Privacy policy
This page explains which data we collect, why, how long we keep it and how to have it deleted. It is written to be read, not to be filed away.
Data controller
Ficopalo Bistrot
Via Molino delle Armi 31, 20123 Milan, Italy
Phone +39 338 290 2685 · Email info@ficopalo.it
If you order and collect
We ask for your name, phone number and the time you are coming, plus the contents of your order and any notes.
They are needed to prepare your food and to call you if something is off: the legal basis is performance of the contract, that is, the order itself. Without them the order cannot be taken.
We keep them for twelve months, so that an order can be traced if there is a problem. Accounting documents follow the longer periods set by law.
If you book a table
Name, phone, number of people, day and time. Same legal basis, same twelve months.
The phone number is there so we can warn you if something happens — a breakdown, an unexpected closure — not to send you advertising.
If you ask about catering
Name, company, email, phone, date, number of people and whatever you write to us. They are needed to put a proposal together.
Catering requests are kept for twenty-four months: whoever organises an office lunch often does it again the following year, and starting from scratch helps nobody.
If you accept notifications
If you give your browser permission, we receive a subscription address — a link generated by your browser — and two keys used to encrypt the message. It is not your name and not your number: it identifies your device for this site.
The legal basis is your consent, which you can withdraw whenever you like: from the site, with the same switch you used to give it, or from your browser settings. We keep the subscription until you withdraw it; if your device stops answering we delete it ourselves.
Notifications are about the bistrot — a dish of the day, a closure, a special opening. We do not sell them to anyone and we do not use them to profile you.
If you write to us
Email, WhatsApp or phone: we see your address or your number and use them only to reply.
WhatsApp is a Meta service and the conversation travels through its servers, under its rules. If you would rather avoid that, phone and email work just as well.
Who else sees your data
- Aruba S.p.A., which hosts the site and the database, as a data processor.
- Google, for the map on the «Where we are» page: see the cookie policy.
- Your browser's push service (Google, Apple or Mozilla, depending on the device), which delivers the already-encrypted message: only we and you can read the text.
Nothing else. We do not sell data, we run no targeted advertising, we have no analytics, and we transfer nothing outside the European Union on our own initiative.
What your browser stores
If you pick the light or dark theme, that choice stays in your browser under fp_tema. It is not a cookie, it never travels over the network and it never reaches us.
Your rights
You can ask to see what we hold about you, to have it corrected, deleted, its use restricted, to take it away in a file, and to object to the processing. Write to info@ficopalo.it: we answer within thirty days.
If you believe we are getting it wrong, you can contact the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
Last updated: 30 August 2026.