Privacy Policy

Data controller

The data controller is Jacopo Gonzales, a private individual. Contact: info@sibilliniguide.com.

Data processed

• Server logs: IP address, date and time, requested page and technical browser data, recorded by the hosting provider.
• Emails received: the address and content of messages sent to the controller.
• Technical cookies: described on the Cookies page.
• Browsing data collected with Google Analytics 4, only with your consent: pages viewed, clicks on affiliate links and share buttons, device and browser data, online identifiers stored in cookies, and approximate location.
• Data sent to GetYourGuide by the experiences calendar, only with your consent: IP address, page address, technical browser data, and the identifier in the visitor_id cookie.
• Business data: names and contact details of businesses in the listings, which may relate to natural persons.

The site does not use any advertising tools. Google Search Console is used only to verify the site and sets no cookies on visitors. The site has no contact forms and no restricted areas for visitors.

Purposes and legal bases

• Operation and security of the site (logs and technical cookies): the controller's legitimate interest, Art. 6(1)(f).
• Statistics on how the site is used, with Google Analytics 4: consent (Art. 6(1)(a)), which you can withdraw at any time without affecting processing already carried out.
• GetYourGuide experiences calendar: consent (Art. 6(1)(a)), which you can withdraw at any time without affecting processing already carried out.
• Replying to emails: steps taken at the data subject's request (Art. 6(1)(b)) or legitimate interest in replying (Art. 6(1)(f)).
• Business listings: legitimate interest in informing visitors about the area (Art. 6(1)(f)).
• Compliance with legal obligations, where applicable (Art. 6(1)(c)).

Google Analytics 4

• Provider: Google Ireland Limited. For Google Analytics, Google acts as a processor under its own data processing terms.
• Purpose and legal basis: statistics on how the site is used, only with your consent (Art. 6(1)(a)).
• When it is active: only after you consent to statistics in the cookie banner. Before consent, the site does not load Google Tag Manager or Google Analytics and makes no requests to Google's servers. Google Tag Manager is used only to load Google Analytics.
• Data collected: pages viewed, clicks on affiliate links (service, page and link) and on share buttons (service chosen), device and browser data, online identifiers stored in cookies, and approximate location. According to Google, Google Analytics does not log or store the IP addresses of visitors in the European Union: it uses them only to derive approximate location and then discards them.
• Settings: user-level and event-level data kept for 14 months; Google Signals turned off; no User-ID and no visitor-provided data sent to Google.
• Transfer to the United States: data may also be processed in the United States. For data transfers through Google Analytics, Google states that it relies on the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and in some cases on Standard Contractual Clauses (Google's information on data transfers).
• Withdrawing consent: at any time with the "Cookie preferences" link at the bottom of every page, as explained on the Cookies page. From the next page on, Google Analytics is no longer loaded. Withdrawal does not affect processing already carried out.

GetYourGuide (experiences calendar)

• Provider: GetYourGuide Deutschland GmbH (Germany).
• Purpose and legal basis: showing dates, availability, and prices for experiences on the pages, and crediting SibilliniGuide with bookings made from the site for the affiliate commission; only with your consent (Art. 6(1)(a)).
• When it is active: only after you consent to the "Experiences and bookings (GetYourGuide)" category in the cookie banner. Before consent, the box shows a plain link, and the site makes no requests to GetYourGuide's servers or to Google Fonts.
• Data processed: IP address, page address, technical browser data, calendar views, and the identifier in the visitor_id cookie. If you book, GetYourGuide collects the booking data on its own website.
• GetYourGuide's role: it processes this data as an independent controller, under its own privacy notice. SibilliniGuide receives only commission data from GetYourGuide, without the personal data of people who book.
• Google Fonts: the calendar downloads a font from Google Fonts, which sends your IP address to Google.
• Transfers outside the European Union: these may take place as described in GetYourGuide's and Google's privacy notices.
• Withdrawing consent: at any time with the "Cookie preferences" link; the page reloads and the calendar is no longer loaded. Withdrawal does not affect processing already carried out.

Data not obtained from the data subject

Business data comes from official sources (the National Park, municipalities, regional governments), OpenStreetMap and public databases. Data subjects can object to the processing or request correction or removal, including just a phone number, by writing to info@sibilliniguide.com.

Recipients and processors

The hosting provider is VHosting Solution s.r.l., Milan (Italy), with servers in Italy.

Data is not sold or disseminated, apart from the listing information published on the site. It may be disclosed to authorities where required by law.

Only if you consent to statistics, browsing data is processed by Google Ireland Limited for Google Analytics, as described above.

Only if you consent to the "Experiences and bookings" category does the data described above go to GetYourGuide and, for the calendar font, to Google. Stay22 links and the buttons to GetYourGuide are plain links: they load no scripts and set no cookies. If you follow one, you reach their websites, which process data as independent controllers under their own privacy notices.

Retention periods

• Server logs: for the period needed for security and operation, according to the hosting service's settings.
• Emails: for the time needed to handle the request and meet any obligations.
• Cookies: for the durations stated on the Cookies page.
• Google Analytics 4 user-level and event-level data: 14 months, after which Google deletes it automatically. The limit does not apply to aggregated reports.
• GetYourGuide visitor_id cookie: up to about 13 months in the browser. Data collected by GetYourGuide is kept as described in its privacy notice.
• Business data: as long as it is useful to the listing or until a removal request is granted.

Your rights

You can request access to your data, rectification, erasure, restriction of processing and portability where applicable, and object to processing based on legitimate interest. To do so, write to info@sibilliniguide.com. If you have consented to statistics or GetYourGuide, you can withdraw your consent at any time with the "Cookie preferences" link.

The site makes no decisions based solely on automated processing that produce legal effects on data subjects.

Complaints

You can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.