Privacy Policy and Cookie Policy

Last updated: 18 May 2026

This privacy notice describes how personal data of users visiting the website www.dittadalmontegiampaolo.com is processed, pursuant to Article 13 of EU Regulation 2016/679 (the "GDPR").

1. Data Controller

2. Types of data collected

The website collects the following categories of personal data:

2.1 Browsing data

The computer systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category includes IP addresses, URLs of requested resources, time of request, browser and operating system used.

2.2 Data voluntarily provided by the user

The optional, explicit and voluntary sending of messages via email, WhatsApp or Telegram to the addresses indicated on this website involves the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the communication.

3. Purposes of processing

The personal data collected is processed for the following purposes:

• Responding to user requests — replying to information requests, quotations and commercial contacts (legal basis: Art. 6.1.b GDPR — pre-contractual measures at the request of the data subject)
• Site security and operation — preventing unauthorised access, protection from cyberattacks (legal basis: Art. 6.1.f GDPR — legitimate interest of the controller)
• Compliance with legal obligations — any response to requests from the Judicial Authority (legal basis: Art. 6.1.c GDPR)

4. Processing methods and retention

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illegal or incorrect use and unauthorised access.

Email communications received are retained for the time necessary to handle the request and, where applicable, for legal obligations in tax and civil matters (generally 10 years).

5. Communication of data

Personal data is not disseminated or communicated to third parties, except:

• Entities that perform functions related to the operation of the website (e.g. hosting provider Aruba S.p.A.) — designated as data processors pursuant to Art. 28 GDPR
• Cloudflare Inc. — content delivery network and DDoS protection provider
• Google LLC — exclusively when the user voluntarily chooses to load the interactive map on the home page (see section 7.2)
• Competent authorities, upon their express request

6. Data transfer outside the EU

Some of the services used (Cloudflare, Google) may transfer data outside the European Economic Area. Such transfers occur on the basis of appropriate safeguards provided by the GDPR, such as Standard Contractual Clauses approved by the European Commission.

7. Cookie Policy

7.1 Technical cookies

The website uses exclusively technical cookies, necessary for the correct functioning of the site itself. Pursuant to the Italian Data Protection Authority's Decision of 10 June 2021, the use of technical cookies does not require prior consent from the user.

Cookie	Origin	Purpose	Duration
__cf_bm	Cloudflare	Anti-bot protection	30 minutes
cf_clearance	Cloudflare	Human access verification	30 days

7.2 Google Maps (third-party service)

An interactive Google Maps map is available on the home page. To protect user privacy, the map is not loaded automatically: a placeholder with the address of the location is shown in its place. Only if the user voluntarily clicks the "Show interactive map" button is the Google Maps service loaded, which may install third-party cookies managed directly by Google LLC.

By clicking the button, the user expresses their consent to loading the service. Information on Google cookies is available in the Google Privacy Policy.

7.3 How to disable cookies

The user can modify cookie preferences through their browser settings. Links to the main browsers' instructions are provided:

• Google Chrome
• Mozilla Firefox
• Safari
• Microsoft Edge

Please note that the total disabling of technical cookies may compromise the proper functioning of the site.

8. Rights of the data subject

Pursuant to Articles 15 to 22 of the GDPR, the user has the right to:

• Access — request confirmation of the existence or otherwise of personal data concerning them and obtain a copy
• Rectification — obtain the correction of inaccurate data or the integration of incomplete data
• Erasure — obtain the erasure of personal data in the cases provided for by the GDPR
• Restriction — obtain the restriction of processing in the cases provided for by Art. 18 GDPR
• Portability — receive their data in a structured, commonly used and machine-readable format
• Objection — object to the processing of their personal data for reasons related to their particular situation
• Complaint — lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or the relevant supervisory authority in their country of residence

To exercise their rights, the user may contact the data controller at dittadalmonte@gmail.com.

9. Changes to this notice

The data controller reserves the right to modify this notice at any time, giving notice on this page. Please therefore consult this page regularly, referring to the date of the last update indicated at the top.

← Back to home