Privacy Policy, Cookie Policy & Affiliate Disclosure
Last updated: 26 September 2026
This document explains how lastsuppermilan.com handles information relating to visitors, uses cookies and similar technologies, and earns revenue through affiliate links.
1. About This Website
lastsuppermilan.com is an independent informational website about Leonardo da Vinci’s The Last Supper in Milan, Italy.
The website is not affiliated with, endorsed by, or officially connected to the museum, the Church of Santa Maria delle Grazie, Leonardo da Vinci, or any official ticketing authority.
The website provides information for visitors and may include links and booking options provided by third-party travel and ticketing services.
2. Privacy Policy
Information We Collect
We do not operate user accounts, contact forms, newsletter subscriptions, comment sections, or other features designed to collect personal information directly from visitors.
We do not use Google Analytics, Google Analytics 4, Google Tag Manager, or Yandex Metrica.
However, when you visit this website, certain technical information may be processed automatically to deliver, secure, and maintain the website. This may include your IP address, browser and device information, requested URLs, timestamps, and other technical information contained in server or security logs.
Such information may be processed by our hosting provider, Beget, and by Cloudflare, which provides services for this website. The precise information processed, purposes, and retention periods depend on the services and configurations in use.
We do not use this information to create visitor profiles or conduct behavioural advertising through this website.
Hosting and Website Security
This website is uses Cloudflare services.
These provider may process technical information, including IP addresses and connection data, as necessary to provide hosting, content delivery, website security, traffic management, and related services.
- Cloudflare Privacy Policy: https://www.cloudflare.com/privacypolicy/
Cloudflare may process certain technical data in connection with requests made to this website. The information processed and applicable retention periods depend on the Cloudflare services used and their configuration.
Third-Party Websites and Services
This website contains links to third-party websites, including Tiqets, Viator, and GetYourGuide.
When you follow a link to a third-party website, that provider may collect and process information about you, use cookies or similar technologies, and process booking or payment information in accordance with its own policies.
We do not control the privacy practices, cookies, or data processing activities of these third-party websites.
Please review the relevant provider’s privacy and cookie policies before making a booking or providing personal information.
Legal Basis for Processing
Where the General Data Protection Regulation (GDPR) applies, personal data may be processed where necessary for the legitimate interests of operating, maintaining, and securing this website, provided those interests are not overridden by the rights and freedoms of the individuals concerned.
Where consent is required by applicable law, processing will be based on consent.
Data Retention
Technical information may be retained by our hosting, security, and infrastructure providers for periods determined by their services, settings, and applicable policies.
We do not maintain a separate visitor database or customer account database through this website.
International Data Transfers
Our service providers may process information in countries outside the European Economic Area (EEA).
Where personal data is transferred internationally, the relevant provider is responsible for applying the safeguards required by applicable data protection law, where applicable.
Further information is available in the privacy policies of the relevant providers.
Your Data Protection Rights
Where the GDPR applies, you may have the right to request access to your personal data, request rectification or erasure, restrict or object to certain processing, and request data portability where applicable.
Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a competent supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD): https://www.cnpd.pt/
To exercise your rights in relation to data processed by a third-party provider, please contact that provider directly.
3. Cookie Policy
Cookies Used on This Website
This website does not use cookies for analytics, advertising, or visitor profiling.
However, cookies or similar technologies may be used where necessary for the technical operation, security, or delivery of the website.
Cloudflare may use strictly necessary cookies or similar technologies to support security and traffic management, depending on the services enabled and the configuration of this website.
WordPress, the hosting environment, or other technical components may also use cookies where required for functionality or security.
The exact cookies present may change as the website’s configuration changes.
Third-Party Widgets and Booking Links
This website may display booking options, widgets, or other embedded content supplied by third-party services, including Tiqets, Viator, and GetYourGuide.
Third-party content may communicate with the provider’s servers when it loads. Depending on the provider and the implementation, this may involve the processing of technical information or the use of cookies and similar technologies.
Affiliate links may also contain tracking parameters used to attribute bookings to this website.
When you click an affiliate link and continue to a third-party website, that provider may use cookies or similar technologies to record the referral and attribute a subsequent booking.
These technologies are controlled by the relevant third-party provider and are subject to its own cookie and privacy policies.
Managing Cookies
You can manage or delete cookies through your browser settings. You may also configure your browser to block certain cookies.
Blocking strictly necessary cookies may affect the functionality or security of some website features.
Where applicable law requires consent before non-essential cookies or similar technologies are used, those technologies should not be activated before the required consent has been obtained.
4. Affiliate Disclosure
lastsuppermilan.com participates in affiliate marketing programmes.
Some links and booking options on this website are affiliate links. These may include links to:
- Tiqets
- Viator
- GetYourGuide
If you click an affiliate link and make a qualifying purchase or booking, we may receive a commission at no additional cost to you.
The price you pay is not increased because you use an affiliate link.
Affiliate commissions help support the operation and maintenance of this website.
Affiliate relationships do not mean that the website is owned by, operated by, or officially associated with the providers listed above.
Prices, availability, booking conditions, cancellation policies, and other terms are determined by the relevant provider and may change without notice. Please review the details on the provider’s website before completing a purchase.
5. Changes to This Policy
This document may be updated from time to time to reflect changes to the website, its services, applicable law, or our practices.
The date at the top of this page indicates when this document was last updated.
6. Contact
For questions concerning this website’s privacy practices or this policy, please use the contact details published by the website operator, where available.