Personal data processing notice

Pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR)

Last updated: [DATA DI PUBBLICAZIONE]

1. Data controller

MIPROJECT S.p.a. Via Daniele Manin 21, 20121 Milano (MI) VAT IT10234560963

Place of business: La Jungle De Plein, Via Daniele Manin 17, 20121 Milan Phone: +39 02 6556 3706 · Email: milan@lajungledeplein.com

Requests concerning personal data: milan@lajungledeplein.com

2. Data processed

This website is informational: it hosts no registration or contact forms, requires no account and handles no payments.

a) Browsing data. The systems delivering the site acquire, as part of the normal operation of Internet protocols, data such as IP address, browser and device type, operating system, date and time of the request and pages visited. This data is used to deliver the service, ensure its security and derive anonymous statistics, and remains in the technical logs of the providers listed in section 5.

b) Language preference. Your choice between Italian and English is stored in a technical cookie on your device. Details in the Cookie Policy.

c) Data provided voluntarily. If you write to milan@lajungledeplein.com or events@thepleinhotel.com, or if you call us, we process the data you provide solely in order to reply. Nothing is sent through the site: you use your own mail client or telephone.

d) Bookings. Table bookings are handled through TheFork, embedded in the Book page or reached via an external link. Data entered in the form is collected and processed by TheFork as an independent controller, under its own notice. We receive from TheFork the information needed to manage the booking: name, contact details, date, time and number of guests.

We do not process data belonging to the special categories under art. 9 GDPR. We carry out no profiling and no automated decision-making.

3. Purposes and legal bases

PurposeLegal basis
Delivering the site, ensuring its operation and securityLegitimate interest — art. 6.1.f
Remembering the chosen languageTechnical cookie — art. 122 Italian Privacy Code
Loading the third-party booking formConsent — art. 6.1.a
Managing bookings and contact requestsPre-contractual measures — art. 6.1.b
Complying with legal obligations, including taxLegal obligation — art. 6.1.c

4. Retention

DataPeriod
Hosting and CDN technical logsUp to 12 months
Language preference cookie12 months, or until cleared from the browser
Booking form and map activationUntil cleared from the browser
Booking data received from TheFork10 years, for tax and administrative obligations
Email correspondenceFor as long as needed to handle the request and, where a contractual relationship follows, for the statutory periods

5. Recipients

The following process data on our behalf as processors under art. 28 GDPR:

  • ·Vercel Inc. — application hosting and delivery (United States)
  • ·BunnyWay d.o.o. — image and video delivery network (Slovenia, EU)

The following act as independent controllers, under their own notices:

  • ·LaFourchette SAS / TheFork (TripAdvisor group) — booking service
  • ·Google Ireland Limited — embedded map and Google Tag Manager

We do not transfer or sell data to third parties for commercial purposes.

6. Transfers outside the European Union

Some providers are based, or have parent companies, outside the European Economic Area: Vercel Inc. is based in the United States and TheFork belongs to the TripAdvisor group, which is US-based.

Transfers take place on the basis of the safeguards provided for in Chapter V of the GDPR: European Commission adequacy decisions, where applicable, or Standard Contractual Clauses.

7. Your rights

Under artt. 15-22 GDPR you may at any time: access your data, request its rectification or erasure, obtain restriction of processing, receive your data in a portable format, object to processing based on legitimate interest, and withdraw consent without affecting the lawfulness of processing already carried out.

Write to milan@lajungledeplein.com. We reply within one month of receipt.

You may also lodge a complaint with the Italian Data Protection Authority — Piazza Venezia 11, 00187 Rome — www.garanteprivacy.it

8. Minors

This site is not directed at children under 14 and does not knowingly collect their data.

9. Changes

This notice may be updated; the date at the top indicates the latest revision. Substantial changes are announced on the site.

This is a translation for convenience. In case of any discrepancy, the Italian version prevails.