Personal data processing notice
Pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR)
Last updated: [DATA DI PUBBLICAZIONE]
1. Data controller
MIPROJECT S.p.a. Via Daniele Manin 21, 20121 Milano (MI) VAT IT10234560963
Place of business: La Jungle De Plein, Via Daniele Manin 17, 20121 Milan Phone: +39 02 6556 3706 · Email: milan@lajungledeplein.com
Requests concerning personal data: milan@lajungledeplein.com
2. Data processed
This website is informational: it hosts no registration or contact forms, requires no account and handles no payments.
a) Browsing data. The systems delivering the site acquire, as part of the normal operation of Internet protocols, data such as IP address, browser and device type, operating system, date and time of the request and pages visited. This data is used to deliver the service, ensure its security and derive anonymous statistics, and remains in the technical logs of the providers listed in section 5.
b) Language preference. Your choice between Italian and English is stored in a technical cookie on your device. Details in the Cookie Policy.
c) Data provided voluntarily. If you write to milan@lajungledeplein.com or events@thepleinhotel.com, or if you call us, we process the data you provide solely in order to reply. Nothing is sent through the site: you use your own mail client or telephone.
d) Bookings. Table bookings are handled through TheFork, embedded in the Book page or reached via an external link. Data entered in the form is collected and processed by TheFork as an independent controller, under its own notice. We receive from TheFork the information needed to manage the booking: name, contact details, date, time and number of guests.
e) Statistical measurement. If you consent to the corresponding categories, Google Analytics 4 collects, in pseudonymised form, the identifier assigned by the cookie, the pages viewed, the source you arrived from, your device type and an approximate geographic area. We do not identify you directly and we do not link this data to your name. Without your consent no such collection takes place.
We do not process data belonging to the special categories under art. 9 GDPR. We carry out no profiling and no automated decision-making.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Delivering the site, ensuring its operation and security | Legitimate interest — art. 6.1.f |
| Remembering the chosen language | Technical cookie — art. 122 Italian Privacy Code |
| Embedding the third-party booking form and map | Legitimate interest — art. 6.1.f |
| Managing bookings and contact requests | Pre-contractual measures — art. 6.1.b |
| Measuring use of the site with statistics tools | Consent — art. 6.1.a |
| Measuring the effectiveness of advertising campaigns | Consent — art. 6.1.a |
| Complying with legal obligations, including tax | Legal obligation — art. 6.1.c |
4. Retention
| Data | Period |
|---|---|
| Hosting and CDN technical logs | Up to 12 months |
| Language preference cookie | 12 months, or until cleared from the browser |
| Cookie consent preferences | 12 months |
| Statistical measurement data (Google Analytics) | 14 months |
| Booking data received from TheFork | 10 years, for tax and administrative obligations |
| Email correspondence | For as long as needed to handle the request and, where a contractual relationship follows, for the statutory periods |
5. Recipients
The following process data on our behalf as processors under art. 28 GDPR:
- ·Vercel Inc. — application hosting and delivery (United States)
- ·BunnyWay d.o.o. — image and video delivery network (Slovenia, EU)
- ·Google Ireland Limited / Google LLC — statistical and advertising measurement services
- ·CookieYes Limited — cookie preference management
The following act as independent controllers, under their own notices:
- ·LaFourchette SAS / TheFork (TripAdvisor group) — booking service
- ·Google Ireland Limited — embedded map and Google Tag Manager
We do not transfer or sell data to third parties for commercial purposes.
6. Transfers outside the European Union
Some providers are based, or have parent companies, outside the European Economic Area: Vercel Inc. is based in the United States, TheFork belongs to the US-based TripAdvisor group, and the measurement services are provided by Google Ireland Limited with Google LLC, a US company, as its parent.
Transfers take place on the basis of the safeguards provided for in Chapter V of the GDPR: the adequacy decision for the EU-US Data Privacy Framework, for providers that adhere to it, and Standard Contractual Clauses as a residual safeguard in the other cases.
7. Your rights
Under artt. 15-22 GDPR you may at any time: access your data, request its rectification or erasure, obtain restriction of processing, receive your data in a portable format, object to processing based on legitimate interest, and withdraw consent without affecting the lawfulness of processing already carried out.
Write to milan@lajungledeplein.com. We reply within one month of receipt.
You may also lodge a complaint with the Italian Data Protection Authority — Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it
8. Minors
This site is not directed at children under 14 and does not knowingly collect their data.
9. Changes
This notice may be updated; the date at the top indicates the latest revision. Substantial changes are announced on the site.
This is a translation for convenience. In case of any discrepancy, the Italian version prevails.