Cookie Policy of www.costieradelcilento.it
1. Introduction
This Cookie Policy explains how www.costieradelcilento.it, hereinafter referred to as the “Website”, uses cookies and similar tracking technologies when users visit or interact with its pages.
This Cookie Policy should be read together with the Website’s Privacy Policy, which contains further information about the processing of personal data, the legal bases of processing, data retention, international transfers and users’ rights.
2. Data Controller
The Data Controller is:
Servizi Quadrifoglio Palinuro
Piazza Virgilio, 18
84051 Palinuro, Salerno (SA)
Campania, Italy
Email: info@costieradelcilento.it
3. What Cookies Are
Cookies are small text files that websites store on a user’s computer, smartphone, tablet or other device while the user is browsing.
Cookies may allow a website to:
- Operate correctly
- Remember user preferences
- Maintain a browsing or booking session
- Improve performance and usability
- Understand how visitors use the Website
- Measure the effectiveness of advertising campaigns
- Display personalised content or advertising
Cookies normally contain an identifier, the name of the website that placed them and, where applicable, an expiry date.
Cookies do not necessarily identify a user by name. However, identifiers and information collected through cookies may constitute personal data when they can be associated with a device, account or identifiable individual.
4. Similar Tracking Technologies
In addition to traditional cookies, the Website or its service providers may use similar technologies, including:
- Local storage
- Session storage
- Pixels and tracking tags
- Software development kits
- Embedded scripts
- Device or browser identifiers
- Conversion tags
- Server-side event measurement
- Other technologies capable of storing or accessing information on a user’s device
References to “cookies” in this policy also include comparable tracking technologies, where applicable.
5. First-Party and Third-Party Cookies
First-party cookies
First-party cookies are placed directly by the Website and are generally used to provide essential functions, remember preferences or maintain the user’s session.
Third-party cookies
Third-party cookies are placed or accessed by external providers whose services are integrated into the Website.
These providers may include analytics platforms, advertising networks, video platforms, map services, social networks, booking services or payment providers.
The Data Controller does not have direct control over the subsequent processing performed independently by third-party providers. Users should therefore also consult the privacy and cookie documentation of the relevant provider.
6. Session and Persistent Cookies
Session cookies
Session cookies are temporary and are normally deleted when the user closes the browser.
They may be used to maintain navigation, preserve temporary settings or support booking and security functions.
Persistent cookies
Persistent cookies remain stored on the user’s device for a specified period or until they are manually deleted.
They may be used to remember preferences, retain consent choices, analyse repeat visits or support advertising measurement.
7. Cookie Categories Used by the Website
Depending on the technologies actually enabled, the Website may use the following categories of cookies.
Strictly necessary cookies
These cookies are essential for the Website to operate and cannot generally be disabled through the cookie preference panel.
They may be used to:
- Display Website pages correctly
- Maintain secure browsing sessions
- Manage cookie consent choices
- Protect forms against spam or unauthorised use
- Enable booking or payment procedures
- Maintain the contents of a booking or shopping cart
- Authenticate users in restricted areas
- Balance server traffic
- Prevent fraud and malicious activity
Strictly necessary cookies are used on the basis of the need to provide an electronic service expressly requested by the user.
Consent is not normally required for these cookies.
Users may block them through their browser settings, but doing so may prevent parts of the Website from operating correctly.
Preference and functionality cookies
These cookies allow the Website to remember choices made by users and provide enhanced functionality.
They may remember:
- Preferred language
- Display preferences
- Previously selected tour options
- Geographical or regional settings
- Accessibility preferences
- Form information entered during a session
Where these cookies are not strictly necessary to provide a service expressly requested by the user, they are activated only after consent.
Refusing them may reduce personalisation but does not normally prevent access to the Website’s essential content.
Analytics and performance cookies
These cookies help the Data Controller understand how visitors use the Website.
They may collect information about:
- Number of visitors
- Pages viewed
- Time spent on pages
- Traffic sources
- Browsers and devices used
- General navigation paths
- Technical errors
- Interactions with buttons and forms
- Booking or enquiry conversions
The information is used to measure performance, identify technical problems, improve content and understand which services are most useful to visitors.
