Privacy notice

When you book the Flying Aperitivo we only ask for what we need to run the evening and send you your ticket.

• The first and last name of the person booking.
• An email address, so we can send the ticket and tell you if the evening is postponed or cancelled.
• A telephone number, optional: we only use it if we need to reach you quickly on the day.
• Any notes you write yourself, such as an allergy or intolerance. If you tell us something about your health we use it only to prepare your tray and delete it along with the rest of the booking.
• The booking itself: the date chosen, the number of adults and children, the amount, the booking code and your language.
• Minimal technical data (IP address, browser type) in the server logs, kept for security and only for a few days.

Every use has a specific legal basis.

• Handling your booking, taking payment and issuing your ticket — performance of the contract (Art. 6(1)(b) GDPR).
• Telling you if the evening is postponed or cancelled because of the weather, and handling refunds and moves — performance of the contract.
• Issuing and keeping accounting and tax records — legal obligation (Art. 6(1)(c) GDPR).
• Establishing or defending a legal claim — legitimate interest (Art. 6(1)(f) GDPR).

Payment is taken on Stripe's pages, our payment service provider. Your card details go straight to Stripe: we never see them and never store them. We only receive the outcome of the payment, the amount and a transaction reference.

Only those we need in order to run the booking, and only for that. We do not sell or pass on your data to anyone for marketing.

• Stripe, to take payment and issue any refunds.
• Our email provider, to deliver your ticket and messages about the evening.
• The provider that hosts the website and the database.
• Our accountant and, where required, the competent authorities.

We do not use profiling cookies, we do not set analytics cookies, and there are no third-party advertising tools on this site.

We use technical cookies only: one remembers the language you chose, and if you arrive from a link carrying campaign parameters, a second one remembers for thirty days where you came from, so we can see which channels work. Neither identifies you and neither is shared.

Visitor statistics, where enabled, are collected with a tool running on our own servers that uses no cookies, builds no profiles and does not follow you across other websites. That is why this site shows no cookie banner: none is needed.

Personal data attached to a booking is anonymised 24 months after the event date: name, email, telephone and notes are removed, and only the aggregate figures we use to review the season remain.

Accounting and tax records are kept for the ten years required by Italian law.

Some providers may process data outside the European Economic Area. Where they do, the transfer relies on an adequacy decision of the European Commission or on the standard contractual clauses it has approved.

At any time you may ask us for access to your data, to correct or erase it, to restrict how we use it, to receive it in a machine-readable format, or to object to processing based on legitimate interest. Write or ring us using the contacts above: we reply within a month.

If you believe something is wrong, you may complain to the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

If anything changes we update this page and the date at the top. Changes do not apply retrospectively to bookings already made.