Privacy policy

Last updated: 6 October 2026

This page explains what data the website acasamiacivitavecchia.it processes and how, under Article 13 of Regulation (EU) 2016/679 (GDPR).

Who is the controller

Le 3 lettere S.R.L.
Via XVI Settembre 2-4, 00053 Civitavecchia (RM), Italy
VAT number and tax code 18241231002
Email: info@acasamiacivitavecchia.it
Certified email (PEC): le3lettere@pec.it

In short

• The website does not use cookies and writes nothing to your browser (no localStorage or sessionStorage).
• Statistics are aggregated only: we count how many times the site is opened, not who you are. There is no code or identifier for visitors.
• If your browser has Do Not Track or Global Privacy Control turned on, the site counts nothing.
• Fonts, images and the map are hosted on the site itself: no requests to external services until you click a link.

What data is processed

Anonymous usage statistics

When you open the site we record, in aggregated form: the visit and the time (Rome time zone), the page language, the type of device (phone, tablet or computer, inferred from the screen width), a general source (for example search, social, maps or direct access), any campaign named in the address, and whether the venue was open or closed at that moment.

We also record which buttons are tapped (call, WhatsApp, directions, reviews, Glovo, Instagram, Facebook), in which section of the page, which sections are reached, and whether the day and review cards are scrolled.

Everything ends up in daily counters that are not linked to a person. We do not store the IP address in the statistics, we do not create codes or device fingerprints, and we do not use cookies. The counters are kept for 400 days.

Purpose: to understand how the site is used and to improve it. Legal basis: the controller’s legitimate interest (Article 6(1)(f) GDPR).

Technical hosting data

To serve the site, the hosting provider (Vercel) records technical data about each request, including the IP address, date and time, the page requested and the browser type. Its protection system limits repeated requests: to do so it uses the IP address and may temporarily reject requests from an address that exceeds the limit.

Purpose: to run the site and protect it from abuse. Legal basis: legitimate interest (Article 6(1)(f) GDPR). Retention: for the period set by the provider.

When you contact us

If you call, write on WhatsApp or send an email, we process the data you give us (for example your phone number, name and message) to reply to you or to organise an event. Legal basis: your request and pre-contractual measures (Article 6(1)(b) GDPR). We keep it for as long as needed to handle the request and for legal obligations.

Third-party services

The site contains links to Google Maps, Apple Maps, Google (reviews), Glovo, Instagram, Facebook and WhatsApp. Until you click, our site sends no data to these services. If you click, you leave the site and the privacy policy of the chosen service applies. The map on the page is an image hosted on the site (© OpenStreetMap contributors).

Who processes data on our behalf

• Vercel Inc., based in the United States: hosting and content delivery network. The site’s functions run in the European Union (Frankfurt).
• Upstash, Inc., based in the United States: storage of the aggregated counters, on servers in Frankfurt (Germany).
• Aruba S.p.A., Italy: domain name and email.

Because two providers are US companies, technical data may also be processed in the United States, with the safeguards required by the GDPR (standard contractual clauses or an adequacy decision), as stated in the data processing agreements the providers publish. Data is not disclosed or sold.

Your rights

You can ask for access, rectification, erasure, restriction or portability of your data, or object to processing (Articles 15-22 GDPR). Write to:
info@acasamiacivitavecchia.it
You can also lodge a complaint with the Italian data protection authority, the Garante (www.garanteprivacy.it). The statistics counters are aggregated and cannot be traced back to a person.

Other information

There is no automated decision-making or profiling. Browsing the site does not require you to provide personal data. We may update this policy: the date at the top shows the latest version.