

{"id":1197,"date":"2022-07-27T11:59:27","date_gmt":"2022-07-27T09:59:27","guid":{"rendered":"https:\/\/dasantina.it\/?page_id=1197"},"modified":"2026-07-16T13:08:01","modified_gmt":"2026-07-16T11:08:01","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/dasantina.it\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<h1>Information notice on the processing of personal data<\/h1>\n<p><em>Pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR) and the applicable Italian legislation (Italian Legislative Decree 196\/2003 as amended by Italian Legislative Decree 101\/2018).<\/em><\/p>\n<h2>1. Data Controller<\/h2>\n<p>The Data Controller is:<\/p>\n<p>\n  <strong>Hotel Ristorante Da Santina di Mantua Santina<\/strong><br \/>\n  Via Fosso 19 \u2013 03020 Castro dei Volsci (FR)<br \/>\n  VAT no. IT02969960604<br \/>\n  Tel. +39 0775 686175<br \/>\n  Email: <a href=\"mailto:info@dasantina.it\">info@dasantina.it<\/a>\n<\/p>\n<h2>2. Data Protection Officer (DPO)<\/h2>\n<p>The Data Controller has not appointed a Data Protection Officer, as the mandatory conditions set out in Article 37 of the GDPR do not apply. For any matter relating to the processing of personal data, you may contact the Data Controller directly using the contact details provided in section 1.<\/p>\n<h2>3. Types of data processed, purposes, legal bases and retention<\/h2>\n<h3>a) Browsing data<\/h3>\n<p>The computer systems and software procedures used to operate this website acquire, during their normal operation, certain data whose transmission is implicit in the use of Internet communication protocols (for example, IP addresses, browser and device type, operating system, time of the request, pages visited).<\/p>\n<ul>\n<li><strong>Purpose:<\/strong> to ensure the correct functioning and security of the website, to obtain anonymous statistics in aggregate form on usage, and to establish liability in the event of computer crimes against the website.<\/li>\n<li><strong>Legal basis:<\/strong> Article 6.1.f GDPR \u2013 legitimate interest of the Data Controller in the security and correct functioning of the website; Article 6.1.c GDPR \u2013 compliance with legal obligations.<\/li>\n<li><strong>Retention period:<\/strong> the time strictly necessary for the purposes indicated and, as a rule, no longer than <strong>12 months<\/strong>, except for the obligation to retain data for a longer period in order to comply with an order from the Authority or for the investigation of crimes.<\/li>\n<\/ul>\n<h3>b) Data provided through the contact form<\/h3>\n<p>When the user fills in the contact form, the data provided by the user is collected: first name, last name, email address, telephone number and the content of the message.<\/p>\n<ul>\n<li><strong>Purpose:<\/strong> to respond to requests for information, quotations or bookings sent by the user and to manage the resulting contacts.<\/li>\n<li><strong>Legal basis:<\/strong> Article 6.1.b GDPR \u2013 performance of pre-contractual measures taken at the data subject&#8217;s request; concurrently, Article 6.1.a GDPR \u2013 consent of the data subject, given by submitting the form.<\/li>\n<li><strong>Retention period:<\/strong> the time necessary to handle the request and, subsequently, a maximum period of <strong>24 months<\/strong> useful for following up on any related requests, after which the data is deleted.<\/li>\n<\/ul>\n<p><em>The data collected through the form is not used to send commercial communications, newsletters or promotional material.<\/em><\/p>\n<h3>c) Cookies and third-party tools<\/h3>\n<p>The website uses cookies and third-party tools as described in the <a href=\"#cookie-policy\">Cookie Policy<\/a> (second part of this document).<\/p>\n<h2>4. Nature of the provision of data<\/h2>\n<p>The provision of browsing data is necessary and inherent to the use of network protocols. The provision of data through the contact form is optional, but it is necessary in order to receive a reply: failure to provide the data marked as mandatory prevents the request from being processed.<\/p>\n<h2>5. Recipients of the data and Data Processors<\/h2>\n<p>Personal data may be processed by:<\/p>\n<ul>\n<li>the Data Controller&#8217;s internal staff, authorised and appropriately instructed pursuant to Article 29 GDPR;<\/li>\n<li>the provider of hosting and technical maintenance services for the website, acting as Data Processor pursuant to Article 28 GDPR \u2014 <strong>EvLogica S.r.l.s.<\/strong> (<a href=\"https:\/\/evlogica.com\" target=\"_blank\" rel=\"noopener\">evlogica.com<\/a>);<\/li>\n<li>Google Ireland Ltd. and Google LLC, for the Google Analytics, Google Maps, Google Fonts and reCAPTCHA services (see Cookie Policy).<\/li>\n<\/ul>\n<p>The data is in no way disseminated or transferred to third parties for their own purposes.