Privacy and cookies
1. Data controller and contact details
The data controller is Spirit Clubs S.r.l., with its registered office at Via Piacenza 15, 20135 Milano (MI), Italy, tax code and VAT number 09502050967. For information about the processing of personal data or to exercise your rights, you can write to contact@thespirit.it or to our certified email (PEC) address spiritclubs@pec.it.
2. Scope of this notice
This notice covers visits to www.thespirit.it and its menus, as well as enquiries, bookings and requests for catering or event quotations sent through the contact details provided on the website. You do not need to register to browse the website.
The membership section describes the venue’s programme and does not contain an online registration form. This page does not cover the management of membership; please refer to the privacy notice provided when membership data is collected.
3. Data, purposes and legal bases
| Processing | Purpose and legal basis |
|---|---|
| Technical browsing data: IP address, requested resources, time, request outcome and technical information transmitted by the browser, to the extent actually collected by the hosting service. | Providing the website and protecting its security and operation: the controller’s legitimate interests, Article 6(1)(f) GDPR. |
| Name, contact details, message content and information needed to handle a request, voluntarily provided by email, telephone or WhatsApp. | Responding, arranging bookings and preparing quotations or requested services: steps prior to entering into a contract or performance of a contract, Article 6(1)(b). For non-contractual enquiries: the legitimate interest in responding, point (f). |
| Data and documents relevant to administrative obligations or the protection of a right, where applicable. | Compliance with legal obligations, Article 6(1)(c); establishing, exercising or defending legal claims, point (f), limited to the data necessary. |
Providing contact details is optional; without the necessary information, we may be unable to respond to or handle your request. Contact details collected through the website are not intended for use in automated promotional campaigns. Any subsequent marketing activities require separate arrangements.
For routine enquiries, please do not send identity documents, payment details or unnecessary health information.
4. Cookies and loaded resources
The website code does not integrate profiling cookies, advertising tools or visitor analytics services, and does not use browser storage to identify or track users.
Photos, videos, PDFs and fonts are hosted within the website’s hosting space. The WhatsApp and Maps buttons are external links: these services open when you choose to follow them. No maps, messaging widgets or videos from other platforms are embedded.
As there are no tools requiring consent, no cookie acceptance banner is displayed. If non-essential tools are introduced, this notice and the preference management system must be updated before they are activated.
5. Recipients, hosting and external services
Data is processed by authorised personnel and providers supporting the operation of the website, email and requested services, within their respective roles and under the applicable agreements. Website hosting and company email are provided through Aruba services. Data may also be disclosed to parties entitled to receive it under the law or an order from a competent authority. Personal data received in enquiries is not intended for public disclosure.
6. Retention
WhatsApp chats. Conversations are kept for as long as needed to handle the enquiry, booking or service. The company reviews chats every six months, deleting those relating to completed enquiries and services that are no longer necessary. Conversations still needed to manage an ongoing relationship are reviewed again at the next check. Any information retained to meet legal obligations or to establish, exercise or defend a legal claim is limited to what is relevant and necessary for those purposes.
Email. Enquiries that are solely requests for information are deleted when the enquiry is closed. Communications needed to manage outstanding bookings or services are retained until that process is complete. Documentation required for administrative obligations or disputes is kept separately, limited to relevant data and for the period required by the applicable obligation or the protection of the right concerned.
Technical hosting logs. The hosting service may record technical data relating to access and security. The actual retention period applied to our service is being verified with the provider. For information about this processing, you can contact us at contact@thespirit.it.
7. Your rights
In the cases and within the limits provided by the GDPR, you may request access, rectification, erasure, restriction of processing and data portability, and object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Requests can be sent to the controller’s contact details above. Any identity verification must be limited to what is necessary. The website does not include profiling systems or automated decision-making with legal effects on users.