A response is due without undue delay and within 30 days; where law permits due to complexity/number of requests, up to a further 60 days with reasons given within the first 30. You may complain to the Serbian Commissioner and seek judicial protection. If some data must be kept, the legal basis must be explained.
7. Optional features and security
Login codes and order messages are not marketing permission. Google remains off until a separate choice in Cookies and maps; signing in or ordering does not enable it. Precise location permission is separate. Access and communication are protected according to risk; protect your phone/email and never share codes. Changes to the notice do not replace new consent where required.
Website messages and images
Chat is available after account sign-in. Messages and attached images are stored in the pizzeria central system and are accessible to the account owner and authorised staff. Conversation history is not kept in persistent browser storage. Retention of final correspondence depends on the enquiry purpose and the rules above; an automatic-deletion setting is not a promise of one duration for every record. Contact the controller about correction or erasure.
Without sign-in, a separate form emails the pizzeria your name, reply email, text and selected images. It does not create an account or chat or link the enquiry to an existing customer. Replies go to the supplied email. The mail provider and staff process the email and attachments under the support and complaints rules above.
You may attach up to three JPEG, PNG or WebP images, up to 5 MB of source content each. Images are checked and re-encoded before delivery; original file names and metadata are not used in correspondence. Temporary prepared guest-form images are encrypted, become inaccessible after 24 hours and are removed at the next cleanup check. They are removed from website staging after the mail server accepts the message. This does not erase an already delivered email.
Form protection uses bounded technical records, derived identifier/IP data and a one-use challenge valid for 15 minutes. The form cookie is described in the cookies notice. Sending a message does not enable Google, advertising or a subscription. Do not attach passwords, codes, payment details or other information unnecessary for a reply.
Website contact supplement: 03.10.2026. Other terms of this edition remain unchanged.