
Privacy Policy
Last updated: 15 June 2026
This notice describes the processing of the personal data of users who browse the website visitborghetto.it (the "Site"), the tourism-promotion portal of the Municipality of Borghetto Santo Spirito, pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR"). It applies to this Site only and not to any other linked websites.
Data Controller
Comune di Borghetto Santo Spirito
Piazza Italia n. 1 — 17052 Borghetto Santo Spirito (SV)
C.F. 00229160098
Tel. 0182 970.000
Email: [email protected]
PEC: [email protected]
Data Protection Officer (DPO)
Dott. Giacomo Briga
Via A. Manzoni n. 1 — 98031 Capizzi (ME)
Tel. 0935 933337
Email: [email protected]
PEC: [email protected]
Categories of data processed
- Browsing data: IP address, browser and device type, pages visited, date and time of access and other technical parameters automatically transmitted by the browser, necessary for the operation and security of the Site.
- Data collected through cookies and similar technologies: see the Cookie Policy. Analytics and marketing cookies are activated only with your prior consent.
- Data provided voluntarily: data communicated by filling in any contact/report forms or by writing to the addresses indicated (e.g. name, email, phone, message content and any attachments).
Purposes and legal bases
- Delivery of the Site and its content, security and technical diagnostics — performance of a task carried out in the public interest connected with the exercise of official authority (Art. 6(1)(e) GDPR).
- Responding to requests sent via forms or email — performance of a task carried out in the public interest or a response to your request (Art. 6(1)(e) GDPR).
- Usage statistics (analytics) and marketing features — your consent, freely given and revocable (Art. 6(1)(a) GDPR), through the cookie banner.
Recipients and data processors
Data may be processed by authorised staff of the Municipality and by technical service providers appointed as data processors, including:
- Cloudflare, Inc. — hosting/CDN and delivery of the Site at the edge;
- Iubenda S.r.l. — cookie consent management (CMP);
- Google Ireland Ltd. — traffic statistics (Google Analytics 4 via Google Tag Manager), activated only with prior consent;
- any marketing platforms (e.g. Meta Platforms Ireland Ltd. — Facebook pixel), activated only with prior consent;
- providers of the content backend and online-forms infrastructure.
Data is not disseminated or transferred to third parties for their own purposes. It may be disclosed to public and judicial authorities in the cases provided for by law.
Transfer of data outside the EU
Some providers (e.g. Cloudflare, Google, Meta) may also process data outside the European Economic Area. In such cases the transfer takes place on the basis of adequacy decisions or appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses), as detailed in the respective providers' notices.
Retention period
- Browsing data and technical logs: for the time strictly necessary to manage and secure the Site;
- Analytics/marketing cookie data: according to the durations indicated in the Cookie Policy and in the providers' notices;
- Data provided via forms/email: for the time necessary to handle the request and for the documentary obligations of the Public Administration.
Rights of the data subject
Within the limits and conditions set out in Articles 15-22 of the GDPR, you have the right of access, rectification, erasure, restriction, portability and objection, as well as the right to withdraw at any time the consent given (without prejudice to processing already carried out). To exercise your rights you may write to [email protected] or contact the DPO at the addresses above.
Complaint to the supervisory authority
If you believe that the processing of your data infringes the law, you may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Changes
The Controller may update this notice; changes will be published on this page together with the relevant update date.
