Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR)
1. Data Controller
DMO La Francigena e le vie del gusto
Piazza Girolamo Fabrizio, 1
01021 – Acquapendente (VT), Italy
Email: dmofrancigenaegusto@gmail.com
2. Types of Personal Data Processed
The Data Controller processes the following categories of personal data, collected automatically during browsing:
- Usage data: IP address, pages visited, access times, session duration, referring URL.
- Device and browser information: device type, operating system, browser type and version.
- Aggregated statistical data: number of users, session statistics.
- Data collected through tracking tools (cookies and similar technologies): please refer to the Cookie Policy on this website for full details.
This website does not collect personal data via contact or registration forms. Users are responsible for any third-party personal data they may communicate to the Data Controller.
3. Purposes and Legal Bases for Processing
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Web traffic statistical analysis (Google Analytics 4) | Consent of the data subject (Art. 6(1)(a)) |
| Display of fonts from external platforms (Google Fonts) | Legitimate interest of the Controller (Art. 6(1)(f)) |
| System logs and technical maintenance | Legitimate interest of the Controller (Art. 6(1)(f)) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c)) |
| Defence in legal proceedings | Legitimate interest of the Controller (Art. 6(1)(f)) |
4. Details of Third-Party Services Used
4.1 Google Analytics 4
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google Analytics 4 is a web traffic analysis service provided by Google Ireland Limited. Google uses the collected data to track and examine the use of this website, compile reports, and share them with other Google services. IP addresses are anonymised before being recorded on Google’s servers. Google may use the data to contextualise and personalise ads within its advertising network.
Data processed: usage data; browser information; device information; number of users; session statistics; tracking tools.
Place of processing: Ireland
Privacy Policy: https://business.safety.google/privacy/
Opt-out: https://tools.google.com/dlpage/gaoptout
4.2 Google Fonts
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Google Fonts is a typeface display service managed by Google Ireland Limited. Loading fonts may result in the user’s IP address and usage data being transmitted to Google’s servers.
Data processed: usage data; tracking tools.
Place of processing: Ireland
Privacy Policy: https://business.safety.google/privacy/
5. Transfer of Data Outside the European Union
The third-party providers listed above (Google Ireland Limited) are based in Ireland and operate within the European Union. Where certain processing takes place on Google LLC servers in the United States, the transfer is covered by Standard Contractual Clauses approved by the European Commission. For further information, please contact the Data Controller at dmofrancigenaegusto@gmail.com.
6. Processing Methods
Personal data is processed using IT and electronic tools, with appropriate technical and organisational security measures in place to prevent unauthorised access, disclosure, modification, or destruction. Data may be accessible, within the limits of their respective roles, to collaborators of the Data Controller acting as data processors, as well as to external service providers (hosting, technical support) operating as Data Processors pursuant to Art. 28 GDPR. An updated list of Data Processors is available upon request.
7. Data Retention Period
Personal data is retained for the period strictly necessary to fulfil the purpose for which it was collected:
- Statistical data (Google Analytics 4): retained for a maximum of 14 months, in accordance with Google Analytics 4 default settings.
- System logs: retained for the technical period required for website maintenance and security.
- Data processed on the basis of consent: retained until consent is withdrawn or the purpose is fulfilled, subject to any legal obligations.
Upon expiry of the retention period, data is permanently deleted or anonymised.
8. Rights of the Data Subject
As a data subject, the user has the right to:
- Access (Art. 15 GDPR): obtain confirmation of processing and receive a copy of their personal data.
- Rectification (Art. 16 GDPR): request the correction of inaccurate data or the completion of incomplete data.
- Erasure (“right to be forgotten”) (Art. 17 GDPR): request the deletion of personal data where the conditions set out in the regulation are met.
- Restriction of processing (Art. 18 GDPR): request that data be stored without being further processed.
- Data portability (Art. 20 GDPR): receive personal data in a structured, commonly used and machine-readable format, where technically feasible.
- Objection (Art. 21 GDPR): object to processing carried out on the basis of legitimate interest, at any time and free of charge.
- Withdrawal of consent (Art. 7 GDPR): withdraw consent previously given at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
- Complaint (Art. 77 GDPR): lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, Piazza Venezia 11, 00187 Rome – www.garanteprivacy.it) or with any other competent supervisory authority.
To exercise any of the above rights, users may send a written request to:
DMO La Francigena e le vie del gusto
Email: dmofrancigenaegusto@gmail.com
Piazza Girolamo Fabrizio, 1 – 01021 Acquapendente (VT), Italy
The Data Controller will respond within 30 days of receiving the request, as required by Art. 12 GDPR. In the case of particularly complex requests, this period may be extended by a further 60 days, with prior notice to the user.
9. Cookie Policy
This website uses cookies and tracking tools. For detailed information on the types of cookies used, their purposes, the third parties involved, and how to manage or disable them, please refer to the Cookie Policy available on this website.
To opt out of data collection by Google Analytics, users may install the browser add-on available at: https://tools.google.com/dlpage/gaoptout
10. Changes to This Privacy Policy
The Data Controller reserves the right to update this privacy policy at any time, to reflect changes in applicable law or in the services provided. Updates will be published on this page with the date of the latest revision. For processing based on consent, the Data Controller will obtain new consent where required.
Last updated: March 2026