Privacy & cookie policy

Who is responsible

The data controller is the Ita restaurant, ul. Józefińska 2, 30-529 Kraków. For privacy matters, contact us using the details on the Contact page.

What this site does not do

We use no advertising tools (such as Meta or Google Ads pixels), we do not profile visitors for advertising and we do not sell data. There are no contact forms.

Cookies and browser storage

__cf_bm – Cloudflare cookie protecting the site from bots, valid up to 30 minutes (necessary).

__dpl – technical hosting cookie that serves the correct site version (necessary).

ita-consent – your map and statistics choices saved in browser storage (localStorage), with no expiry; clear the site's data to remove it.

Necessary cookies do not require consent because the site would not work properly without them.

Hosting and statistics

The site is hosted by Lovable (on Cloudflare infrastructure). On each visit the server processes your IP address, browser type and the page visited to deliver the site, protect it from abuse and count aggregate, anonymous visit statistics. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).

Google Maps (with consent)

On the Contact page you can display a Google map. Until you do, nothing is loaded from Google. Once you consent, Google Ireland Ltd. receives your IP address and may set its own cookies; data may be transferred to the USA. Legal basis: consent (Art. 6(1)(a) GDPR). Withdraw it at any time with the “Privacy settings” button in the site footer.

Google Analytics (with consent)

With your consent the site loads Google Analytics (gtag.js) run by Google Ireland Ltd. We record there: the pages visited, an approximate location derived from the IP address, the browser and device identifier, and clicks on the booking button, menu download and photo opening. We never send your name, e-mail address or phone number. Google may set its own cookies and transfer data to the USA. Legal basis: consent (Art. 6(1)(a) GDPR). Once you withdraw it, the page reloads and the script is removed – Google Analytics then sends nothing.

External links

The booking button leads to Google's “Reserve a table” service operated with the Mój Stolik portal; the Instagram and Facebook links lead to Meta services. Data you enter there is processed by those services under their own policies – our site shares nothing with them until you click a link.

Your rights

You have the right to access, rectify and erase your data, to restrict processing, to object and to withdraw consent. You may also lodge a complaint with the Polish data protection authority (UODO, uodo.gov.pl).