Cookies

Who runs this site

The data controller is Ivana Dimić pr Picerija Pizzaxo Niš, Karadžićeva 12/1, 18000 Niš. For questions about your data, contact us at office@xopizza.rs, 063 424 333.

Google Analytics, only with your permission

If you accept, Google Analytics records page visits, approximate location, browser and device details, and enabled measurements of site use, such as scrolling, outbound clicks and form interactions. We use the data for aggregate reports. We do not send Google Analytics your name, phone number, address or order contents, and the order tracking page is not measured. We do not use Google Analytics for advertising, and Google signals are disabled. Until you accept, the site does not load Google Analytics or send it data. The legal basis for this processing is your consent.

Who receives the data

Google LLC (USA) processes the data on our behalf, under Google's data processing terms. The data is stored on Google's servers, including servers in the USA. According to Google, Google Analytics does not log or store IP addresses.

For how long

We remember your answer for 6 months, in the xo-consent cookie; after that we ask again. Google Analytics' cookies (_ga and _ga_*) last no longer than that. User-level and event-level data is retained for 2 months, according to this Google Analytics property's setting; that period does not apply to aggregate reports.

Your choice

The site and ordering work exactly the same if you reject. You can change your choice at any time using the button below or the “Cookies” button in the footer of every page. When you withdraw your permission, we delete Google Analytics' cookies from your browser.

Change my choice

What the site stores to function

The site does not ask for consent for these items: they support ordering, pricing and prizes, not analytics or advertising. Cookies go only to our server; the rest stays in your browser.

xo-consent

your answer to the cookie question · 6 months

xo-mode

whether you see delivery or pickup prices · 30 minutes after your last visit

xo_visitor

a random identifier used to limit this browser to one wheel spin per day · 1 year

xo_won_*

proof that this browser won a specific prize on the wheel · 26 hours

xo_prize_seen

remembers that the unavailable-prize warning was already shown · 26 hours

basket (in the browser)

what you put in the basket · until you order or empty it

coupon (in the browser)

a code you saved · until you use or remove it

details for the next order (in the browser)

name, phone, email, address, address note and, if saved, company details from your last order, so you do not type them again · 180 days after your last order

xo-checkout-key (in the browser)

prevents the same order from being sent twice · until the order goes through or you close the tab

xo.custom-draft.v1.* (in the browser)

your ingredient choices for a build-your-own pizza, for now · until you add it to the basket or close the tab

xo.code-offered.v1.* (in the browser)

remembers that the automatic code was already offered to you · until you close the tab

xo.meter-closed.v1.* (in the browser)

remembers that you closed the deals bar at the bottom of the menu, until the basket reaches the next deal · until the basket reaches a new deal; emptying the basket leaves an empty entry until you clear the site's data in the browser

small preferences (in the browser)

such as the wheel's sound and closed notices · until you clear the site's data in your browser

Visit counting, without cookies

The site counts how many people open it, so we know how many visits end in an order. It uses no cookies for this and writes nothing to your browser. We record the page, the site you came from, and whether the device is a phone, a tablet or a computer. To recognise repeat visits within one day, we turn your IP address and browser details into a shortened code using a random value that is valid for that business day only and is deleted within minutes after it ends. In the same way, under the same daily value, we count how many requests come from one address, to prevent abuse; that counter is deleted at most two hours after the last request. We do not keep the IP address or the browser details, so once the daily value is deleted, not even we can link the code to you. Visit records are deleted after 400 days and are not shared with anyone.

Your rights

You have the right to ask to see your data, to have it corrected or deleted, and to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.