Unless the conditions for treating a specific analytics implementation as technically necessary are satisfied, analytics cookies are activated only after the user has given consent.
Marketing and advertising cookies
These cookies and tracking technologies may be used to:
- Measure advertising campaign effectiveness
- Attribute bookings or enquiries to an advertisement
- Create remarketing audiences
- Display advertisements based on previous visits
- Limit the number of times an advertisement is shown
- Personalise advertisements
- Analyse interactions with Google, Facebook or Instagram campaigns
Marketing cookies are not essential to the operation of the Website and are activated only after the user has given consent.
Refusing marketing cookies does not prevent access to the Website or the booking of a tour. Advertising may still be displayed, but it may be less relevant to the user.
External media and content cookies
The Website may embed content from third-party platforms, such as:
- YouTube videos
- Google Maps
- Social media posts
- External booking widgets
- Other interactive content
These platforms may place cookies or collect technical data when the content is loaded or used.
Where required, embedded content is blocked until the user gives consent to the relevant category.
8. Cookies That May Be Used
The actual names, providers, purposes and durations of cookies depend on the Website’s current technical configuration.
The following sections describe the services indicated as potentially present on the Website. Services that are not actually installed or active should be removed from this policy.
A detailed and automatically updated list should also be made available through the Website’s cookie preference panel.
9. Cookie Consent Management Platform
The Website uses a cookie consent management system to:
- Display the cookie banner
- Record the user’s choices
- Prevent non-essential cookies from being activated before consent
- Allow acceptance or refusal by category
- Store proof of the consent choice
- Allow users to change or withdraw consent
The consent management system may place a strictly necessary cookie or local storage identifier containing information such as:
- Consent status
- Categories accepted or refused
- Date and time of the choice
- Version of the cookie notice
- A non-directly identifying consent reference
This information is necessary to respect and document the user’s preferences.
Cookie or storage name: [insert name generated by the cookie plugin]
Provider: www.costieradelcilento.it or the consent platform provider
Category: Strictly necessary
Duration: [insert actual duration]
10. WordPress and Website Functionality
As the Website is built using WordPress, technical cookies may be placed by WordPress, the active theme or installed plugins.
Depending on the features in use, these cookies may support:
- Secure Website operation
- Session management
- Form protection
- User authentication
- Administrative access
- Language selection
- Booking functions
- Security and anti-spam controls
- Temporary interface preferences
Cookies used exclusively for Website administration are normally placed only when authorised administrators log in.
The exact cookie names vary according to the WordPress configuration and installed plugins.
11. Booking and Payment Cookies
Where the Website allows users to book a boat tour, pay a deposit or purchase a service, the booking or payment system may use essential cookies to:
- Maintain the selected date and time
- Store temporary booking information
- Maintain a checkout session
- Prevent duplicate transactions
- Ensure payment security
- Detect fraud
- Redirect users correctly after payment
- Confirm the status of a transaction
These cookies may be placed by the Website or by an external booking or payment provider.
Where a third-party provider is used, users should consult that provider’s privacy and cookie documentation.
Booking platform: [insert provider, if applicable]
Payment provider: [insert provider, if applicable]
12. Google Analytics 4
The Website may use Google Analytics 4, a web analytics service supplied by Google.
Google Analytics helps the Data Controller understand how users interact with the Website and may collect information such as:
- Pages viewed
- Approximate session duration
- Device category
- Browser and operating system
- Approximate geographical area
- Referring website or advertising campaign
- Navigation events
- Form or booking interactions
- Conversion events
Google Analytics 4 may use cookies including:
_ga
Used to distinguish users or devices for statistical measurement.
Provider: Google / www.costieradelcilento.it
Category: Analytics
Typical duration: up to 2 years, depending on configuration
_ga_<container-id>
Used to maintain and measure session-related information for a specific Google Analytics property.
