Privacy policy
Last updated: 9 November 2026
This policy explains how we process the personal data of people who visit this website and of guests who contact the restaurant, in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
Data controller
Tram Tram SAS di Francesco D’Argenzio & C., Via Lazzaretto 16, 20124 Milano · VAT no. 10469840960. Email: tramtrammilano@gmail.com, phone: +39 02 28098058.
What data we process
Browsing data. The systems that run the website automatically record some technical data, such as IP address, date and time of the request, page visited, browser and operating system. They are used only to keep the website running and secure, and not to identify visitors.
Data you give us. If you contact us by phone, email or WhatsApp, to book a table or ask for information, we process the data you provide: name, contact details, date and number of guests, and any special requests.
Allergies and intolerances. If you tell us about allergies or intolerances, we use this information only to prepare your meal safely.
Cookies. The website uses technical cookies only: see the cookie policy.
Purposes and legal basis
Running the website and keeping it secure: our legitimate interest (Art. 6(1)(f) GDPR).
Answering your requests and managing bookings and events: steps taken at your request before entering into a contract, or performance of a contract (Art. 6(1)(b) GDPR).
Allergies and intolerances: your explicit consent (Art. 9(2)(a) GDPR), given when you tell us about them; you can withdraw it at any time.
Legal obligations, for example tax and accounting rules for invoiced events: Art. 6(1)(c) GDPR.
Providing your data
Providing your data is optional. Without contact details, however, we cannot reply to you or confirm your booking.
How we process and store data
Data is processed with electronic and paper-based tools, using appropriate security measures, by authorised staff only.
Browsing data is kept by our hosting provider for the time needed for technical and security purposes, unless it is required to investigate unlawful activity. Data relating to requests and bookings is kept for as long as needed to handle them and then deleted, unless the law requires us to keep it longer (for example, ten years for accounting records).
Who receives the data
Your data is never sold or used for marketing. It may be processed, on our behalf and under a data processing agreement (Art. 28 GDPR), by the providers of the services we use: website hosting (Netlify, Inc.) and email (Google). If you write to us on WhatsApp, the service is provided by WhatsApp Ireland Ltd, which processes data under its own privacy policy.
Transfers outside the EU
Some of these providers may process data in the United States. Such transfers are based on the EU-US Data Privacy Framework adequacy decision or on the standard contractual clauses approved by the European Commission (Articles 45 and 46 GDPR).
No profiling
We do not use analytics tools, we do not profile visitors and we do not make automated decisions based on your data.
Your rights
Under Articles 15 to 22 GDPR you can ask us at any time for access to your data, rectification, erasure, restriction of processing and data portability, object to processing, and withdraw your consent. Just write to tramtrammilano@gmail.com.
You also have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.
Changes to this policy
We may update this policy. The date of the latest version is shown at the top of the page.