<\/p>\n<h2>6. Transfer of data to third countries<\/h2>\n<p>The use of Google services may involve the transfer of personal data to the United States of America. Such transfer takes place in compliance with Articles 44 et seq. of the GDPR: Google LLC adheres to the <strong>EU-U.S. Data Privacy Framework<\/strong>, which is the subject of the European Commission&#8217;s adequacy decision of 10 July 2023, and additionally adopts the <strong>Standard Contractual Clauses<\/strong> approved by the European Commission.<\/p>\n<h2>7. Automated decision-making and profiling<\/h2>\n<p>The Data Controller does <strong>not<\/strong> carry out any automated decision-making, nor any profiling of users within the meaning of Article 22 of the GDPR.<\/p>\n<h2>8. Data of minors<\/h2>\n<p>The website and the services offered are not directed at minors under 14 years of age. The Data Controller does not knowingly collect personal data relating to minors of that age. Should the inadvertent collection of a minor&#8217;s data be detected, such data will be promptly deleted.<\/p>\n<h2>9. Rights of the data subject<\/h2>\n<p>In relation to the data processed, the data subject has the right, at any time, to:<\/p>\n<ul>\n<li>obtain <strong>access<\/strong> to their personal data and information relating to the processing (Article 15);<\/li>\n<li>obtain the <strong>rectification<\/strong> of inaccurate data or the integration of incomplete data (Article 16);<\/li>\n<li>obtain the <strong>erasure<\/strong> of data (&laquo;right to be forgotten&raquo;) in the cases provided for (Article 17);<\/li>\n<li>obtain the <strong>restriction<\/strong> of processing (Article 18);<\/li>\n<li>receive their data in a structured format and transmit it to another controller (<strong>portability<\/strong>, Article 20);<\/li>\n<li><strong>object<\/strong> to processing based on legitimate interest (Article 21);<\/li>\n<li><strong>withdraw consent<\/strong> at any time, without prejudice to the lawfulness of the processing carried out before the withdrawal (Article 7.3);<\/li>\n<li>lodge a <strong>complaint<\/strong> with the Italian Data Protection Authority (Garante) (<a href=\"https:\/\/www.garanteprivacy.it\" target=\"_blank\" rel=\"noopener\">www.garanteprivacy.it<\/a>).<\/li>\n<\/ul>\n<p>To exercise these rights, it is sufficient to send a request to the email address <a href=\"mailto:info@dasantina.it\">info@dasantina.it<\/a> or to write to the contact details provided in section 1. The Data Controller will respond within the time limits set by law.<\/p>\n<h2>10. Changes to this information notice<\/h2>\n<p>The Data Controller reserves the right to modify or update this information notice, including as a result of changes in the applicable legislation. Changes will be published on this page.<\/p>\n<p><strong>Last updated: 16 July 2026.<\/strong><\/p>\n<hr>\n<h1 id=\"cookie-policy\">Cookie Policy<\/h1>\n<p><em>Drafted pursuant to the Guidelines of the Italian Data Protection Authority (Garante) on the use of cookies and other tracking tools of 10 June 2021.<\/em><\/p>\n<h2>What cookies are<\/h2>\n<p>Cookies are small text files that the websites visited send to the user&#8217;s device, where they are stored to then be retransmitted to the same websites on the next visit. They allow, for example, the website to function correctly, the user&#8217;s preferences to be remembered, or statistical information about browsing to be collected. Tools similar to cookies (e.g. web beacons, SDKs, identifiers) are handled under the same rules.<\/p>\n<h2>Types of cookies used by this website<\/h2>\n<h3>1. Technical and necessary cookies<\/h3>\n<p>They are essential for the correct functioning of the website and for providing the services requested by the user (e.g. maintaining the browsing session, storing the choices expressed on the cookie banner). They do <strong>not require the user&#8217;s consent<\/strong>, as they are strictly necessary (Article 122 of Italian Legislative Decree 196\/2003).<\/p>\n<h3>2. Statistical \/ measurement cookies<\/h3>\n<p>They are used to collect information, in aggregate form, on the number of visitors and how they use the website. This website uses <strong>Google Analytics 4<\/strong> (Google Ireland Ltd.). These cookies <strong>require the user&#8217;s prior consent<\/strong> and are installed only after the user has given it through the banner.<\/p>\n<h3>3. Third-party cookies and tools<\/h3>\n<p>The website integrates some Google services that may install cookies or establish connections to their servers:<\/p>\n<ul>\n<li><strong>Google Maps<\/strong> \u2013 for displaying maps;<\/li>\n<li><strong>reCAPTCHA<\/strong> \u2013 for protecting forms from spam and abuse;<\/li>\n<li><strong>Google Fonts<\/strong> \u2013 for the typographic rendering of the pages.