Privacy Policy

Who we are

This website is operated by Lasagna Lab ("we", "us"), located at Zonnebaan 50, 3542 EG Utrecht, the Netherlands, and registered with the Dutch Chamber of Commerce (KVK) under number 42162018. We are a lasagna and meatball delivery service in Utrecht and the controller of your personal data as described in this privacy policy. For any privacy questions you can contact us at hello@lasagnalab.nl.

What data we collect

When you place an order, we ask for the information we need to deliver it:

• your name;
• your delivery address (street, house number, postcode and city);
• your phone number and email address;
• your preferred delivery time and any notes you add.

If you mention an allergy or dietary need in the notes yourself, that is information about your health. We use it only to prepare and deliver your order safely.

How we use your data

We use your data only for your order: to prepare and deliver it, to contact you if needed, and to send you an email confirmation — and to protect the order form against abuse (see below). We do not sell your data and we do not use it for third-party advertising.

Legal basis

We process your data because it is necessary to fulfil your order (performance of a contract, Article 6(1)(b) GDPR). Data we must keep for our accounts is kept to meet a legal obligation (Article 6(1)(c) GDPR). We protect the order form against abuse on the basis of our legitimate interest in a secure website (Article 6(1)(f) GDPR).

Hosting, email and processors

Our website and ordering system run on Cloudflare. When you place an order, we store it in a Cloudflare database so we can prepare and deliver it. At checkout we use Cloudflare Turnstile to prevent abuse by bots; it checks technical data about your browser and connection (such as your IP address). For providing these services, Cloudflare acts as a processor on our behalf. Cloudflare also uses these technical signals to improve Turnstile's bot detection, for which it acts as an independent controller; see Cloudflare's Turnstile privacy addendum.

To send order and confirmation emails we use Resend, an email service that also acts as a processor on our behalf. Resend processes the data contained in the email solely to deliver the email and not for its own purposes.

Resend stores the emails, and so your order details, in the United States. Cloudflare may also process data outside the European Economic Area, because its network is global. This happens only on the basis of the EU-US Data Privacy Framework (an adequacy decision of the European Commission) or the European Commission's standard contractual clauses. You can request a copy of the standard contractual clauses from us.

Retention

We keep order data no longer than necessary to handle your order and to meet our legal obligations. Data we need for our accounts is kept for as long as the law requires (in the Netherlands, generally 7 years).

Cookies and analytics

We do not use tracking cookies or advertising trackers, so no cookie banner is required. If we measure website statistics, we do so in a cookieless, privacy-friendly way that does not identify you personally.

Your rights

You have the right to access, correct or delete your data, to restrict its processing and to data portability. You may also object to processing based on our legitimate interest. To exercise these rights, contact us at hello@lasagnalab.nl or by phone at +39 391 408 2104. You may also lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).