Privacy & Cookie Policy

• Company: El Parrillero S.r.l.
• Registered office: Via Amilcare Ponchielli 30, 21052 Busto Arsizio (VA), Italy
• VAT no.: IT03987160128
• Email: elparrillerobustoarsizio@gmail.com

This is mainly an informational showcase site, but it provides two contact forms: the events enquiry and the "Work with us" job application.

• Data sent through the forms: name, phone, email and — for events — number of guests; for applications, the desired role and the attached CV. It is used solely to reply to the request or assess the application, and reaches us by email (it is not stored in a database on this site).
• Voluntary contact data: if you write to us via WhatsApp, phone or email, we process the data you provide (e.g. name, contact, message) solely to reply to you.
• Browsing data (aggregated and anonymous): pages visited, country/region, referrer, device and browser type, collected via a cookieless analytics tool (Vercel Web Analytics).
• Technical logs: IP address and access data kept temporarily by the server for security and operation.

• Handling requests sent through the events and job application forms and replying to contact requests — pre-contractual measures / legitimate interest (Art. 6.1.b/f); for the CV, the legal basis is the consent given by voluntarily submitting the application (Art. 6.1.a).
• Aggregated, anonymous usage statistics to improve the site — legitimate interest (Art. 6.1.f), without identifying the user.
• Site security and abuse prevention — legitimate interest (Art. 6.1.f).

This site uses no profiling or third-party cookies. The analytics tool (Vercel Web Analytics) is cookieless: it sets no cookies, does not store your IP in an identifying way and does not track you across sites or sessions.

For this reason, under the Italian Garante's Guidelines of 10/06/2021, no cookie consent banner is required.

Data is processed by the controller's authorised staff and by the following providers (data processors under Art. 28 GDPR):

• Vercel Inc. — website hosting and aggregated analytics (Vercel Web Analytics) — USA / EU regions, under Standard Contractual Clauses.
• Resend — delivery of the emails generated by the forms (events and job applications) — under Standard Contractual Clauses for any non-EU transfers.

We do not sell or share your data with third parties.

The provider Vercel Inc. is based in the United States. Any transfer of data outside the European Economic Area takes place under the Standard Contractual Clauses (SCC) approved by the European Commission (Decision 2021/914/EU).

• Event requests and contact messages: for as long as needed to handle your request.
• Job applications (CV): for as long as needed to assess the application and in any case no longer than 12 months, unless otherwise consented.
• Usage statistics: aggregated and anonymous, per the provider's terms.
• Technical logs: about 30 days.

At any time you may exercise your rights under Arts. 15-22 GDPR: access, rectification, erasure, restriction, portability, objection and withdrawal of consent. Write to elparrillerobustoarsizio@gmail.com; we will reply within 30 days.

You always have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) if you believe the processing infringes the GDPR.

We apply appropriate measures: encrypted HTTPS connections, security headers, self-hosted resources (no third-party fonts or scripts). This policy is governed by Italian law; the Court of Busto Arsizio has jurisdiction over any dispute.