Notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"). Last updated: July 2, 2026.
Courtesy translation: in the event of any discrepancy, the Italian version shall prevail, available at https://kora-food.com/privacy
This notice covers the kora-food.com website and the Kora platform, the AI-powered ordering assistant for the restaurant industry operated by Programmatica S.r.l. and configurable by restaurants (the "customers") to take orders from their users on WhatsApp, Telegram and the web.
Programmatica S.r.l.
Via Triumplina 126, 25123 Brescia (BS) — Italia
P. IVA 03290660988
Email: [email protected] — Tel: +39 030 7776452
Website: programmatica.net
For conversations with the assistant of an individual restaurant, the Data
Controller is the restaurant itself and Programmatica S.r.l. acts as Data
Processor on its behalf: the applicable notice is the dedicated one available
in the restaurant's chat channel (page /privacy/<locale>).
Our servers automatically record technical logs of requests: IP address, date and time, requested page, browser (user-agent). They are used solely for the operation and security of the website. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: automatically deleted after 14 days.
The text of your question is sent to our server and, in order to generate the answer, to the artificial intelligence provider OpenAI. Questions are not stored in our databases nor linked to a profile; the IP address is kept in memory for a maximum of 10 minutes for the sole purpose of preventing abuse. We invite you not to include personal data in your questions. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b)) and legitimate interest in preventing abuse (Art. 6(1)(f)). If during the conversation you voluntarily choose to leave a contact detail (email or phone) to be contacted back, it is forwarded to our sales team and used only to respond to your request. Legal basis: pre-contractual measures at the data subject’s request (Art. 6.1.b GDPR).
If you write to us at [email protected], we process your email address and the data you choose to share with us for the sole purpose of replying to you and handling your request. Legal basis: pre-contractual measures taken at your request (Art. 6(1)(b)). Retention: for the time needed to handle the request and any relationship arising from it.
The kora-food.com website does not use cookies of any kind, nor tracking or profiling tools (analytics, pixels, fingerprinting). For this reason there is no consent banner.
Messages are forwarded to language model providers (Anthropic, OpenAI, Google) to generate the responses; they are not used by the providers for model training. For the WhatsApp channel, messages pass through the Meta Platforms infrastructure, which is subject to its own privacy policy. Some providers are based in the United States: transfers take place on the basis of the EU-U.S. Data Privacy Framework and/or the standard contractual clauses approved by the European Commission.
Conversations are retained for the time necessary for the operation of the service and for support purposes; you may request their deletion by contacting the controller.
No profiling or automated decision-making producing legal effects on data subjects is carried out. The assistants' responses are generated automatically but serve only to provide information and to collect orders confirmed by the user.
Pursuant to Articles 15-22 GDPR you may exercise your rights of access, rectification, erasure, restriction, portability and objection by writing to [email protected]. If you believe the processing infringes the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it).
All communications take place over encrypted channels (HTTPS, TLS). The most sensitive data (such as phone numbers) are stored in encrypted form and the credentials for accessing third-party systems are kept in protected form.
Any updates to this notice will be published on this page together with the date of the update.