Privacy Policy

Last updated: 2 October 2026

1. Data controller

The data controller for this website (www.barockproject.net) is:
Barock Project (Luca Zabbini)
Italy
Email: barockproject@barockproject.net

2. What data we process

Browsing data. When you visit the website, the servers that host it automatically record technical data such as your IP address, browser type, date and time of the request and the pages visited. This data is used only to deliver the website, to keep it secure and to protect it from abuse.

Data you send us. If you write to us by email, we process your email address and any other information you include in your message, only to reply to you and to manage the request (for example booking, press or general enquiries).

Cookies and embedded content. The website uses technical cookies that are necessary for it to work. Content embedded from third-party platforms (Spotify, YouTube, Facebook) is loaded only after you give your consent through the cookie banner. Details are available in the Cookie Policy.

The website does not use analytics tools, profiling, advertising or newsletters, and does not collect data through contact forms.

3. Purposes and legal basis

Operating and securing the website: legitimate interest of the controller (Art. 6(1)(f) GDPR).
Replying to your messages: your request and the performance of pre-contractual or contractual measures (Art. 6(1)(b) GDPR) or our legitimate interest in responding (Art. 6(1)(f) GDPR).
Loading embedded third-party content: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time from the cookie settings.

4. Recipients

Data may be processed by providers acting on our behalf, in particular the hosting provider Aruba S.p.A. (Italy) and the security service Wordfence (Defiant Inc., USA), which protects the website from attacks. When you consent to embedded content, Spotify AB, Google Ireland Ltd (YouTube) and Meta Platforms Ireland Ltd (Facebook) receive data according to their own privacy policies. Data is not sold or disclosed for marketing purposes.

5. Transfers outside the EU

Some of the providers listed above may transfer data to the United States. Such transfers take place on the basis of the EU-U.S. Data Privacy Framework or of the Standard Contractual Clauses approved by the European Commission.

6. Retention

Technical browsing data is kept for the time needed for security purposes, normally no longer than 12 months. Emails are kept for as long as necessary to handle the request and the resulting relationship, and in any case no longer than required by law.

7. Your rights

Under Articles 15–22 of the GDPR you can request access to your data, rectification, erasure, restriction of processing, data portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. To exercise your rights, write to barockproject@barockproject.net.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the supervisory authority of your country.

8. Changes

This policy may be updated. The date of the latest version is shown at the top of this page.