John Bistecchino

Notice under EU Regulation 2016/679 (GDPR)

Privacy & cookies

Last updated: June 2026. A few lines, written to be read.

Data controller

Birban Sas

P.IVA 01385370539 · Via Albereta 9, 58022 Follonica (GR)
Contact: 366 323 4996

01What data we process

This is a showcase website: no sign-ups, accounts or forms. The data that may be processed is limited to:

  • —Browsing data: IP address, browser and pages visited, logged technically by the servers hosting the site to keep it working and secure.
  • —Anonymous usage statistics: the site counts visits (day, time, language, phone or computer, referring site) and taps on the booking buttons (WhatsApp, phone, Menu x2, Off the menu). To estimate unique visitors it uses a pseudonymous fingerprint computed server-side (IP address and browser hashed together) that changes every day and cannot be traced back to you: the IP address is not stored. No cookies.
  • —Visit statistics (only with your consent): anonymous visit measurement via PostHog, enabled only if you choose “Accept” in the cookie banner.
  • —Google Analytics 4 (only with your consent): aggregate statistics on visits and button usage (phone, WhatsApp, email, map, PDF menu, language switch) via Google Analytics 4 by Google Ireland Ltd., enabled only if you choose “Accept” in the banner. Google Analytics 4 does not store IP addresses and receives no personal data such as phone numbers, emails or names. You can withdraw consent at any time from “Cookie preferences”.
  • —Direct contact: if you message us on WhatsApp or call, your data (number, name, message) is processed to handle the booking. WhatsApp is a service by Meta Platforms Ireland Ltd with its own privacy notice.

02Why and on what basis

  • —Site operation, security and anonymous statistics: legitimate interest of the controller (art. 6.1.f GDPR).
  • —Handling bookings: pre-contractual measures at your request (art. 6.1.b GDPR).
  • —Visit statistics: your consent (art. 6.1.a GDPR), which you can withdraw anytime from “Cookie preferences”.

03Cookies and similar tools

The site uses the bare minimum:

  • —Technical (always on): store your language and your cookie choice in your browser (localStorage). No consent required.
  • —Statistics (only if you accept): PostHog, to count visits and page views in aggregate. No session recording.
  • —Google Analytics 4 (only if you accept): Google Ireland Ltd., for aggregate visit statistics with Consent Mode: without your consent no cookie is stored and no request is sent to Google Analytics. IP addresses are not stored by Google Analytics 4. Consent can be withdrawn from “Cookie preferences”.
  • —Marketing (only if you accept): Meta Pixel (Facebook/Instagram), to measure the effectiveness of our ads: it records the visit and taps on the booking buttons. Meta Platforms Ireland Ltd processes data as an independent controller under its own notice.
  • —Google Maps: the map loads only if you press “Show the map” or accepted all cookies: until then Google receives no data. Google Ireland Ltd processes data under its own notice.
  • —Typefaces: fonts are hosted directly on our domain: no request is made to Google Fonts or any other provider.

04Where data goes and for how long

The site is hosted on the cloud infrastructure of our technical provider (Emergent), acting as data processor. Technical browsing data is kept only as long as needed for security; anonymous visit and button statistics for 12 months; booking data until the booking is handled.

Some providers (Google, Meta, PostHog) may process data outside the EU under GDPR safeguards (standard contractual clauses or adequacy decisions).

05Your rights

You can ask at any time for access, rectification, erasure, restriction, portability of your data and object to processing (arts. 15–22 GDPR), and withdraw consent. Just contact the controller at the details above.

If you believe the processing breaches the law you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

06Minors and updates

The site is not intended for children under 14 and does not knowingly collect their data.

This notice may be updated: the valid version is always the one published on this page.

Birban Sas · P.IVA 01385370539