Il Barbificio

Privacy policy

Last updated: 16 July 2026

This policy explains how the personal data of people visiting this website is handled, under Article 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018. It covers this website only, and not any third-party sites you may reach through links.

Who is responsible

The data controller is Roberto Spigarelli, owner of Il Barbificio, based at Via Ugo Bartolomei 29, 00136 Rome, Italy.

VAT number: 16612151007
Email: ilbarbificio@gmail.com
Phone: +39 345 106 8032

No Data Protection Officer (DPO) has been appointed, as none of the cases set out in Article 37 of the GDPR apply.

What data we handle, and why

This is a showcase website. It has no contact forms, requires no registration, has no private areas and sells nothing online. We do not ask you for any personal data in order to read it.

Browsing data. As with any website, the systems that host it automatically pick up some data whose transmission is built into the internet communication protocols: your IP address, browser and device type, operating system, date and time of the request, the pages requested and the server response code.

Purpose. This data is used only to deliver the site properly, keep it secure and stable, and diagnose faults. It is not collected in order to link it to identified users, and it is not used to profile people or for marketing.

Legal basis. The processing rests on the controller's legitimate interest (Article 6(1)(f) GDPR) in network and information security and in the correct functioning of the site, as recognised in Recital 49 of the GDPR. The data may also be used to establish liability in the event of computer crimes against the site, or at the request of the judicial authorities.

Whether you have a choice

Browsing data is not something you decide to hand over: transmitting it is a technical feature of the internet protocols, and no website can be visited without it happening. There is therefore no question of providing it voluntarily or being required to, and no consequences attached to refusing.

Cookies and other tracking

This site uses no cookies of any kind. There are no technical, profiling, marketing or advertising cookies. We use no analytics tools, no tracking pixels, no device fingerprinting, and we store nothing in your browser through other technologies such as localStorage or sessionStorage.

Because the site neither stores information on your device nor accesses information already stored there, the conditions set out in Article 122 of the Italian Privacy Code and in the Italian Data Protection Authority's cookie guidelines of 10 June 2021 do not apply. That is why you see no consent banner: there is nothing to consent to.

Third-party content and services

The site loads no content from third-party servers: the fonts, scripts, images and video are all hosted on the site itself. Simply visiting it therefore sends your IP address, or any other data, to no one outside.

The site does link out to external platforms: Fresha for bookings, WhatsApp, Instagram, Facebook and Google Maps. These are plain links, which only come into play if you choose to click them: no content from those platforms is loaded inside our pages. Once you follow a link, the privacy policy of the destination platform applies, and we have no control over it. Online bookings in particular are handled by Fresha, which processes the data as an independent controller.

Who the data is shared with

The site is hosted by Netlify, Inc. (512 2nd Street, Suite 200, San Francisco, CA 94107, United States), which processes browsing data as a data processor under Article 28 of the GDPR, on the basis of the data processing agreement incorporated into its terms and conditions. Netlify may use further sub-processors to deliver the service.

Beyond this, we share the data with no one and do not disclose it publicly, other than where the law requires it or the judicial authorities ask for it.

How long we keep it

Server logs are kept for as long as the purposes above strictly require. The hosting provider keeps them available for 90 days and archived for a further year, in line with the security measures described in its data processing agreement. After that the logs are deleted, unless they need to be kept longer to establish liability in the event of computer crimes against the site.

Transfers outside the European Union

Netlify, Inc. is based in the United States, and browsing data may be processed outside the European Economic Area.

The transfer takes place under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023: Netlify, Inc. adheres to the Framework and appears on the list maintained by the U.S. Department of Commerce (dataprivacyframework.gov). Where the Framework does not apply, the transfer is governed by the Standard Contractual Clauses adopted by the European Commission in implementing decision (EU) 2021/914 of 4 June 2021.

Automated decision-making and profiling

We carry out no automated decision-making, including profiling, of the kind referred to in Articles 13(2)(f) and 22 of the GDPR.

Your rights

You can exercise the rights set out in Articles 15 to 22 of the GDPR at any time, and in particular you can:

To exercise these rights, write to ilbarbificio@gmail.com. We will reply within one month, as Article 12 of the GDPR requires.

If you believe the handling of your data breaches the rules, you have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or to bring the matter before the courts.

Changes to this policy

This policy may be updated over time, for instance if the tools the site uses or the hosting provider change. The date at the top marks the latest revision. Do look at it again from time to time.