← Back to the site
Company name: Union Bright AG (public limited company / Aktiengesellschaft)
Registered office: Hauptstrasse 50, 8280 Kreuzlingen, Switzerland (c/o R. Rutishauser-Treuhand AG)
Company identification number (UID): CHE-216.024.444
Registering authority: Handelsregisteramt des Kantons Thurgau
Representative: Attila Berkics (member of the Board of Directors)
E-mail: [email protected]
Website: lanostrafamigliapizza.com
The Controller operates the website and partner portal of the La Nostra Famiglia pizza vending machine network. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the Swiss Federal Act on Data Protection.
| Processing activity | Data processed | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact / franchise enquiry form | name, company name, phone number, e-mail, city/location, subject of enquiry | responding to the enquiry, preparing an offer, keeping in contact | Art. 6(1)(a) GDPR consent, or (b) steps prior to entering into a contract | no longer than 24 months from the enquiry, or until consent is withdrawn |
| Meta instant form (Facebook/Instagram lead ad) | name, e-mail, phone number, city, answers to the form's qualifying questions (subject of interest, planned start, planned investment), ad identifiers | responding to the enquiry, sending the information pack, preparing an offer, keeping in contact; for enquirers who came through this form, we send Meta only the status changes of the enquiry with the Meta lead ID (no name, e-mail address or phone number), so that Meta can deliver our ads more effectively | Art. 6(1)(a) GDPR consent, or (b) steps prior to entering into a contract | no longer than 24 months from the enquiry, or until consent is withdrawn; Meta stores the submitted form in its own system for 90 days |
| Click measurement in our e-mails | for the links in the e-mails we send to enquirers: which link was clicked and when (the link contains an individual identifier); we do not store IP addresses or browser data for this purpose, and we do not measure whether an e-mail was opened | understanding which information materials interest the enquirer, so that we can tailor further contact accordingly | Art. 6(1)(f) GDPR legitimate interest | together with the enquirer's other data, no longer than 24 months from the enquiry |
| Partner portal (machine-owner partners) | user name, partner name, machine identifier, orders placed and service tickets | providing the partner service, handling orders and faults | Art. 6(1)(b) GDPR performance of a contract | for the duration of the partnership and thereafter for the statutory limitation period |
| Server and security logs | IP address, timestamp, request data | operational security, abuse prevention | Art. 6(1)(f) GDPR legitimate interest | no longer than 12 months |
| Website usage analysis (Microsoft Clarity) | clicks, scrolling, mouse movements and taps, the pages viewed and the time spent on them, browser and device type, screen size, approximate location (country) derived from the IP address; in the recordings, the contents of form fields, numbers and e-mail addresses are masked | heatmaps and session recordings, so that we can see what is unclear or does not work on the website, and improve it | Art. 6(1)(a) GDPR consent (statistics cookies) | recordings 30 days, heatmap and click data 9 months |
| Cookies | see section 7 | operation of the website, settings | strictly necessary cookies: legitimate interest; other cookies: consent | see section 7 |
The Controller uses the following processors:
We do not pass personal data to third parties for marketing purposes. Data is transferred on the basis of a legal obligation or to the processors listed above. Switzerland is recognised by the European Commission as a third country ensuring an adequate level of protection.
The data subject may request access to their personal data, its rectification, erasure or restriction of processing, may object to processing, and may exercise the right to data portability. Consent-based processing may be withdrawn at any time, free of charge. We respond to requests within 30 days at the latest.
Data subjects in Hungary may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11.). Data subjects in other Member States may contact the supervisory authority or the courts of their habitual residence.
The website uses three types of cookies. Strictly necessary cookies may be used without consent. Statistics (Google Analytics 4, Microsoft Clarity) and marketing (Meta Pixel) cookies are only activated with express consent. Consent may be withdrawn at any time.
| Cookie | Category | Purpose | Lifetime |
|---|---|---|---|
| lnf_consent | necessary | remembering the cookie decision | 12 months |
| Language setting | necessary | remembering the chosen language | session |
| cf_clearance, __cf_bm | necessary | bot and abuse protection | up to 30 days |
| Partner portal session | necessary | keeping the logged-in state | until the end of the session |
| _ga, _ga_* | statistics | anonymous visitor statistics | up to 2 years |
| _clck, _clsk | statistics | heatmaps and session recordings (Microsoft Clarity): _clck recognises a returning browser, _clsk links the page views of one visit; Microsoft also sets its own cookies on the clarity.ms domain (e.g. CLID) | _clck: 1 year, _clsk: 1 day |
| _fbp, _fbc | marketing | measuring and targeting ads | up to 3 months |
Statistics and marketing providers process data under their own privacy policies. Transfers outside the EU take place under the EU–US Data Privacy Framework. For Microsoft Clarity, the Microsoft Privacy Statement applies.
You can change your cookie choices at any time via the Cookie settings link in the footer.
The Controller may amend this notice at any time; the current version is always available on this page.
← Back to the home page