Last updated: 18 May 2026
This Cookie Policy applies to bookings and Services provided outside Italy through Chef On Demand. The Data Controller for these Services is FC – Fast Cast Services L.L.C.-FZ (Dubai, United Arab Emirates). Bookings for Services delivered in Italy are governed by a separate cookie policy of COD S.r.l. available at iubenda.com/privacy-policy/13268835/cookie-policy.
This document informs Users about the technologies that help the Application (the website www.chefondemand.it, the booking application booking.chefondemand.it and the operational platform app.chefondemand.it) to achieve the purposes described below. Such technologies allow the Owner to access and store information (for example, by using a Cookie) or use resources (for example, by running a script) on a User's device as they interact with the Application.
For simplicity, all such technologies are defined as “Trackers” in this document — unless there is a reason to differentiate. Although Cookies can be used on both web and mobile browsers, it would be inaccurate to talk about Cookies in the context of mobile apps, as they are a browser-based Tracker. For this reason, the term Cookies is only used in this document where it is specifically meant to indicate that particular type of Tracker.
Some of the purposes for which Trackers are used may also require the User's consent. Whenever consent is given, it can be freely withdrawn at any time following the instructions provided in this document.
The Application uses Trackers managed directly by the Owner (so-called “first-party” Trackers) and Trackers that enable services provided by a third party (so-called “third-party” Trackers). Unless otherwise specified within this document, third-party providers may access the Trackers managed by them.
The validity and expiration periods of Cookies and other similar Trackers may vary depending on the lifetime set by the Owner or the relevant provider. Some of them expire upon termination of the User's browsing session.
The Application uses so-called “technical” Cookies and other similar Trackers to carry out activities that are strictly necessary for the operation or delivery of the Service. These Trackers do not require the User's consent under UAE PDPL Article 5(7) and GDPR Article 6(1)(f).
Personal Data processed: session identifier; CSRF token; authentication state.
Place of processing: hosting region of the application (Railway, USA / EU).
| chef_sessionid | 14 days (sliding) |
| admin_sessionid | 14 days (sliding) |
| backoffice_sessionid | 14 days (sliding) |
| csrftoken | 1 year |
Google Tag Manager is a tag-management service provided by Google LLC or Google Ireland Limited, depending on how the Owner manages the Data processing. To understand Google's use of Data, consult Google's partner policy and the Business Data page.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy.
The iubenda Privacy Controls and Cookie Solution allows the Owner to collect and store Users' preferences related to the processing of personal information, in particular the use of Cookies and other Trackers on the Application.
Personal Data processed: IP address; Trackers.
Place of processing: Italy. Privacy Policy.
| _iub_cs-* | 1 year |
Cloudflare is used for CDN, security and edge proxy. It may set technical cookies to identify trusted traffic and protect the Application against abuse.
Personal Data processed: IP address; Trackers; Usage Data.
Place of processing: United States — global edge network. Privacy Policy.
| __cf_bm | 30 minutes |
| cf_clearance | 30 days |
The Application uses Trackers to improve the quality of the user experience and enable interactions with external content, networks and platforms. These Trackers may require consent depending on their function.
Google Fonts is a typeface visualisation service that allows the Application to incorporate fonts on its pages.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy.
Typeform is a form-builder and data-collection platform provided by TYPEFORM S.L.
Personal Data processed: company name; country; data communicated while using the service; date of birth; email address; first name; gender; geographic position; last name; number of employees; password; phone number; physical address; profession; state; Tax ID; Trackers; Usage Data; username; various types of data as specified in the privacy policy of the service; VAT Number; website.
Place of processing: Spain. Privacy Policy.
JotForm is a form-builder and data-collection platform provided by JotForm Inc.
Personal Data processed: company name; country; date of birth; email address; first name; gender; geographic position; last name; number of employees; password; phone number; physical address; profession; state; Tax ID; Trackers; Usage Data; username; VAT Number; website.
Place of processing: United States — Germany. Privacy Policy.
The WhatsApp Business widget enables Users to start a conversation with the Owner from the Application. Conversations are processed by WhatsApp under its own privacy policy.
Personal Data processed: answers to questions; contents of the email or message; data communicated while using the service; date of the message; first name; last name; phone number; profile picture; sender of the message; time the message was sent; user content.
Place of processing: Ireland — United States. Privacy Policy.
The Application uses Trackers to measure traffic and analyse User behaviour to improve the Service. These Trackers are activated only with the User's consent, except for aggregated and anonymised analytics that fall under the legitimate-interest legal basis.
