Privacy Policy

Privacy Policy

Last updated: 2026

This Privacy Policy describes how personal data is processed when you use the application and services provided by Horecando srl, in compliance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection laws.

1. Data Controller

The Data Controller is:

  • Horecando srl
  • Registered office: Via Sottovolume traversa Scordino, 89134 Pellaro, (Rc)
  • VAT number: 02752450805
  • Email: servizioclienti@horecando.it
  • Certified email (PEC):
  • Phone: 0965 35 70 20

For any matter concerning the processing of your personal data, you can contact the Controller at servizioclienti@horecando.it.

2. Categories of personal data

We process the following categories of personal data:

  • Registration and profile data: first and last name, email, phone number, hashed password, company name, VAT/tax number.
  • Contact and billing data: address, city, postal code, province, country.
  • Usage and order data: ordered items, amounts, dates, preferences, history.
  • Technical and device data: IP address, device identifiers, operating system, app version, access and usage logs.
  • Communication data: push notifications, transactional emails, support messages.

3. Purposes of processing

Personal data is processed for the following purposes:

  • Creation and management of the user account, authentication.
  • Performance of the contract: order management, fulfilment, invoicing.
  • Transactional communications (order confirmations, notifications, receipts, password reset).
  • Customer support and assistance.
  • Compliance with legal obligations (tax, accounting, anti-money laundering).
  • Application security, fraud prevention, incident management.
  • Aggregated statistical analysis on service usage.

4. Legal basis

The legal bases for the processing are:

  • Performance of a contract (Art. 6.1.b GDPR) for registration, orders, invoicing and support.
  • Legal obligation (Art. 6.1.c GDPR) for tax, accounting and security obligations.
  • Legitimate interest (Art. 6.1.f GDPR) for application security, fraud prevention, aggregated analysis.
  • Consent (Art. 6.1.a GDPR) for optional purposes such as promotional notifications, revocable at any time.

5. Data retention

Personal data is retained only for the time strictly necessary for the purposes for which it was collected:

  • Account data: for the duration of service use and up to 12 months after the last activity or upon deletion request.
  • Order and invoicing data: 10 years from issuance, as required by Italian tax regulations.
  • Access logs and technical data: up to 12 months for security purposes.
  • Support communications: up to 24 months from request closure.

6. Data recipients

Personal data may be disclosed to:

  • Authorised personnel of the Controller, properly trained and appointed.
  • Technology service providers (hosting, cloud, email, push notifications, analytics) acting as Data Processors pursuant to Art. 28 GDPR.
  • Couriers and logistics for order delivery.
  • Tax, accounting and legal advisors within the scope of their functions.
  • Competent authorities, upon motivated request and as required by law.

Data is not sold, disclosed or shared with third parties for marketing purposes without explicit consent of the data subject.

7. Transfers outside the EU

If some providers operate outside the European Economic Area, the transfer takes place only towards countries ensuring an adequate level of protection (European Commission adequacy decisions) or based on Standard Contractual Clauses approved by the European Commission.

8. Rights of the data subject

You may exercise the following rights at any time, pursuant to Articles 15-22 GDPR:

  • Access to your personal data and a copy thereof.
  • Rectification of inaccurate or incomplete data.
  • Erasure of data (right to be forgotten).
  • Restriction of processing.
  • Data portability.
  • Objection to processing.
  • Withdrawal of consent, where given, without affecting the lawfulness of prior processing.

Requests can be sent to servizioclienti@horecando.it. To request account deletion, please use the dedicated form: Account deletion request.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante) (www.garanteprivacy.it) or with your local supervisory authority.

9. Data security

The Controller adopts adequate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or disclosure, in accordance with Articles 25 and 32 GDPR. Passwords are stored in hashed form, communications happen over secure channels (HTTPS/TLS) and data access is limited to authorised personnel.

10. Cookies and similar technologies

The mobile application does not use cookies in the traditional sense, but may use local identifiers and session tokens for proper operation, authentication and security. These tools are strictly necessary and do not require consent.

11. Push notifications

The application may send push notifications related to orders and the service. You may disable them at any time from your device or application settings.

12. Changes to this policy

This Privacy Policy may be updated from time to time. The date of the last update is shown above. Material changes will be communicated to users through the application or via email at the address associated with the account.

13. Contact

For any questions about the processing of personal data and the exercise of your rights:

  • Email: servizioclienti@horecando.it
  • Certified email (PEC):
  • Phone: 0965 35 70 20
  • Address: Via Sottovolume traversa Scordino, 89134 Pellaro, (Rc)