Cookie policy

What cookies are

Cookies are small text files that the websites you visit save on your device and read again on your next visit. They serve to remember information from one page to the next: the language chosen, for example, or the fact that you have already signed in.

A distinction is drawn between technical cookies, necessary for the website to work, and profiling cookies, used to reconstruct a user’s habits and show them targeted advertising. Only the latter require the user’s prior consent.

Alongside cookies there are similar technologies, such as the browser’s local storage, which likewise store information on the device. What is written here applies to them as well.

Technical cookies used by this website

Technical cookies are installed directly by the website and require no consent: without them the website would not work, or would work in a seriously degraded way. Installing them is lawful pursuant to Article 122 of the Italian Personal Data Protection Code.

The public website installs no cookies of its own: the language is indicated in the address of each page and is not stored on the device. The only first-party technical cookie belongs to the management area reserved for staff, which guests do not access.

The durations shown are those set by the website. You may in any case delete cookies at any time from your browser settings, in the ways described below.

• Restricted-area session — identifies the operator signing in to the management area reserved for staff and keeps them authenticated. It is set by the database provider (Supabase) at sign-in and is never installed on the public website. Name: sb-<project identifier>-auth-token, possibly split into several numbered parts. Path: /. SameSite: lax. Duration: up to 400 days, or until sign-out.

Third-party cookies: Stripe

Online payment is handled by Stripe, which installs its own technical and security cookies, necessary to complete the transaction and to recognise fraudulent behaviour. These are cookies functional to the service requested by the user and to fraud prevention: without them the payment cannot be authorised.

These cookies are read and written by Stripe as an independent controller for fraud-prevention and security purposes, and as a data processor for the execution of the payment. The information collected is not used by us for marketing purposes.

The main cookies set by Stripe are __stripe_mid, which lasts one year and serves to recognise the device for fraud-prevention purposes, and __stripe_sid, which lasts thirty minutes and holds together the requests belonging to the same payment session. They are installed only on the payment screen, once the guest has chosen the dates and asked to pay, and they do not appear on the rest of the website. The full list of the cookies set by Stripe and their durations is described in the cookie policy that Stripe publishes on its own website.

Measurement of visits and absence of profiling

The website measures visits in aggregate form using a tool provided by the platform that hosts it, served from the website’s own domain. This tool installs no cookies, stores no identifier on the device of the person browsing and makes it impossible to reconstruct an individual’s path from one visit to the next: it collects only the number of page views, the referring page, the country and the device type. Booking confirmation pages are excluded from the measurement.

The website installs no profiling cookies, advertising cookies, tracking pixels or remarketing tools, and it shares no data with advertising networks. Since the measurement stores no information on the device and reads no identifier from it, the consent required by Article 122 of the Italian Personal Data Protection Code is not needed: for this reason no banner is displayed. The processing of the browsing data that results from it is described in the privacy notice.

Should analytics tools that install cookies, or remarketing tools, be activated in the future, this section will be updated before they are activated and the website will adopt a banner compliant with the guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali), making it possible to refuse non-essential cookies as easily as they can be accepted.

How to manage cookies from your browser

Every browser allows you to see the cookies that have been saved, to delete them and to block their installation, either in general or for an individual website. The instructions are in the browser’s settings section, usually under headings such as “Privacy and security” or “Data protection”.

Please bear in mind that blocking technical cookies prevents the website from working properly: it will not be possible to stay signed in to the restricted area or to complete a booking. Deleting cookies also means losing the preferences that have been saved, starting with the language.

• Google Chrome: Settings › Privacy and security › Cookies and other site data.
• Mozilla Firefox: Settings › Privacy and security › Cookies and site data.
• Safari: Settings › Privacy › Manage website data.
• Microsoft Edge: Settings › Cookies and site permissions.

Legal references

This cookie policy is drawn up in accordance with the “Guidelines on cookies and other tracking tools” adopted by the Italian Data Protection Authority by decision no. 231 of 10 June 2021.

Article 122 of Legislative Decree 196/2003 (the Italian Personal Data Protection Code), Directive 2002/58/EC on privacy and electronic communications and Regulation (EU) 2016/679 also apply.

For the processing of the personal data collected through technical cookies and for the exercise of the related rights, please refer to the privacy notice published on this website.

Updates to this cookie policy

The content of this page is reviewed whenever services that install cookies are added or removed. The date of the last revision is shown at the top of the page.

We invite you to consult it from time to time: it is the quickest way to know what is actually being saved on your device.