Provider: Google / www.costieradelcilento.it
Category: Analytics
Typical duration: up to 2 years, depending on configuration
Other cookies or identifiers may be used depending on the Google Analytics configuration, Consent Mode implementation and advertising features enabled.
For visitors in the European Union, Switzerland and the United Kingdom, Google states that Analytics does not log or store individual IP addresses. IP information may be used temporarily to derive approximate geographical information before being discarded.
Google Analytics cookies are activated only after the user has provided the required consent, unless the Website uses a configuration that does not store or access non-essential information on the user’s device and is lawfully classified differently.
Users can withdraw their consent at any time through the cookie preference panel.
13. Google Consent Mode
The Website may use Google Consent Mode to communicate the user’s consent choices to Google services.
Depending on its configuration, Consent Mode may adjust the behaviour of Google tags when consent has not been granted.
The use of Consent Mode does not replace the requirement to obtain consent where storing, accessing or processing information requires it.
The Website should be configured so that Google Analytics and Google advertising cookies are not activated before the relevant consent has been given.
14. Google Ads Conversion Tracking
The Website may use Google Ads conversion tracking to measure whether users complete actions after interacting with a Google advertisement.
Measured actions may include:
- Opening a tour page
- Clicking a telephone or WhatsApp contact button
- Submitting a contact form
- Beginning a booking
- Completing a booking
- Paying a deposit
Depending on the configuration, Google Ads may use cookies such as:
_gcl_au
Used to store and measure advertising conversions.
Provider: Google
Category: Marketing
Typical duration: approximately 3 months
_gcl_aw
May be used to attribute a conversion to a Google advertisement.
Provider: Google
Category: Marketing
Typical duration: varies according to configuration
Google may use additional identifiers depending on the advertising services enabled and the user’s settings.
Google Ads cookies and advertising identifiers are activated only after the user has given marketing consent.
15. Google Ads Remarketing
The Website may use Google Ads remarketing to display advertisements to users who have previously visited the Website.
Subject to consent, Google may use cookies or other identifiers to:
- Add the user’s browser or device to an advertising audience
- Display advertisements on Google services or partner websites
- Measure interactions with advertisements
- Limit repeated advertising
- Personalise advertising content
Users can refuse or withdraw marketing consent through the Website’s cookie preference panel.
They may also manage advertising preferences using the controls made available by Google.
16. Meta Pixel
The Website may use the Meta Pixel, supplied by Meta Platforms Ireland Limited.
The Meta Pixel allows the Data Controller to measure interactions with advertisements displayed on Facebook, Instagram and other Meta services.
Subject to consent, the Pixel may collect information such as:
- Pages visited
- Date and time of the visit
- Browser and device information
- Referring page
- Buttons clicked
- Forms submitted
- Booking-related actions
- Cookie identifiers
- Information relating to advertising campaigns
The Meta Pixel may use cookies including:
_fbp
Used to identify browsers for advertising measurement and delivery.
Provider: Meta Platforms Ireland Limited / Website domain
Category: Marketing
Typical duration: approximately 3 months
_fbc
May be created when a user reaches the Website through a link containing a Meta advertising click identifier.
Provider: Meta Platforms Ireland Limited / Website domain
Category: Marketing
Typical duration: approximately 3 months
Additional Meta cookies may be used where the user is logged into Facebook or Instagram or interacts with embedded Meta content.
The Meta Pixel must remain inactive until the user has given marketing consent, where such consent is required.
17. Meta Custom Audiences and Advertising Measurement
Subject to consent, Meta Business Tools may be used to:
- Measure conversions from Facebook and Instagram advertisements
- Create audiences based on Website visits
- Reach users who have shown interest in a tour
- Exclude users who have already completed an action
- Optimise advertising delivery
- Produce aggregated campaign reports
Meta may act as an independent data controller for certain processing operations and handles information in accordance with its own privacy terms.
Users can change their choices through the Website’s cookie preference panel and through their Meta account advertising settings.
18. YouTube Videos
The Website may embed videos supplied by YouTube, a service operated by Google.
