Privacy Policy

PRIVACY POLICY according to Article 13 Regulation (EU) 2016/679 (GDPR)

1) Data Controller

Data Controller is BBB SpA based in Via Lancetti 28, 20100 Milan (Italy), in the person of its acting legal representative which, as part of his prerogatives, may use specifically identified processors or officers. The Data Controller and/or the Data Protection Officer (DPO), appointed by the Data Controller, can be contacted at the e-mail address


2) Processing purposes, legal basis and storage period


Processing purposes Legal basis Storage period Nature of the provision

A) Website navigation


Legitimate interest

Art. 6, let. f) GDPR


At the end of

the browsing session


Needed to ensure your browsing



b) Direct marketing activities (commercial and promotional communications, newsletter “Brian & Barry Milano” and/or newsletter “The Brian & Barry Building”,, messages, advertising material as well as catalogues and invitations to events through traditional and automated digital communication tools (email, calls, chat, SMS and MMS).


Consent of the data subject

Art. 6, let. a) GDPR

36 months (or up to withdrawal of consent if prior) Optional


3) Recipients

In order to comply with the processing purposes indicated above, your data will be processed by companies contractually bound to BBB S.p.A., and in particular may be disclosed to third parties belonging to the following categories:

– entities that provide services for the management of the information system used by BBB S.p.A.;

– subjects dedicated to maintenance and / or updating of this website (including the hosting service);

– companies belonging to the Group to which the Data Controller belongs.

The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate as separate Data Controllers. The list of appointed Data Processors is available upon request by contacting the Data Controller at

4) Communication and transfer of Personal Data abroad

Your Personal Data will not in any case be disseminated to indeterminate entities or be transferred abroad.




5) Your rights

You are entitled, at any time, to exercise the following rights towards the Data Controller: the access to your Personal Data (ex art. 15 GDPR), the rectification of inaccurate Personal Data (ex art. 16 GDPR), the erasure of Personal Data (ex art. 17 GDPR), the restriction of processing (ex art. 18 GDPR), the data portability, in accordance with Article 20, ( toreceive the Personal Data concerning you, in a structured, commonly used and machine-readable format).

You may object to processing based upon the legitimate interest at any time, You may withdraw at any time the consent provided without prejudice to the lawfulness of the processing based upon consent before the withdrawal.

If you believe that your Personal Data is being processed in violation of the provisions of the Regulation, you may lodge a complaint with the Supervisory Authority (, as provided by Art. 77 of the Regulation itself, or take legal action in the appropriate venues (Art. 79 of the Regulation).


6) Cookies – social network

Cookies are small text files that are stored on your computer or mobile device (smartphone and/or tablet) every time you visit an online website via a browser (an application for recovering, presenting and browsing on internet pages, texts, videos, songs, images and various other types of content on the Internet). The next time you visit, the browser sends these cookies to the website that originated them, allowing the website to recognise you and to remember some information to enable and/or improve the service offered.

This website uses technical cookies relating to activities that are strictly necessary for the site to function and for providing the service.

All technical cookies do not require consent, so they are automatically installed by accessing the site.

The social network buttons on the site refer to third-party sites. To view the privacy policies, please read the information on social networks:

Name More Information








Finally, in the “Contacts” section of the site there is a hypertext link, which refers to the website to allow the user to book a table at the Asola restaurant (located inside Brian & Barry Building).

Please refer to the Privacy Policy on the website mentioned above.

6) Changes to this Privacy Policy

BBB SpA reserves the right to change this Privacy Policy at any time, publicising this on the Websites. The version published on the Websites is that currently in force.


Latest update: 2nd December 2019