Google Analytics 4 is a web-analysis service provided by Google. In Google Analytics 4, IP addresses are used at collection time and then discarded before Data is logged in any data center or server. Users can learn more by consulting Google's official documentation.
Personal Data processed: number of Users; session statistics; Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy — Opt out.
| _ga | 2 years |
| _ga_* | 2 years |
Google Analytics (Universal Analytics) is a web-analysis service that uses anonymisation of IP addresses by shortening Users' IP addresses within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy — Opt out.
| AMP_TOKEN | 1 hour |
| _ga | 2 years |
| _gac* | 3 months |
| _gat | 1 minute |
| _gid | 1 day |
HubSpot Analytics is an analytics service provided by HubSpot, Inc.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Germany. Privacy Policy.
| __hmpl | session |
| __hs_gpc_banner_dismiss | 6 months |
| __hssc | 30 minutes |
| __hssrc | session |
| __hstc | 2 years |
| hubspotutk | 2 years |
| messagesUtk | 2 years |
Microsoft Clarity is a session-recording and heat-mapping service provided by Microsoft Corporation. Microsoft processes or receives Personal Data via Microsoft Clarity, which may be used for any purpose in accordance with the Microsoft Privacy Statement, including improving and providing Microsoft Advertising.
Personal Data processed: clicks; country; custom events; device information; diagnostic events; interaction events; layout details; mouse movements; page events; positional information; scroll-to-page interactions; session duration; time zone; Trackers; Usage Data.
Place of processing: United States — United Arab Emirates — Germany — United Kingdom — Ireland — and other regions. Privacy Policy.
| ANONCHK | 10 minutes |
| CLID | 1 year |
| MR | 7 days |
| MUID | 1 year |
| SM | session |
| _clck | 1 year |
| _clsk | 1 day |
| _cltk | indefinite |
VWO — Testing is a content-performance and feature-performance testing service provided by Wingify Software Pvt. Ltd.
Personal Data processed: device information; Trackers; Universally Unique Identifier (UUID); Usage Data.
Place of processing: India. Privacy Policy.
Amplitude is a product-analytics and session-replay service used inside the booking application booking.chefondemand.it to understand User flows and improve conversion.
Personal Data processed: Trackers; Usage Data; clicks; device information; pages visited; session statistics.
Place of processing: United States. Privacy Policy.
The Application uses Trackers to deliver personalised ads or marketing content and to measure their performance. These Trackers are activated only with the User's explicit consent.
HubSpot CRM is a User-database management service provided by HubSpot, Inc.
Personal Data processed: company name; country; Current City; email address; first name; gender; last name; phone number; physical address; profession; purchase history; Trackers; Usage Data; username; various types of data as specified in the privacy policy of the service.
Place of processing: United States — Germany. Privacy Policy.
| __hmpl | session |
| __hs_gpc_banner_dismiss | 6 months |
| __hssc | 30 minutes |
| __hssrc | session |
| __hstc | 2 months |
| hubspotutk | 2 months |
| messagesUtk | 2 months |
HubSpot Lead Management is a User-database management service provided by HubSpot, Inc.
Personal Data processed: city; company name; country; date of birth; email address; first name; gender; last name; phone number; physical address; profession; purchase history; Trackers; Usage Data; username; various types of data as specified in the privacy policy of the service.
Place of processing: United States — Germany. Privacy Policy.
Google Ads conversion tracking is an analytics service that connects data from the Google Ads advertising network with actions performed on the Application.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy.
| IDE | 2 years |
| test_cookie | 15 minutes |
Google Ad Manager is an advertising service that allows the Owner to run advertising campaigns in conjunction with external advertising networks. This service uses the “DoubleClick” Cookie, which tracks use of the Application and User behaviour concerning ads, products and services offered. Users may decide to disable all the DoubleClick Cookies by visiting Google Ad Settings.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy.
| __gads | 2 years |
| __gpi | 2 years |
| IDE | 2 years |
| NID | 6 months |
| _gcl_au | 3 months |
| _gcl_aw | 3 months |
| _gcl_dc | 3 months |
| test_cookie | 15 minutes |
Google Ads Remarketing is a remarketing and behavioural-targeting service that connects the activity of the Application with the Google Ads advertising network and the DoubleClick Cookie. Users can opt out of Google's use of Trackers for ads personalisation by visiting Ads Settings.
Personal Data processed: Trackers; Usage Data.
Place of processing: United States — Ireland. Privacy Policy.
