Privacy policy

This page explains what personal data the 121.coffee website collects, why, and what your rights are, under Regulation (EU) 2016/679 ("GDPR") and Italian Legislative Decree 196/2003.

Data controller

[COMPANY NAME] (brand "121.coffee"), VAT no. 01901480887, registered office at [REGISTERED OFFICE].

Email for privacy requests: ciao@121.coffee

What data we collect and why

"Offer us a coffee" form

When you write to us from this form we collect your name, your email address and the text of your message. We use them only to reply to you and, if you wish, to set up that coffee.

• Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• Retention: for the time needed to reply and, if a collaboration begins, for its duration and the legal obligations that follow. If nothing follows, no longer than 24 months from the last contact.

"Tell us about your project" form

We collect your name, email address, organization (optional), project description and estimated budget. We use them to assess the project and reply to you. If the budget you enter is over EUR 200,000 we may offer you our weekend at a bed & breakfast.

• Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• Retention: as above.

"Book a time" form

We collect your name, email address, the day and time you pick, the meeting format, your phone number (for phone appointments only) and the topic you give. We use them to set up the appointment: we create an event in our Google Calendar and send you the invitation, with the Google Meet link for video calls.

• Legal basis: pre-contractual measures taken at your request (Art. 6.1.b GDPR).
• Retention: as above.

"The weekly pour" newsletter

If you subscribe from the form at the bottom of the pages we collect your email address, the date you subscribed and the consent you gave. We use them only to send you the newsletter, one email every Friday.

• Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time by replying to any of the emails or writing to ciao@121.coffee.
• Retention: for as long as you are subscribed. After you unsubscribe we keep only the address marked "unsubscribed", so we do not write to you again and can show when you gave and withdrew consent.

Requests through AI assistants

You can also send us the same requests (coffee, appointment, proposal) through an AI assistant that uses our MCP server. We receive and process the same data, in the same way. The assistant you use is an external service with its own policy.

What we do not collect

The forms are not for requesting medical advice and do not ask for health information. Please do not enter health data about yourself or others in the text fields.

Browsing data

Like any site, the servers hosting the site (Cloudflare) automatically log some technical data — IP address, date and time, requested page, browser — to keep the site running and secure. Legal basis: legitimate interest (Art. 6.1.f GDPR). The data is kept for the limited period set by the hosting provider.

Who processes data on our behalf

We rely on a few providers that process data as processors (Art. 28 GDPR) or as independent controllers for their own services:

• Cloudflare (USA): site hosting, form processing and bot protection with Cloudflare Turnstile, which analyses some technical browser signals to tell people from bots, without profiling cookies.
• Google (Google LLC, USA): storing requests in Google spreadsheets, sending the related emails, managing appointments in Google Calendar and video calls with Google Meet (Google Workspace / Apps Script).
• Google Fonts (Google, USA): typefaces. Your browser downloads them from Google's servers, which receive your IP address.
• Spotify (Sweden): the link to the BrainCare podcast takes you to Spotify, an external site with its own policy. Our site does not embed the player.

Transfers to the United States rely on the EU-U.S. Data Privacy Framework or the European Commission's standard contractual clauses. Data is not sold or passed on to third parties for commercial purposes.

Cookies

The site does not use its own, profiling or statistics cookies, which is why it shows no banner. If you move to external sites such as Spotify, their rules apply.

Your rights

At any time you can ask to:

• access your data and receive a copy;
• correct or update it;
• delete it or restrict its processing;
• receive it in a machine-readable format (portability);
• object to processing based on legitimate interest.

To exercise them write to the address above: we reply within one month. You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali).

Changes

If this policy changes, the new version will be published on this page with the update date at the top.