Privacy Policy

Darius Pizza
275 Avenue des Alliés, 83240 Cavalaire-sur-mer, France
Email: contact@dariuspizza.fr

We collect two categories of data, for distinct purposes.

Contact form — your name, email address, phone number (optional) and the content of your message.

Audience measurement, only if you consent — the pages you view, your display language, the date and time of your visit, and random visitor and session identifiers. These identifiers contain neither your name nor your email address and do not identify you directly.

Technical data — your IP address is processed transiently by our hosting and security providers to serve pages, rate-limit form submissions and diagnose errors. It is not used to profile you.

— Responding to your contact form enquiry — your consent (GDPR Article 6.1.a)
— Measuring site audience and understanding which pages are useful — your consent, collected via the banner and withdrawable at any time
— Keeping the site secure and functional (anti-spam, rate limiting, error monitoring) — our legitimate interest in protecting the service (Article 6.1.f)

Declining audience measurement has no effect on your access to the site or on how we handle your message.

The site uses Google Analytics 4, loaded through Google Tag Manager, alongside an in-house audience measurement hosted by our technical provider WebOustaou.

Neither is active before you consent. Until you accept, the Google container is not loaded and Google Consent Mode is set to denied for every purpose, advertising included.

We use these measurements for statistics only. We do not run targeted advertising, we do not sell any data, and we do not cross-reference these statistics with messages received through the contact form.

The full list of trackers is set out in our cookie policy.

Your data is never sold or transferred to third parties for commercial purposes. It is processed by the following providers, each for the stated purpose:

— Vercel — site hosting and technical logs
— Supabase — site content database
— Resend — delivery of contact form emails
— Cloudflare (Turnstile) — bot protection on the contact form
— Upstash — per-IP submission rate limiting
— Sentry — technical error monitoring
— Google Ireland Limited — Google Analytics 4 audience measurement, only after consent
— WebOustaou — site design and in-house audience measurement, only after consent

Site hosting, the database, rate limiting and error monitoring are located within the European Union — Vercel, Supabase and Upstash in the Paris region, Sentry in the Germany region.

Two providers may process data in the United States: Google, for audience measurement, and Cloudflare, for bot protection. These transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework, supplemented by standard contractual clauses.

You can avoid any transfer related to audience measurement by declining the corresponding cookies.

— Contact form messages — 3 years from the last exchange, in line with CNIL guidance
— Audience measurement visitor identifier — 13 months maximum
— Session identifier — erased when you close the tab
— Google Analytics cookies — up to 2 years, per Google's settings
— Technical logs and error reports — 90 days maximum
— Your consent choice — kept in your browser until you change it or clear site data

Under the General Data Protection Regulation (GDPR) and the French Data Protection Act, you have the following rights:

— Right of access to your personal data
— Right to rectification of inaccurate data
— Right to erasure (right to be forgotten)
— Right to restriction of processing
— Right to object to processing
— Right to data portability

To exercise these rights, contact us at: contact@dariuspizza.fr

If you believe that the processing of your personal data constitutes a breach of the GDPR, you have the right to lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL) — https://www.cnil.fr