Privacy Policy

Last updated: September 2026

1. Who processes your data

The data controller is Bar Brera srl, registered office at Via Felice Casati 32, 20124 Milan, VAT no. IT12461420965, operating address Via Brera 23, 20121 Milan. For any request concerning your data you can write to info [chiocciola] barbrera.com or call +39 02 877091.

We have not appointed a Data Protection Officer: none of the cases in which article 37 of the Regulation makes it mandatory applies.

2. What we collect and why

2.1 The site forms

When you fill in the contact form or the availability request for an event we collect the data you write: name, email address, telephone number and the content of the message. We use it to reply to you and, if the request goes further, to prepare a proposal.

The legal basis is the pre-contractual measures taken at your request (art. 6.1.b of the Regulation) and our legitimate interest in replying to those who write to us (art. 6.1.f). The consent box in the form records that you have read this notice.

2.2 The newsletter

If you subscribe we collect your email address. The legal basis is your consent (art. 6.1.a), collected with a separate box that is never pre-ticked.

We use double opt-in: after signing up you receive an email and you enter the list only if you click the confirmation button. The date, time and network address of that click are kept as proof of consent. You can withdraw it at any time from the link at the bottom of every message, without writing to us.

Addresses collected through the forms do not enter the newsletter. They are two different legal bases and they stay separate.

2.3 Browsing

The site measures visits in aggregate, anonymous form, without cookies and without building a profile of the visitor. We do not use Google Analytics. What we see is how many people opened a page, not who.

The hosting server records accesses in technical logs, as any web server does: they serve security and fault diagnosis.

3. How long we keep it

The twelve months after unsubscription keep the proof of consent: it is the only document that protects us if someone claims they never signed up.

4. Who we entrust it to

We do not sell or pass on your data to anyone. Outside Bar Brera it is processed by a small number of suppliers, each only for the part that concerns them.

With the suppliers listed and the configuration in use today, data stays on servers in the European Union. If this changes, we update this page.

Besides these, the Google map and the YouTube videos are third party services that load only if you ask for them. When you do, your browser contacts Google directly, and Google processes the data of that connection under its own terms, over which we have no control.

5. Cookies

Here is what the site writes on your device, and when.

Until you activate the map or a video, the site installs no profiling cookies and no third party cookies. The site may use technical cookies strictly necessary for its operation and security, which are not used for profiling or advertising.

The site keeps the language you choose on your device, so it is still there on your next visit. It is not a cookie, it is not sent to anyone and it does not identify you: it is a preference you set yourself, and you can remove it by clearing the site data in your browser.

Three technical choices make that sentence true:

• the photographs from the Instagram profile are downloaded by our server and served from our own domain: your browser never contacts Meta;
• visit statistics are collected by Plausible, whose script is loaded from the supplier's domain and therefore contacted by your browser: it writes no cookies, uses no persistent identifiers and does not rebuild a profile of the visitor;
• the Google map and the YouTube videos, the latter in youtube-nocookie.commode, load only if you click on them, and we tell you so at that moment.

If you activate the map or a video, from that moment Google or YouTube can write their own cookies and receive your network address. That is exactly why they do not start on their own.

You see no banner because before that click there is nothing to accept: technical cookies are exempt, and visit measurement, using neither cookies nor persistent identifiers, does not require consent.

6. Your rights

At any time you can ask us to access your data, correct it, erase it, restrict its processing, receive it in a machine readable format or object to the processing (articles 15 to 22 of the Regulation). Where processing is based on consent, you can withdraw it without affecting what was done before.

Write to info [chiocciola] barbrera.com: we reply within thirty days.

If you believe the processing breaches the Regulation you can contact the Italian Data Protection Authority (garanteprivacy.it) or the authority of the country where you live.

7. If something changes

If we change the way we process data we update this page and change the date at the top. Substantial changes are communicated to newsletter subscribers.

This English version is a courtesy translation. In case of any discrepancy between the two versions, the Italian text prevails.