Privacy policy

1. Data controller

GEO EATS ITALY, Via Montevideo 2, 10134 Torino (TO) · VAT no. 14663740968 · email info@geo-eats.com · PEC geoeatsitaly@lamiapec.it ("GEO EATS Express").

2. What data we process and why

• Online orders: name, phone number, email (optional), notes, pickup time, order contents, payment status and IP address (for security and abuse prevention). We need them to prepare and hand over your order. Legal basis: performance of a contract (Art. 6.1.b GDPR).
• Service messages: SMS and emails confirming your order after payment. They are tied to your order and are not promotional.
• Loyalty card (only if you ask for it, via QR or the site): name, mobile number, email, date of birth (all required for the card), where you signed up (e.g. in-store QR), stamps, rewards and gifts, and the date and time of your declaration. The SMS code verifies that the number is yours. Legal basis: the service you request (Art. 6.1.b). Your date of birth is only used for the birthday gift and can be entered just once, to prevent repeated claims; you can change your mobile number and email yourself from your account (a new number must be confirmed with an SMS code). By signing up you declare that the details are correct and that the number is yours or you are authorised to use it.
• Moving from the old card (Favecard): if you already had a GEO EATS loyalty card on Favecard, we transferred your name, email, mobile number (if any), day and month of birth and your stamps so you do not lose what you have collected, and we write to you once to invite you to complete your registration. It is not an offer and no marketing consent is carried over: you give it yourself, if you wish. If you do not register, the data is deleted within 24 months; you can ask for deletion at any time at info@geo-eats.com or via the link in the email. Legal basis: performance of the service you already requested (Art. 6.1.b) and legitimate interest in keeping the service continuous (Art. 6.1.f).
• Birthday greetings and promotions: SMS and emails with greetings and offers only if you tick the relevant boxes (optional, never pre-ticked; in your account you can manage SMS and email separately). Legal basis: consent (Art. 6.1.a). You can withdraw it at any time from your account or with the "unsubscribe" link in every message, with no effect on your card. Promotional SMS are only sent between 9:00 and 20:00. We do not do automated profiling.
• Online payments: handled by Revolut. We never see or store your card details; we only receive the payment outcome.
• Contact requests: the data you enter in the form (name, email, phone, message) so we can reply.
• Job applications: personal details, contacts, message and CV you send, to assess your application. Retention: up to 12 months unless you consent again.
• Job alerts: email and city, with your consent, until you ask to be removed.
• Technical data: our servers log browsing data (e.g. IP address, date and time) for security and to run the site.

3. How long we keep data

Order data for as long as needed to handle the order and any support request, and in any case no longer than 24 months (after which personal order data is erased and only accounting data remains); tax and accounting records for the legal period (10 years). Loyalty card: until you delete it, or automatically after 24 months without logins, stamps or orders. Message log: 12 months. Marketing consent stays valid until withdrawn. Other data as stated above.

4. Who we share it with

Providers that help us deliver the service, acting as processors: website hosting (Hostinger), SMS and email delivery (Brevo), online payments (Revolut), and authorised staff at the location you choose. The map (Google Maps) is loaded only if you press "Show map". We do not sell your data. Some providers may process data outside the EU with appropriate safeguards (e.g. standard contractual clauses).

5. Your rights

From your account you can download your data, correct name, email and mobile number, withdraw consents and delete your card yourself. For access, rectification (including date of birth), erasure, restriction, portability and objection (Arts. 15-22 GDPR) you can also write to info@geo-eats.com. You can lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

6. Cookies

We only use technical cookies and your browser's local storage; see the Cookie policy.