Privacy Policy.

The controller of the personal data collected through this website is SOLE S.A.S. di Simona Ungureanu & C., registered office at Via Triestina 94/96, 30026 Portogruaro (VE), Italy. VAT no. 04130080270. PEC (certified email): solesimona@pec.it. Email: info@barlison.it, simona.ungure@gmail.com · Tel: 0421 287163.

For any request regarding your personal data, you can write to the contact addresses above.

Browsing data: the IT systems and software running this website acquire, during normal operation, some data whose transmission is implicit in the use of Internet protocols (e.g. IP addresses, browser type, request times). It is used to keep the site running and secure: we do not use it to identify you or to compile visitor statistics. The site is hosted by Vercel.

Data you provide: when you write to us via the contact form we collect the data you send (name, email, an optional phone number and the message), solely in order to reply to you. The message is saved in the site’s database, hosted by Supabase, which is accessed by the bar staff in charge of replying.

External content, only if you allow it: the map is from OpenStreetMap. When you load it, OpenStreetMap receives your IP address and the technical details of the request (e.g. browser and the page you come from) and processes them under its own privacy notice. If you do not agree, your browser sends no request to this service.

Instagram post photos: the photos the bar chooses to show are kept in our own archive (Supabase), like those in the gallery. Your browser asks our site for them, not Instagram or anyone else; the links to the posts open Instagram only if you click them.

The choice you make in the cookie banner is saved in your browser (see the Cookie Policy).

To reply to requests sent via the contact form: the legal basis is responding to your request and our legitimate interest in managing communications (Art. 6.1.b and f GDPR).

To keep the site running and secure, using browsing data: the controller’s legitimate interest (Art. 6.1.f GDPR).

To show the OpenStreetMap map: only with your prior consent (Art. 6.1.a GDPR), which you can withdraw at any time from the “Cookie preferences” panel. If you do not give it, the site works just the same.

To make backups and restore the site after a failure: the controller’s legitimate interest and the security measures for processing (Art. 6.1.f and Art. 32 GDPR).

To comply with legal obligations (Art. 6.1.c GDPR).

Messages sent via the contact form are kept for at most 24 months from receipt, after which they are deleted. If your request leads to a business relationship with the bar, the data needed is kept for the period required by legal obligations (for tax documents, ten years).

Browsing data stays in Vercel’s logs for the time its service provides for, under its privacy notice.

Backups: every week the site’s database and file archive are copied to GitHub. Weekly copies are kept for 6 months, six-monthly copies for 2 years. A message deleted from the management system stays in the copies already made until they expire, and is used only to restore the system after a failure.

Cookies are kept for the duration stated in the Cookie Policy.

Data may be processed by parties providing technical services to the controller, appointed as data processors (Art. 28 GDPR) and acting on our instructions.

Data processor: LA Consulting of Leonardo Antoniazzi, VAT no. 02006940932, Via del Sole 7, 33078 San Vito al Tagliamento (PN), PEC (certified email) antoniazzileonardo@pec.it. It maintains the site and the management system and hosts the database and technical services on its own accounts.

Sub-processors it has engaged: Supabase (database and file archive, photos included), Vercel (site hosting) and GitHub (site code and backups).

If you allow the map, your browser also sends data to the OpenStreetMap Foundation: it processes it under its own privacy notice and not on our behalf.

We do not sell or share your data with third parties for marketing purposes.

The site’s database and file archive are hosted by Supabase in Germany, so inside the European Union.

Vercel and GitHub are based in the United States and may process data outside the European Union. The transfer takes place with the safeguards required by the GDPR: standard contractual clauses approved by the European Commission and the EU-U.S. Data Privacy Framework.

The video that opens the home page (the grill scene) was generated with artificial intelligence tools: it is not real video footage. We also state this on the page, on the video itself.

The site does not use artificial intelligence systems to process the personal data of its visitors.

As a data subject you have the right to request access to your data, its rectification, erasure, restriction of processing, to object to processing and to data portability, within the limits of the GDPR.

You can exercise these rights by writing to the controller at the contact addresses above. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

The site is not directed at children under 14 and we do not knowingly collect data from minors without the consent of those holding parental responsibility.

We may update this notice. Changes will be published on this page together with the update date.