Home / Privacy Policy
Privacy Policy
Last updated: 13 November 2026
This notice explains how personal data is processed for visitors to www.capodannoamilano.it and for anyone who books or buys a New Year’s Eve event through the site, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).
1. Data controller
The data controller is Happy Net s.r.l., registered office at Via Alessandro Tadino 19, 20124 Milan, Italy · VAT number and Tax Code 05831770960 · REA MI-1851745.
Privacy contact: [email protected]
2. What data we process
- Purchase and booking data: first and last name, email address, phone number, billing address, order details (venue, package, number of people, amount). For card payments, card data is handled directly by the payment provider and is never stored by us.
- Information request data: name, email and message text sent through the “Request information” form on venue pages.
- Account data: email, name and billing details, if you create an account to view your orders.
- Browsing data: IP address, browser and device type, pages visited, date and time. Cookies and similar tools are described in the Cookie Policy, available from the “Cookie” link at the bottom of every page.
The site does not request or collect special categories of data (for example health or opinions) or device permissions such as camera, contacts or precise location. If you enter such information in the message field, we will use it only to answer your request.
3. Why we process data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Managing the booking or purchase, issuing and sending the ticket, order support | Performance of a contract or of pre-contractual steps requested by you (Art. 6.1.b) |
| Answering information requests sent through the form | Pre-contractual steps / legitimate interest in replying (Art. 6.1.b and 6.1.f) |
| Tax, accounting and administrative obligations | Legal obligation (Art. 6.1.c) |
| Site security, fraud and abuse prevention, defence of legal claims | Legitimate interest of the controller (Art. 6.1.f) |
| Non-technical cookies (statistics, third-party content) | Consent, which you can give or withdraw at any time from the cookie banner (Art. 6.1.a) |
Providing the data marked as mandatory in the forms is necessary to complete the purchase or answer your request; without it we cannot provide the service.
4. Who we share data with
Data is processed by the controller’s authorised staff and shared, only as far as necessary, with:
- Venues, hotels and event organisers you choose, to manage your booking and allow you entry (name, contact details, booking details). Each venue processes such data as an independent controller for its own purposes.
- Payment provider: Nexi Payments S.p.A. (XPay) for processing card payments.
- Technical providers that process data on our behalf as data processors: site hosting and infrastructure, email service (Aruba S.p.A.), Cloudflare, Inc. (content delivery and security), support, maintenance and site statistics tools.
- Consultants and professionals (tax, legal), and authorities where required by law.
Data is not disclosed publicly or sold.
5. Transfers outside the European Economic Area
Some providers (for example Cloudflare or Google) may also process data outside the EEA, in particular in the United States. In that case the transfer is based on a European Commission adequacy decision (EU-US Data Privacy Framework) or on standard contractual clauses.
6. How long we keep data
- Order and billing data: 10 years, as required by tax and accounting obligations.
- Information requests: the time needed to reply and, as a rule, no more than 24 months.
- Account: until you ask for its deletion, subject to the retention obligations above.
- Browsing data and cookies: according to the periods stated in the Cookie Policy.
7. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting processing carried out before withdrawal.
To exercise your rights write to [email protected]. You also have the right to lodge a complaint with the Italian data protection authority (www.garanteprivacy.it).
8. Security
We adopt appropriate technical and organisational measures to protect data, including encrypted connections (HTTPS), access limited to authorised staff, and payments handled by a certified operator.
9. Changes to this notice
We may update this notice, for example because of legal changes or changes to the site. The version in force is always the one published on this page, with the date of the last update.