Meta Pixel is a conversion-tracking service provided by Meta. It is installed only on the chef registration wizard to measure completion of the registration funnel.
Personal Data processed: Trackers; Usage Data; conversion events.
Place of processing: Ireland — United States. Privacy Policy.
VWO — Notifications is an advertising and message-sending service that allows the Application to send push notifications, personalised on the basis of behaviour on the Application, for direct-marketing purposes. Users may opt out by visiting their device settings.
Personal Data processed: device information; Trackers; Universally Unique Identifier (UUID); Usage Data.
Place of processing: India. Privacy Policy.
The Owner uses WhatsApp Business to send transactional and, with consent, marketing messages to Users who have shared their phone number.
Personal Data processed: answers to questions; contents of the email or message; data communicated while using the service; date of the message; first name; last name; phone number; profile picture; sender of the message; time the message was sent; user content.
Place of processing: Ireland — United States. Privacy Policy.
Leadpages is a landing-page and invitation-page management service.
Personal Data processed: email address; Usage Data; various types of data as specified in the privacy policy of the service.
Place of processing: United States. Privacy Policy.
Where the use of Trackers is based on consent, Users can provide or withdraw such consent by setting or updating their preferences via the relevant privacy choices panel available on the Application (consent banner).
With regard to any third-party Trackers, Users can manage their preferences via the related opt-out link (where provided), by using the means indicated in the third party's privacy policy, or by contacting the third party.
Users may use their own browser settings to:
The browser settings, however, do not allow granular control of consent by category. Users can find information about how to manage Cookies in the most commonly used browsers at:
Users may also manage certain categories of Trackers used on mobile apps by opting out through relevant device settings such as the device advertising settings for mobile devices, or general tracking settings.
Users may follow the instructions provided by YourOnlineChoices (EU and UK), the Network Advertising Initiative (US), the Digital Advertising Alliance (US), DAAC (Canada), DDAI (Japan) or other similar services. Such initiatives allow Users to select their tracking preferences for most of the advertising tools.
The Digital Advertising Alliance also offers an application called AppChoices that helps Users control interest-based advertising on mobile apps.
Users are free to decide whether or not to allow the use of Trackers. However, Trackers help the Application to provide a better experience and advanced functionalities to Users (in line with the purposes outlined in this document). Therefore, if a User chooses to block the use of Trackers, the Owner may be unable to provide related features.
Several Trackers listed above are operated by Processors based outside the United Arab Emirates. As described in our Privacy Policy, such transfers take place in accordance with UAE PDPL Articles 22 and 23 under one or more of the following safeguards: adequacy decisions of the UAE Data Office, binding contractual measures (including EU Standard Contractual Clauses where the recipient is in the EU), explicit consent of the data subject, or necessity to perform a contract.
As a data subject, you have all the rights described in Section 7 of our Privacy Policy, including the right to access, rectify, erase, restrict, port your Personal Data, the right to withdraw consent, and the right to lodge a complaint with the UAE Data Office.
Any information that directly, indirectly, or in connection with other information — including a personal identification number — allows for the identification or identifiability of a natural person.
Information collected automatically through the Application (or third-party services employed in the Application), which can include the IP addresses or domain names of the computers utilised by the Users, the URI addresses (Uniform Resource Identifier), the time of the request, the method utilised to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's answer (successful outcome, error, etc.), the country of origin, the features of the browser and the operating system utilised by the User, the various time details per visit, the details about the path followed within the Application with special reference to the sequence of pages visited, and other parameters about the device operating system and/or the User's IT environment.
The natural person to whom the Personal Data refers and who interacts with the Application.
The natural or legal person who processes Personal Data on behalf of the Controller, as defined by UAE PDPL Article 1.
The natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of Personal Data. For Services delivered outside Italy, the Owner is FC – Fast Cast Services L.L.C.-FZ.
Cookies are Trackers consisting of small sets of data stored in the User's browser.
Tracker indicates any technology — e.g. Cookies, unique identifiers, web beacons, embedded scripts, e-tags and fingerprinting — that enables the tracking of Users, for example by accessing or storing information on the User's device.
UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, in force since 2 January 2022, together with its implementing regulations.
This Cookie Policy was last reviewed on 18 May 2026 and replaces any prior version. It relates solely to this Application unless stated otherwise within the document. The Owner may update the list of Trackers from time to time as the Service evolves; Users are kindly requested to consult the privacy policies of the respective third-party services listed in this document for complete and updated information.