Privacy & copyright

1. Controller

The data controller is The Milan Post, operating the website at https://www.themilanpost.it.

For privacy requests (access, erasure, questions), use the contact form and mention “privacy” in your message. We do not publish a public inbox address, to reduce spam.

2. What we process and why

• Contact form: name, email, and message, so we can reply. Legal basis: steps at your request before a contract / legitimate interest in answering inquiries (GDPR Art. 6(1)(b) or (f)).
• Community join (Tally): answers you submit in the join form (and any redirect you choose, such as WhatsApp). Legal basis: your request to join (Art. 6(1)(b)) and/or consent where the form asks for it (Art. 6(1)(a)).
• Hosting logs: standard technical logs from our static host (GitHub Pages) may include IP address and user agent for security and delivery. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).
• Theme preference: dark/light mode stored in your browser (localStorage) so the site remembers your choice. This is a technical preference for the service you requested.

We do not run site analytics (for example Google Analytics) and we do not sell personal data.

3. Processors and recipients

We use these providers to deliver features you request:

• Formspree — contact form delivery ((privacy)
• Tally — community join form (privacy)
• GitHub Pages — website hosting (privacy)

Some providers may process data outside the European Economic Area. Where that happens, they rely on mechanisms such as Standard Contractual Clauses or other safeguards described in their policies. Details are in each provider’s privacy notice.

4. Cookies and similar technologies

Under Italian rules (Garante Privacy cookie guidelines and Art. 122 of the Privacy Code), technical cookies and similar tools that are strictly necessary for a service you request do not need a consent banner. Non-technical tracking needs prior consent.

On first visit we aim to use only what is needed to show the site:

• Theme preference in local storage (technical).
• Optional embeds banner: once per browser we ask whether to allow Luma calendar, Google Maps, Instagram, and TikTok embeds. Your choice is stored in local storage (milanpost_optional_embeds). Accept loads those embeds automatically on later visits. Not now (or ×) keeps them off until you load one manually (per widget or “Load Instagram & TikTok”) or change settings via footer Embed settings.
• No social embed scripts run on first paint before that choice or an explicit Load click.

Map pages that use OpenStreetMap tiles request map imagery so the map you opened can display. See OSM Foundation privacy.

5. Retention

• Contact messages: kept as long as needed to handle your request, then deleted or archived only if we must for legal reasons.
• Tally responses: according to our Tally workspace settings and the purpose of the join process.
• Hosting logs: according to the host’s retention practices.

6. Your rights

You may request access, rectification, erasure, restriction, portability, and objection where applicable under GDPR, and withdraw consent where processing is based on consent. Use the contact form.

You may lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another EU supervisory authority where you live or work.

7. Children

The site is aimed at adults arranging life and community in Milan. We do not knowingly collect data from children for marketing.

8. Changes

We may update this page when our tools or practices change. The “Last updated” date at the top will change when we do.