This is a translation: the Italian version is the legally binding one.
This notice explains how the personal data of visitors to oldceylonmilano.com (the “Site”) are processed, under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”). The Site is a showcase: it has no forms, sign-ups or accounts.
Data controller
Old Ceylon di Hewa Battage, sole proprietorship, registered at Via Valassina 16, 20159 Milano (MI), Italy, VAT IT12516640963. Contact: email oldceylon2022@gmail.com, certified email (PEC) oldceylon@tutelapec.it.
Data processed and purposes
- Browsing data. IP address, browser type, pages requested, date and time: recorded automatically by the hosting provider's servers, only to protect the Site and deliver its pages. Legal basis: the controller's legitimate interest in the security and operation of the Site (Art. 6(1)(f) GDPR).
- Contact by phone, WhatsApp or email. If you call or write to us, we use the data you send (name, number, message) only to reply and to handle the booking or event you asked about (Art. 6(1)(b) GDPR). WhatsApp and the email service are independent services with their own privacy notices.
The Site does not use analytics, profiling or advertising tools.
Recipients and transfers
The Site is technically managed by Reggle Studio (reggle.studio), acting as data processor under Art. 28 GDPR for hosting and maintenance, which uses Cloudflare, Inc. to deliver the Site.
Google (Google Maps) receives browsing data only if you choose to load the map in the “Visit” section.
Cloudflare and Google may process data outside the European Union (United States): both take part in the EU–US Data Privacy Framework, and the transfer is also covered by the European Commission's Standard Contractual Clauses.
External links
Links to Glovo, Deliveroo, Instagram, Facebook and the Google reviews lead to third-party services, which process data under their own privacy notices.
Retention
Technical logs are kept only as long as strictly needed for security, normally no more than 30 days. Contact messages are kept as long as needed to reply and to handle the booking or event.
Your rights
You can ask at any time to access, rectify or erase your data, to restrict processing, for data portability, and object to processing (Articles 15–22 GDPR), by writing to oldceylon2022@gmail.com or to the PEC oldceylon@tutelapec.it. We reply free of charge within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it).