PPrivacy Policy

Data controller

BC4C S.r.l., Via Aurelio Saffi 29, 20123 Milano (MI), VAT 14576080965. Email: bc4c.official@gmail.com.

Data and purposes

Browsing data: IP address, browser, requested page and time, needed to run and secure the service (legitimate interest), kept in server logs for 30 days.

Visit source: first-party cookies store where the visit came from (source, campaign, landing page, referrer, click ids such as gclid and fbclid) to understand which channels bring visitors (legitimate interest). Our internal visit registry stores no IP address or identifying data.

Analytics (Google Analytics 4 via Google Tag Manager): only with your consent. Measures visits, pages and interactions with pseudonymous identifiers. Provider: Google Ireland Ltd.

Marketing (Meta Pixel and Conversions API): only with your consent. Records the visit and actions (e.g. click on Tickets) to measure campaigns and build custom audiences; through the Conversions API our server also sends Meta your IP address, user agent and the _fbp/_fbc cookies. Provider: Meta Platforms Ireland Ltd.

Tickets: sales run on the TicketSMS platform (TicketSms S.r.l.), embedded in the site or linked. Purchase data is processed by TicketSMS as an independent controller under its own policy.

Newsletter and contacts: if you write to us by email or Instagram, we process the data you provide to reply (pre-contractual measures).

Clubber sign-up (email and WhatsApp): when you sign up you give us your email address and, optionally, your name and phone number. We use them to send you dates, line ups and ticket releases by email and, if you gave us a number, via WhatsApp or SMS. The phone number is optional: without it you stay subscribed and receive everything by email. Legal basis: your consent (Art. 6(1)(a) GDPR), recorded with its date and the version of the text you accepted. You can withdraw it at any time, for one channel or both, by writing to bc4c.official@gmail.com or using the unsubscribe link at the foot of every email; on WhatsApp, replying STOP is enough. Withdrawal does not affect the lawfulness of processing carried out beforehand.

Sending providers: emails are sent through Brevo (Sendinblue GmbH), which processes your data as a processor on our behalf. WhatsApp messages travel on the infrastructure of WhatsApp Ireland Ltd. (Meta group), subject to its own policy.

Consent and withdrawal

Analytics and marketing start only after your consent in the banner. You can change your mind at any time from the "Cookie preferences" link in the footer. Consent to the Clubber sign-up is separate from cookie consent: withdraw it with the unsubscribe link at the foot of every email, by replying STOP on WhatsApp, or by writing to bc4c.official@gmail.com.

Retention

Source cookies: up to 180 days. Consent cookie: 6 months. Google Analytics data: 14 months. Meta data: per Meta's policies. Server logs: 30 days. Clubber sign-up data (email, name, phone): for as long as you stay subscribed and up to 24 months after your last interaction, then deleted; proof of consent is kept for as long as needed to demonstrate it.

Recipients and transfers

Data may be processed by technical providers (hosting in the EU), Google and Meta. Google and Meta may transfer data to the United States under the EU-US Data Privacy Framework and standard contractual clauses.

Your rights

You can request access, rectification, erasure, restriction, portability and object to processing by writing to bc4c.official@gmail.com. You may lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).