When YouTube content is loaded or played, Google may receive information including:
- IP-related technical information
- Browser and device information
- The page containing the video
- Interaction with the video
- Cookie or account identifiers
- Login status, where the user is signed into Google or YouTube
YouTube may use cookies including identifiers for:
- Video playback
- Preference storage
- Security
- Usage measurement
- Advertising and personalisation
Where possible, the Website should use YouTube’s privacy-enhanced embedding mode. However, this mode does not necessarily eliminate all data processing when the user activates the video.
YouTube content should remain blocked until the user accepts the relevant external media or marketing category.
19. Google Maps
The Website may embed Google Maps to display the boarding point, parking area or other relevant locations.
When a Google map is loaded, Google may collect:
- IP-related technical information
- Device and browser details
- Approximate location
- Map interactions
- Google account information, where the user is logged in
- Cookie or advertising identifiers
Google Maps may place cookies for functionality, preferences, measurement and advertising.
Embedded maps should be blocked until the user gives the appropriate consent, unless they are loaded through a configuration that does not require non-essential storage or access.
Users who refuse consent may still access the address and GPS coordinates in textual form or open the location directly through an external link.
20. Google Fonts
The Website may use typefaces supplied through Google Fonts.
Fonts hosted locally
Where Google Fonts files are stored directly on the Website’s server, the user’s browser does not need to contact Google solely to download the font files.
In this case, Google Fonts normally does not place cookies and no separate third-party request is made for font delivery.
Fonts loaded from Google servers
Where fonts are loaded directly from Google servers, the user’s browser connects to Google and transmits technical information such as the IP address and browser details.
Google Fonts does not normally require cookies solely to deliver font files, but the external request may still involve the processing of technical data.
To minimise external data transfers, local hosting of Google Fonts is recommended.
Current configuration: [confirm whether fonts are hosted locally or loaded from Google]
21. Facebook and Instagram Links or Widgets
The Website may contain links, buttons or embedded content associated with Facebook or Instagram.
A simple external link does not normally place social media cookies merely because it appears on the page. Data is transmitted to the social platform when the user follows the link.
Embedded social widgets, posts or interactive buttons may instead allow Meta to collect information as soon as the content is loaded.
Where embedded social content uses non-essential tracking technologies, it should remain blocked until the user gives consent.
22. Other External Content
The Website may use other third-party content or services, including:
- Weather widgets
- Review widgets
- Booking engines
- Live chat services
- WhatsApp contact tools
- Anti-spam services
- Captcha systems
- Content delivery networks
- Payment interfaces
- External image or video galleries
Each service may process technical data or place cookies according to its own configuration.
Any additional service discovered during the Website’s technical cookie scan should be added to this policy and correctly classified in the consent platform.
23. Legal Basis for Using Cookies
Strictly necessary cookies are used because they are required to transmit a communication or provide a service expressly requested by the user.
For preference, analytics, advertising, profiling and external media cookies that are not strictly necessary, the legal basis is the user’s consent.
Where personal data collected through cookies is processed, the relevant legal bases are also described in the Website’s Privacy Policy.
24. How Consent Is Collected
When users first visit the Website, a cookie banner allows them to make a free and informed choice.
The banner should provide controls that allow users to:
- Accept all non-essential cookies
- Reject all non-essential cookies
- Review and select individual categories
- Access this Cookie Policy
- Continue using the Website with only necessary cookies
Closing the banner, scrolling the page or continuing to browse does not constitute consent to non-essential cookies.
Non-essential cookies must not be activated before the user makes an affirmative choice.
The acceptance and refusal controls should be presented in a clear and equally accessible manner.
Consent should be specific for the relevant cookie categories and should not be inferred from inactivity, pre-selected boxes or ambiguous actions.
25. Refusing Cookies
Users may refuse all non-essential cookies without losing access to the Website’s ordinary content or essential functions.
