Privacy and cookie policy
Last updated: October 15, 2026
This policy explains what personal data the donatocipriano.com website collects, why it collects it, which tools it uses and what rights you have. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and the Italian Personal Data Protection Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
Data controller
Donato Cipriano, Viale Unità d'Italia 49, 80045 Pompei (NA), Italy.
If you have any questions about privacy or wish to exercise your rights, please write to:
What data we collect
- Browsing data. When you visit the website, the server hosting it automatically records some technical data: IP address, date and time, page requested, browser type and operating system. This data keeps the website working and protects it from misuse.
- Data you send us. Through the enquiry forms: name, email address and/or phone number, date and location of the event, message, plus the language and the page you are writing from. If you contact us on WhatsApp, by email or by phone, we process the data you share in that conversation.
- Usage and advertising data. Only with your consent: how you use the site and which Google ads brought you here (see "Cookies and measurement tools").
Why we use data and on what legal basis
- Answering your enquiries and preparing a quote: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
- Managing the booking, if there is one, and meeting tax and accounting obligations: performance of the contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
- Running the website securely: the controller's legitimate interest (Art. 6(1)(f) GDPR).
- Visit statistics and measuring how well ads work, including Google Ads enhanced conversions: consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
We do not use your data to send you newsletters or promotions without your explicit and separate consent.
Who we share data with
Data is processed by the controller and by the providers who help run the website and handle enquiries, as data processors or independent controllers:
- Vercel Inc. (United States): website hosting.
- Formspree, Inc. (United States): receives the forms and emails them to the controller.
- Google Ireland Limited and Google LLC: mailbox (Gmail), Google Analytics and Google Ads.
- WhatsApp Ireland Limited (Meta group): only if you choose to message us on WhatsApp; the conversation is governed by WhatsApp's privacy policy.
- Advisers (such as the accountant) and public authorities, only when the law requires it.
We do not sell or publish your data.
Transfers outside the European Union
Some providers are based in the United States or may process data there. Transfers rely on the European Commission's adequacy decision, for providers certified under the EU-U.S. Data Privacy Framework, or on the standard contractual clauses approved by the Commission.
How long we keep data
- Enquiries that do not lead to a booking: up to 24 months from the last contact.
- Data linked to a booking: 10 years, as required by Italian civil and tax law.
- Google Analytics statistics: for the period set in the service, up to 14 months.
- Browsing data: only as long as strictly necessary, according to the hosting provider's settings.
- Cookies: for the duration given in "Cookies and measurement tools", unless you delete them sooner.
Do you have to provide your data?
No. Without your contact details, however, we cannot reply to you. Consent to analytics and advertising cookies is optional: if you decline, the site still works.
Your rights
At any time you can ask to access your data, correct or delete it, restrict its processing, receive it in a machine-readable format and object to processing based on legitimate interest (Articles 15–22 GDPR). You can withdraw consent whenever you like, without affecting what happened before the withdrawal. To do so, write to the email address in the "Data controller" section.
If you believe the processing breaks the law, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
The website does not take decisions based solely on automated processing that produce legal effects on you.
Minors
The website is not aimed at children under 14 and does not knowingly collect their data.
Changes to this policy
We may update this policy when the website or the law changes. The date of the last update is shown at the top.
Website terms of use
The terms of use of the website are set out in a separate document.