John Bistecchino

Notice under EU Regulation 2016/679 (GDPR)

Privacy & cookies

Last updated: June 2026. A few lines, written to be read.

Data controller

Birban Sas

P.IVA 01385370539 · Via Albereta 9, 58022 Follonica (GR)
Contact: 366 323 4996

01What data we process

This is a showcase website: no sign-ups, accounts or forms. The data that may be processed is limited to:

  • Browsing data: IP address, browser and pages visited, logged technically by the servers hosting the site to keep it working and secure.
  • Anonymous usage statistics: when you tap a booking button (WhatsApp, phone, Menu x2, Off the menu) the site only records the button type, time, language and whether you browse from a phone or computer. Nothing that identifies you, no cookies.
  • Visit statistics (only with your consent): anonymous visit measurement via PostHog, enabled only if you choose “Accept” in the cookie banner.
  • Direct contact: if you message us on WhatsApp or call, your data (number, name, message) is processed to handle the booking. WhatsApp is a service by Meta Platforms Ireland Ltd with its own privacy notice.

02Why and on what basis

  • Site operation and security: legitimate interest of the controller (art. 6.1.f GDPR).
  • Handling bookings: pre-contractual measures at your request (art. 6.1.b GDPR).
  • Visit statistics: your consent (art. 6.1.a GDPR), which you can withdraw anytime from “Cookie preferences”.

03Cookies and similar tools

The site uses the bare minimum:

  • Technical (always on): store your language and your cookie choice in your browser (localStorage). No consent required.
  • Statistics (only if you accept): PostHog, to count visits and page views in aggregate. No session recording.
  • Google Maps: the map loads only if you press “Show the map” or accepted all cookies: until then Google receives no data. Google Ireland Ltd processes data under its own notice.
  • Typefaces: fonts are hosted directly on our domain: no request is made to Google Fonts or any other provider.

04Where data goes and for how long

The site is hosted on the cloud infrastructure of our technical provider (Emergent), acting as data processor. Technical browsing data is kept only as long as needed for security; anonymous button statistics for 12 months; booking data until the booking is handled.

Some providers (Google, Meta, PostHog) may process data outside the EU under GDPR safeguards (standard contractual clauses or adequacy decisions).

05Your rights

You can ask at any time for access, rectification, erasure, restriction, portability of your data and object to processing (arts. 15–22 GDPR), and withdraw consent. Just contact the controller at the details above.

If you believe the processing breaches the law you may lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

06Minors and updates

The site is not intended for children under 14 and does not knowingly collect their data.

This notice may be updated: the valid version is always the one published on this page.

Birban Sas · P.IVA 01385370539