Privacy Policy

1. Who we are

Maestri della Pasta is operated by Maestri della Pasta S.à r.l., registered in Luxembourg. References to “we”, “us” and “our” in this policy mean Maestri della Pasta. For data protection questions, contact us at hello@maestridellapasta.org or via our contact page.

2. What we collect and why

We collect personal data in three contexts:

• Contact form & newsletter— we collect your name, email, and the content of your message (or just your email for newsletter signups). We use this to respond to enquiries and to send you brand updates if you opted in. Legal basis: consent.
• Franchise inquiries— if you submit a franchise application on franchise.maestridellapasta.org, we collect your name, email, phone number, country, and city. We use this to evaluate your application and contact you about the opportunity. Legal basis: consent and pre-contractual measures at your request.
• Site analytics & advertising cookies— if you accept the relevant categories on our cookie banner, we and our processors (listed below) set cookies and similar identifiers to measure site performance and run ad campaigns. Legal basis: consent.

We do notcollect payment data on this website — restaurant orders are placed and paid for via third-party delivery platforms (Wolt, Uber Eats, Deliveroo) on their own infrastructure.

3. Cookies and similar technologies

For the full list of cookies we set, the third parties involved, and the categories you can accept or reject, see our cookie policy. You can reopen the preferences panel any time: Cookie preferences.

4. Third-party processors

We share personal data only with processors that act on our behalf:

• Vercel Inc. (hosting + Vercel Analytics, USA) — privacy policy
• Supabase Inc. (database, EU-Central) — privacy policy
• Resend (transactional email for franchise inquiries) — privacy policy
• Google LLC(Google Tag Manager, Google Analytics 4, Google Maps) — privacy policy
• Meta Platforms Ireland Ltd.(Meta Pixel for ad measurement, only if you accept advertising cookies) — privacy policy
• LinkedIn Ireland Unlimited Company(LinkedIn Insight Tag, only if you accept advertising cookies) — privacy policy

Where data is transferred outside the European Economic Area, the transfer is covered by Standard Contractual Clauses or an adequacy decision.

5. How long we keep your data

• Contact form messages: up to 24 months from your last interaction.
• Newsletter subscribers: until you unsubscribe.
• Franchise inquiries: up to 36 months, or longer if a contractual relationship is formed.
• Analytics and advertising data: per the retention windows of each processor (see their privacy policies).

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion (“right to be forgotten”).
• Restrict or object to processing.
• Receive your data in a portable format.
• Withdraw consent at any time, including by changing your cookie preferences.
• Lodge a complaint with the Luxembourg supervisory authority, the Commission Nationale pour la Protection des Données.

To exercise any of these rights, email us at hello@maestridellapasta.org. We will respond within 30 days.

7. Changes to this policy

We update this policy from time to time. The date at the top of this page reflects the most recent revision. Material changes will be highlighted on the site.