Some optional features may not be available when consent is refused. For example:
- YouTube videos may not play
- Google Maps may remain blocked
- Personalised preferences may not be remembered
- Advertising conversions may not be measured
- Remarketing advertisements may not be personalised
Where possible, the Website should provide an alternative method of accessing essential information, such as textual addresses, telephone numbers and external map links.
26. Changing or Withdrawing Consent
Users may change or withdraw their consent at any time.
Withdrawing consent is as easy as giving it and does not affect the lawfulness of processing carried out before withdrawal.
A permanently accessible link or button should be displayed in the Website footer using wording such as:
Change Cookie Preferences
or:
Cookie Settings
Selecting this control should reopen the consent panel and allow users to:
- Review their previous choice
- Accept or reject individual categories
- Reject all optional cookies
- Withdraw previously granted consent
After consent is withdrawn, the Website should stop activating the relevant technologies.
Cookies already stored may remain on the device until they expire or are manually deleted. Where technically possible, the consent platform may also remove certain cookies when consent is withdrawn.
27. Duration and Renewal of Consent
The Website records the user’s consent choice for a limited period.
The banner may be shown again when:
- The stored consent has expired
- Material changes are made to the cookies or services used
- The Cookie Policy is substantially updated
- The consent record cannot be found
- Reconfirmation is required by law
The banner should not be repeatedly shown merely because the user refused optional cookies, except in the circumstances permitted under applicable guidance.
Consent record duration: [insert the period configured in the cookie platform]
28. Consent Records
The Data Controller may retain evidence of the user’s consent or refusal, including:
- Date and time of the choice
- Consent identifier
- Categories accepted or refused
- Version of the banner and policy
- Technical information necessary to demonstrate the choice
These records are used to demonstrate compliance and are retained for an appropriate period.
29. Browser Cookie Settings
Users can also manage cookies through their browser settings.
Most browsers allow users to:
- View stored cookies
- Delete individual cookies
- Delete all cookies
- Block first-party or third-party cookies
- Block cookies from selected websites
- Delete cookies automatically when the browser closes
- Send privacy preference signals
Browser controls may change over time. Users should therefore consult the current support documentation for the browser and version they use.
Blocking all cookies, including strictly necessary cookies, may prevent certain parts of the Website from functioning correctly.
30. Google Chrome
In current versions of Google Chrome, cookie and site-data controls are generally available through:
Settings → Privacy and security → Third-party cookies
or:
Settings → Privacy and security → Site settings
From these sections, users may view, delete or restrict cookies and site data.
Menu names may vary according to the operating system and browser version.
31. Mozilla Firefox
In current versions of Mozilla Firefox, privacy and cookie controls are generally available through:
Settings → Privacy & Security
Users may select a tracking protection level, manage cookies and site data, delete stored data or define exceptions for specific websites.
32. Apple Safari on macOS
In current versions of Safari for macOS, cookie controls are generally available through:
Safari → Settings → Privacy
Users may prevent cross-site tracking, block cookies or manage stored website data.
Blocking all cookies may affect certain Website features.
33. Apple Safari on iPhone and iPad
On current versions of iOS or iPadOS, Safari privacy controls are generally available through:
Settings → Apps → Safari
or, on some versions:
Settings → Safari
Users may manage cross-site tracking, advanced tracking protection, cookie blocking and website data.
The exact menu path depends on the version of iOS or iPadOS.
34. Microsoft Edge
In current versions of Microsoft Edge, cookie controls are generally available through:
Settings → Cookies and site permissions
or:
Settings → Privacy, search, and services
Users may block or allow cookies, manage third-party cookies, delete browsing data and configure tracking prevention.
35. Opera
In current versions of Opera, cookie controls are generally available through:
Settings → Privacy and security
Users may manage site data, third-party cookies, tracking protection and stored browsing information.
36. Mobile Browsers and In-App Browsers
Mobile browsers and browsers opened inside applications may have different privacy settings from the device’s main browser.
Users should check the privacy or site-data settings of the specific browser or application being used.
Deleting cookies from one browser does not necessarily delete cookies stored by another browser on the same device.
