Privacy & Cookie Policy

1.1 Data Controller

The controller of your personal data is:
Birrificio Artigianale 'Mbedicoast
Contrada Piedi Le Coste, 13 - 85048 Rotonda (PZ), Italy
Tax code & VAT: 01957750761
Email: [email protected]
Phone: +39 340 7096 563

1.2 Types of Data Collected

This website collects the following personal data:

• Booking data: when you book a table through the online form we collect your name, phone, email, date and time, number of guests (including any details about children and their needs, for example a high chair or stroller), any requested services (for example the table BBQ) and any notes. Notes are optional: if you mention allergies or intolerances, that information is used solely to handle your booking properly. Please do not enter personal data that is not necessary.
• Contact data: when you contact us by email or phone (name, email, phone number, message).
• Browsing data: through Microsoft Clarity, only with your prior consent, we collect anonymised data about browsing behaviour (mouse movements, clicks, scrolling, pages visited) to analyse and improve the user experience on the site.

1.3 Purpose of Processing

Your personal data is processed for the following purposes:

• To handle booking requests and communicate the outcome (confirmation or, where applicable, unavailability)
• To respond to requests for information
• To improve the browsing experience on the site and carry out anonymous statistical analysis of web traffic
• To comply with legal obligations

1.4 Legal Basis for Processing

The processing of your data is based on:

• Performance of pre-contractual and contractual measures (Art. 6.1.b GDPR): to handle your booking and communicate its outcome
• Consent (Art. 6.1.a GDPR): for third-party analytics cookies and when you voluntarily provide your contact data
• Legitimate interest (Art. 6.1.f GDPR): for site security and service improvement
• Legal obligations (Art. 6.1.c GDPR): for tax and accounting requirements

1.5 Data Retention

Personal data is kept for as long as necessary for the purposes for which it was collected:

• Booking data: for the time needed to manage the booking and for a limited period afterwards for organisational purposes
• Contact data: until consent is withdrawn or 2 years from the last contact
• Browsing data: maximum 12 months
• Accounting data: 10 years for tax obligations

1.6 Your Rights (GDPR)

Under the GDPR (EU Regulation 2016/679), you have the right to:

• Access: obtain confirmation and a copy of the data processed
• Rectification: correct inaccurate or incomplete data
• Erasure: request deletion of your data
• Restriction: restrict the processing of your data
• Portability: receive your data in a structured format
• Objection: object to the processing of your data
• Withdrawal of consent: withdraw your consent at any time

To exercise these rights, contact us by email at: [email protected]. You also have the right to lodge a complaint with the supervisory authority, the Italian Data Protection Authority (Garante per la protezione dei dati personali), if you believe the processing of your data infringes applicable law.

1.7 Disclosure of Data

Your personal data is never sold or shared with third parties for commercial or marketing purposes. To provide our services we rely on providers that process data on our behalf, acting as data processors:

• Supabase — storage and management of booking data (database and infrastructure)
• Resend — sending the booking confirmation email
• Telegram — internal notification of the booking request to our staff
• Microsoft Clarity — anonymised browsing analytics (only with prior consent)

Some of these providers may process data outside the European Union (for example in the United States). In such cases the transfer takes place in compliance with the GDPR, on the basis of adequacy decisions or Standard Contractual Clauses (SCCs) approved by the European Commission. Data may also be disclosed to the competent authorities to comply with legal obligations.

2.1 What Cookies Are

Cookies are small text files stored on your device when you visit a website. They are used to improve the browsing experience and to collect anonymous statistical information.

2.2 Types of Cookies Used

Technical Cookies (no consent required)

• Navigation cookies: essential for the site to work (session management, light/dark theme preferences)
• Functional cookies: store your preferences (e.g. language, selected theme)

Third-Party Cookies (consent required)

• Google Maps: to display the brewery's map
• Microsoft Clarity: a user-behaviour analytics tool that helps us understand how visitors interact with the site. Clarity can record anonymised browsing sessions and create heatmaps to improve the site's usability, and may process data outside the EU. For more information see the Microsoft Privacy Policy.

2.3 Cookie Duration

• Session cookies: deleted automatically when the browser is closed
• Persistent cookies: stored for a maximum of 12 months

2.4 How to Manage Cookies

You can accept or reject non-technical cookies through the banner shown on your first visit. You can also manage or disable cookies through your browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Firefox: Preferences → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies and website data
• Edge: Settings → Cookies and site permissions

Note: disabling technical cookies may impair some features of the site.