1. Data Controller
The data controller is Mattivo srl, with registered office at Via Pier Carlo Boggio 38, 10138 Torino (TO), Italy.
VAT number: IT 11211850018
Email: hello@foodleup.com
2. Types of Data Collected
We collect the following categories of personal data:
- Account data: email address, display name, and authentication provider (Google, GitHub) when you create an account.
- Navigation data: IP address, browser type, device type, pages visited, timestamps, and referring URLs. This data is collected automatically through server logs and analytics tools.
- User-generated content: food lists, saved items, and preferences you create within the platform.
- Cookies and similar technologies: see our Cookie Policy for details.
3. Purpose of Processing
- Service provision: to operate the platform, manage your account, and enable features like food lists and comparisons.
- Analytics: to understand usage patterns and improve the service (via Google Analytics, only with your consent).
- Security: to protect the platform from abuse and unauthorized access.
- Legal compliance: to fulfill legal obligations under applicable Italian and EU law.
4. Legal Basis
- Consent (Art. 6(1)(a) GDPR): for analytics cookies and non-essential data processing. You may withdraw consent at any time.
- Contract performance (Art. 6(1)(b) GDPR): for data necessary to provide the service (account management, food lists).
- Legitimate interest (Art. 6(1)(f) GDPR): for platform security, fraud prevention, and basic service improvement.
5. Data Retention
- Account data: retained for the duration of your account. Deleted within 30 days of account deletion request.
- Navigation/analytics data: retained for a maximum of 26 months, then automatically deleted.
- Server logs: retained for a maximum of 90 days for security purposes.
6. Your Rights
Under Articles 15–22 of the GDPR, you have the right to:
- Access (Art. 15): obtain a copy of your personal data.
- Rectification (Art. 16): correct inaccurate personal data.
- Erasure (Art. 17): request deletion of your personal data ("right to be forgotten").
- Restriction (Art. 18): request restriction of processing.
- Data portability (Art. 20): receive your data in a structured, commonly used format.
- Objection (Art. 21): object to processing based on legitimate interest.
- Withdraw consent (Art. 7(3)): withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise these rights, contact us at hello@foodleup.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.
7. International Data Transfers
Some of our service providers (including hosting and analytics providers) may process data outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions under Art. 45 GDPR.
8. Cookies
For detailed information about the cookies we use, their purpose, and how to manage them, please refer to our Cookie Policy.
9. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or legal requirements. The updated policy will be published on this page with a revised "Last updated" date. We encourage you to review this page periodically.
10. Contact
For questions about this privacy policy or data protection matters, contact:
Mattivo srl
Via Pier Carlo Boggio 38, 10138 Torino (TO), Italy
Email: hello@foodleup.com