<\/li>\n<\/ul>\n<p>These tools may involve the installation of third-party cookies and the transmission of the user&#8217;s IP address to Google&#8217;s servers. Where not strictly necessary, they are activated only with the user&#8217;s prior consent.<\/p>\n<h2>List of cookies<\/h2>\n<p><em>List verified on the website on 16 July 2026. The names and durations of third-party cookies (Google) may change following updates to the respective services. The consent-banner cookies only appear after the relevant plugin has been installed.<\/em><\/p>\n<table>\n<thead>\n<tr>\n<th>Cookie<\/th>\n<th>Category<\/th>\n<th>Purpose<\/th>\n<th>Controller<\/th>\n<th>Duration<\/th>\n<\/tr>\n<\/thead>\n<tbody>\n<tr>\n<td>PHPSESSID<\/td>\n<td>Strictly necessary<\/td>\n<td>Maintains the browsing session<\/td>\n<td>This website<\/td>\n<td>Session<\/td>\n<\/tr>\n<tr>\n<td>_icl_current_language<\/td>\n<td>Strictly necessary<\/td>\n<td>Stores the language selected by the user (WPML)<\/td>\n<td>This website<\/td>\n<td>1 day<\/td>\n<\/tr>\n<tr>\n<td>cookieyes-consent \/ cookielawinfo-*<\/td>\n<td>Strictly necessary<\/td>\n<td>Stores the preferences expressed in the cookie banner (set by the consent plugin once installed)<\/td>\n<td>This website (consent plugin)<\/td>\n<td>up to 12 months<\/td>\n<\/tr>\n<tr>\n<td>_ga<\/td>\n<td>Statistical<\/td>\n<td>Distinguishes users \u2014 Google Analytics 4, via Google Tag GT-T5N2PMNL<\/td>\n<td>Google<\/td>\n<td>2 years<\/td>\n<\/tr>\n<tr>\n<td>_ga_&lt;ID&gt;<\/td>\n<td>Statistical<\/td>\n<td>Maintains the session state (GA4)<\/td>\n<td>Google<\/td>\n<td>2 years<\/td>\n<\/tr>\n<tr>\n<td>_GRECAPTCHA<\/td>\n<td>Third party (security)<\/td>\n<td>Anti-spam protection of forms \u2014 reCAPTCHA v3, active on all pages<\/td>\n<td>Google<\/td>\n<td>6 months<\/td>\n<\/tr>\n<tr>\n<td>NID<\/td>\n<td>Third party<\/td>\n<td>Google Maps preferences and security (map on the Contact page)<\/td>\n<td>Google<\/td>\n<td>6 months<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h2>How to manage consent<\/h2>\n<p>On first access to the website, a <strong>banner<\/strong> is shown that allows the user to:<\/p>\n<ul>\n<li><strong>accept<\/strong> all cookies;<\/li>\n<li><strong>reject<\/strong> non-necessary cookies;<\/li>\n<li><strong>customise<\/strong> their choices by individual category.<\/li>\n<\/ul>\n<p>Statistical and non-necessary third-party cookies are installed <strong>only after<\/strong> the user has given consent. The user can change or withdraw their choices at any time by clicking on the <strong>&laquo;Cookie preferences&raquo;<\/strong> link in the website footer.<\/p>\n<h2>Managing cookies through the browser<\/h2>\n<p>In addition to the tools described above, the user can manage or disable cookies directly from the settings of their browser. Disabling technical cookies may, however, compromise the correct functioning of the website. Below are the guides for the main browsers:<\/p>\n<ul>\n<li>Google Chrome: <a href=\"https:\/\/support.google.com\/chrome\/answer\/95647\" target=\"_blank\" rel=\"noopener\">open the guide<\/a><\/li>\n<li>Mozilla Firefox: <a href=\"https:\/\/support.mozilla.org\/it\/kb\/Gestione%20dei%20cookie\" target=\"_blank\" rel=\"noopener\">open the guide<\/a><\/li>\n<li>Microsoft Edge: <a href=\"https:\/\/support.microsoft.com\/it-it\/microsoft-edge\" target=\"_blank\" rel=\"noopener\">open the guide<\/a><\/li>\n<li>Apple Safari: <a href=\"https:\/\/support.apple.com\/it-it\/guide\/safari\/sfri11471\/mac\" target=\"_blank\" rel=\"noopener\">open the guide<\/a><\/li>\n<\/ul>\n<h2>Third-party information<\/h2>\n<p>To learn how Google processes data and to exercise any opt-out options:<\/p>\n<ul>\n<li>Google privacy policy: <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">policies.google.com\/privacy<\/a><\/li>\n<li>Google Analytics opt-out browser add-on: <a href=\"https:\/\/tools.google.com\/dlpage\/gaoptout\" target=\"_blank\" rel=\"noopener\">tools.google.com\/dlpage\/gaoptout<\/a><\/li>\n<\/ul>\n<p><strong>Last updated: 16 July 2026.<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Information notice on the processing of personal data Pursuant to Articles 13 and 14 of Regulation (EU) 2016\/679 (GDPR) and&#8230;<\/p>\n","protected":false},"author":3,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1197","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/pages\/1197","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/comments?post=1197"}],"version-history":[{"count":1,"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/pages\/1197\/revisions"}],"predecessor-version":[{"id":1198,"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/pages\/1197\/revisions\/1198"}],"wp:attachment":[{"href":"https:\/\/dasantina.it\/en\/wp-json\/wp\/v2\/media?parent=1197"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}