37. Advertising Preference Tools
In addition to the Website’s cookie preference panel, users may manage certain advertising preferences through tools supplied by advertising providers or industry organisations.
These external tools do not replace the Website’s consent controls and may not block every tracking technology.
They may include preference management resources provided by:
- Meta
- European Interactive Digital Advertising Alliance
- Network Advertising Initiative
- Digital Advertising Alliance
Users should consult the current privacy and advertising settings supplied directly by the relevant platform.
38. Global Privacy Control and Do Not Track
Some browsers or extensions transmit privacy signals such as Global Privacy Control or Do Not Track.
The legal and technical effect of these signals may vary according to jurisdiction, browser and service provider.
The Website may not automatically interpret every browser signal as a complete cookie preference.
Users should therefore use the Website’s cookie preference panel to communicate their choices directly.
39. Transfers Outside the European Economic Area
Certain third-party providers, including Google and Meta, may process or make information accessible outside the European Economic Area.
Where personal data is transferred internationally, the transfer may rely on:
- An adequacy decision issued by the European Commission
- The EU–US Data Privacy Framework, where applicable
- Standard Contractual Clauses
- Additional technical and organisational safeguards
- Another mechanism permitted under the GDPR
Further information is provided in the Website’s Privacy Policy and in the privacy documentation of the relevant provider.
40. Data Retention
Each cookie is retained for the duration specified by the relevant provider or by the Website’s configuration.
Cookie duration may be:
- Limited to the current browsing session
- A few minutes or hours
- Several days or months
- Up to two years or another period configured by the provider
The duration indicated in this policy is descriptive and should be confirmed through a technical cookie scan.
Information subsequently generated through analytics or advertising platforms may be retained for a different period, according to the relevant account settings and provider policies.
41. Users’ Data Protection Rights
Where information collected through cookies constitutes personal data, users may exercise the rights provided by the GDPR, including the rights to:
- Access their personal data
- Request correction of inaccurate data
- Request deletion where applicable
- Request restriction of processing
- Object to certain processing
- Receive portable data where applicable
- Withdraw consent at any time
- Lodge a complaint with the competent supervisory authority
Further details about these rights and how to exercise them are provided in the Website’s Privacy Policy.
Requests may be sent to:
42. Definitions
Cookie
A small piece of data stored or accessed on the user’s device by a website or third-party service.
Tracking technology
A cookie, pixel, tag, local storage object, identifier or similar technology used to store information or monitor interactions.
Personal data
Any information relating to an identified or identifiable natural person.
Usage data
Information collected automatically when users browse the Website, such as page requests, timestamps, browser characteristics, device information and interaction data.
User
The person visiting or using the Website.
Data subject
The natural person to whom personal data relates.
Data Controller
The person or organisation that determines the purposes and means of processing personal data.
Data Processor
A person or organisation that processes personal data on behalf of the Data Controller.
Service
The tourism, booking, information or other functionality provided through the Website.
European Economic Area
The Member States of the European Union together with Iceland, Liechtenstein and Norway.
43. Changes to This Cookie Policy
The Data Controller may update this Cookie Policy when:
- New cookies or services are introduced
- Existing technologies are removed
- Providers change their processing practices
- The Website’s functionality changes
- Legal or regulatory requirements are updated
- The consent management platform is modified
The updated version will be published on this page.
Where a change materially affects the user’s consent, the Website will request a new choice where required.
Users are encouraged to review this policy periodically.
44. Legal References
This Cookie Policy is prepared with reference to:
- Regulation (EU) 2016/679, the General Data Protection Regulation
- Directive 2002/58/EC on privacy and electronic communications
- The applicable provisions of the Italian Personal Data Protection Code
- The guidelines and decisions of the Italian Data Protection Authority concerning cookies and other tracking technologies
45. Contact Information
For questions about this Cookie Policy or the use of cookies on the Website, users may contact:
Servizi Quadrifoglio Palinuro
Piazza Virgilio, 18
84051 Palinuro, Salerno (SA)
Campania, Italy
Email: info@costieradelcilento.it
