Privacy policy

Data controller

Demetrio Triglia, via Pietro Custodi 3, 20136 Milano (MI), Italy.

For privacy questions and to exercise your rights, write to info@scaladeiturchi.guide or use the contact form.

Browsing the website

The website is made of static pages served by the Cloudflare network (Cloudflare, Inc., United States). To show you the pages and protect the website from abuse and attacks, Cloudflare processes the technical data that every browser sends: IP address, date and time, requested page, browser and operating system, referring page. This data may end up in Cloudflare technical logs. The controller does not use it to identify you.

Legal basis: the legitimate interest of the controller in providing a secure, working website (Art. 6(1)(f) GDPR).

Fonts, photos and the coast map are hosted on the website itself: no requests to Google Fonts or to external map services. Links to other websites (for example the municipality of Realmonte) take you away from here: from then on, the privacy policies of those websites apply.

Consent, statistics and advertising

Every page loads Google Tag Manager, which manages the Google tools described below. The provider is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). When your browser loads Google Tag Manager it connects to Google servers, which receive your IP address.

On your first visit you see the Google consent message (Privacy & messaging of Google AdSense, loaded through Google Tag Manager). With Google Consent Mode v2 every consent starts as denied: until you accept, the Google tools do not write or read statistics or advertising cookies. Without consent, Google tags may still send cookieless signals, which Google uses for aggregate measurement.

• Statistics, with Google Analytics 4: pages viewed, length of the visit, device and browser type, approximate country or city, referring page, linked to a random identifier stored in a cookie. They help us understand which pages are useful and what to improve. Only with your consent. Google Analytics 4 does not log or store IP addresses. Here Google processes data on behalf of the controller, as a processor.
• Advertising, with Google AdSense: the website shows ads provided by Google (authorised sellers are listed in the ads.txt file). With your consent Google may use cookies and identifiers to personalise ads and measure their results; without consent it only shows non-personalised ads, chosen from the content of the page and your approximate location. For advertising, Google is an independent controller of the data it collects: how Google uses data from partner sites.

Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Personal Data Protection Code), which you can withdraw at any time from the cookie policy without affecting your use of the website. Google's privacy policy: policies.google.com/privacy.

Contact form

If you write to us through the contact form we process your name, email address, subject and message, plus the language of the page. The form sends them to a script on the controller's server (domain vallealcantara.com), which forwards them by email to the controller. There are no accounts and no newsletter: your email address is only used to reply to you.

Against spam, the form uses Cloudflare Turnstile (Cloudflare, Inc., United States), which examines technical browser data and the IP address to tell people from automated programs. To limit the number of submissions, the script keeps a fingerprint (hash) of the IP address, never the address itself: after one hour the fingerprint no longer counts and is deleted. The script logs contain only error codes, with no data about the sender.

Legal bases: replying to your request (Art. 6(1)(b) GDPR, steps taken at your request); legitimate interest in protecting the form from spam and abuse (Art. 6(1)(f) GDPR). Providing the data is optional, but without name, email and message we cannot reply.

How long we keep data

Who receives the data

• Cloudflare, Inc. (United States): network that delivers the website, protection from abuse and Cloudflare Turnstile.
• Google Ireland Limited (Ireland) and the companies of the Google group: Google Tag Manager, Google Analytics 4, Google AdSense and the consent message.
• The provider of the controller's server (domain vallealcantara.com) and the controller's email service, for contact form messages.

The data is not sold or passed on to anyone else.

Transfers outside the European Union

Cloudflare, Inc. is based in the United States and Google may also process data in the United States, through Google LLC. Both companies participate in the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission in its decision of 10 July 2023; transfers not covered by it rely on the standard contractual clauses approved by the Commission.

Your rights

You can ask the controller for access to your data, rectification, erasure, restriction of processing and portability, and you can object to processing based on legitimate interest (Arts. 15-22 GDPR). You can withdraw your consent at any time, without affecting the lawfulness of earlier processing. Write to info@scaladeiturchi.guide: we reply within one month.

If you believe the processing infringes the GDPR, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali (garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

Changes

If the website changes services or processing, this page is updated: the date of the latest update is at the top.