Cookie policy

Data Controller

The data controller for personal data related to the use of this website and the use of cookies is:

Comune di Genga
Via Corridoni, SNC - 60040 Genga (AN) - Italy
VAT No. 00196710420
E-mail: privacy@frasassi.com

Pursuant to Article 28 GDPR, the Data Controller engages, among others, the following external data processors:
- PIX Srl, Viale San Bartolomeo, 213 - 19126 La Spezia, for the technical management of the website, hosting on servers managed by it and on cloud computing services provided by Retelit, maintenance and updating of the platform, including the systems that manage cookies and the transmission of data entered in online forms.
Further information on the entities processing data on behalf of the Data Controller is available in the Privacy Policy of the website.
What are cookies

Cookies are small text files that websites visited by the user send to the device (computer, tablet, smartphone) where they are stored and then sent back to the same websites on the next visit.

Cookies may, among other things:
- ensure the proper functioning of web pages (technical cookies);
- store certain preferences (e.g. language, cookie acceptance);
- enable anonymous or aggregated statistical analysis;
- integrate third-party features (e.g. social networks).
They may be:
- first-party cookies, installed directly by the Data Controller;
- third-party cookies, installed by domains/websites other than the one visited by the user.
Types of cookies used by the website

On the first visit to the website, a banner is displayed informing users about the use of cookies, including third-party cookies, and allowing them to accept or reject them. Only technical cookies strictly necessary for the functioning of the website are always active.

3.1 Technical cookies (necessary)

These are cookies that are essential to:
- enable navigation and use of the website;
- remember the user's choices (e.g. language, choice to accept or reject cookies);
- ensure the security of the website and its users (e.g. abuse prevention, traffic management).
These cookies do not require the user's consent.

Typical examples (names to be verified by PIX):
- session cookies (e.g. ASP.NET_SessionId);
- server load-balancing/load cookies;
- cookies that store the choice expressed in the cookie banner (e.g. cookie_consent, cookie_preference).
The videos on the website are owned by Comune di Genga and are delivered through its own infrastructure: external services such as YouTube are not used, and therefore simply viewing the videos does not result in the installation of third-party cookies in this respect.

3.2 Analytics / statistical cookies (analytics)

The website may use statistical traffic analysis tools (such as Google Analytics or similar services) to collect aggregated information on the number of users and how they visit the website (most frequently viewed pages, approximate geographical origin, device type, etc.).

When these tools are configured with IP address anonymization and without combining the data with other databases, the corresponding cookies are treated as technical cookies; otherwise, they require the user's consent.

Examples of cookies associated with Google Analytics:
- _ga, _ga_*.
3.3 Third-party cookies (social, Meta Pixel)

There are no third-party cookies on the website.

3.4 Profiling / marketing cookies

The Data Controller does not directly use, on this website, profiling cookies to send personalized advertising.

The website may use cookies and other tracking tools provided by third parties for marketing and profiling purposes. These parties may process the data collected through their own tools for their own purposes, in accordance with the information provided in their respective privacy notices and cookie policies.

These cookies are installed only with the user's consent, expressed through the banner or preference management.

Indicative list of cookies used

Below is an example table of the main cookies that may be used by the website.

Important: names, duration and type must be verified and updated by the technical operator (PIX Srl) based on the actual configuration.

Name (example)	Provider	Type	Purpose	Indicative duration
cookie_notice_accepted	frasassiexperiences.com	Technical / preference	Stores the user's choice regarding the cookie banner (accept/reject)	1 month
idtemp	frasassi.com	Technical / preference	Stores the user's choice regarding website accessibility	30 days
_ga	Google Analytics	Analytics	Distinguishes users to generate anonymous statistics on website use	2 years
_ga_*	Google Analytics	Analytics	Stores the session state (GA4)	2 years
_gid	Google Analytics	Analytics	Distinguishes users and collects statistical information on website use (GA4)	24 hours

Managing cookie preferences

5.1 Through the banner

On the first access to the website, an information banner allows users to:
- accept the use of non-technical cookies (e.g. analytics without anonymization, third-party/marketing cookies such as Meta Pixel);
- reject such cookies, keeping only those that are strictly necessary active.
The choice can be changed at any time by deleting cookies from the browser and, if provided, reopening the banner through the appropriate link/button.

5.2 Through browser settings

The user can also manage or disable cookies directly from the settings of their browser, for example:
- total or selective blocking of cookies;
- deletion of cookies already installed.
Disabling technical or functionality cookies could compromise the proper functioning of the website or some of its sections.
Transfer of data to countries outside the EU

Some third-party providers (e.g. Google, Meta) are based or locate their servers outside the European Economic Area (EEA). Data that may be collected through cookies may therefore be transferred to such countries.

When the provider is certified under the EU-US Data Privacy Framework, the transfer of data to the United States takes place on the basis of the adequacy decision adopted by the European Commission pursuant to Article 45 GDPR.

In the absence of adequacy decisions, the transfer takes place pursuant to Articles 46 et seq. GDPR, on the basis of Standard Contractual Clauses approved by the European Commission and, where necessary, additional supplementary security measures, in order to ensure a level of protection of personal data substantially equivalent to that provided in Europe.

For further information, please refer to the privacy notices of the individual providers (Google, Meta/Facebook/Instagram, etc.).
User rights

As a data subject, the user may exercise the rights provided for by Articles 15-22 of the GDPR, including:
- the right to access personal data;
- the right to rectification or updating;
- the right to erasure ("right to be forgotten"), where applicable;
- the right to restriction of processing;
- the right to object to processing based on legitimate interest;
- the right to data portability (where applicable);
- the right to withdraw consent given, without affecting the lawfulness of processing based on consent before its withdrawal;
- the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
Requests may be addressed to the Data Controller using the contact details indicated in paragraph 1.

Further details are available in the Privacy Policy of the website.
Updates to the Cookie Policy

This Cookie Policy may be subject to changes or updates (for example, in the event of regulatory changes, changes to the technologies used or third-party services integrated into the website).

Users are therefore invited to consult this page periodically. In the event of significant changes, the cookie-choice banner may be displayed again and/or additional information may be provided.