Last updated: 8 April 2026
This policy describes how personal data of users browsing apartmentincatania.com (hereinafter "the Site") is processed, in compliance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended by Legislative Decree 101/2018.
Data Controller
The Data Controller is Francesco Longhitano, a natural person residing in Bologna, Italy. Contact email: apartmentincatania@gmail.com.
Types of data processed
The Site collects and processes the following categories of personal data:
- Browsing data: IP address (anonymised), browser type, operating system, pages visited, date and time of visit, referring URL. This data is collected in aggregate form and used solely for statistical purposes.
- Technical cookies: necessary for the proper functioning of the Site (session, language preferences, consent management). These do not require consent.
- Third-party analytics cookies: with consent, the Site uses Google Analytics 4 (provided by Google Ireland Limited) configured with IP anonymisation, to collect aggregate statistics on Site usage.
- Voluntarily provided data: any data entered by the user in contact forms, comments, or newsletter subscriptions (currently not present on the Site).
Purposes and legal basis of processing
- Service provision (technical cookies): legal basis Article 6(1)(f) GDPR (legitimate interest of the Controller in ensuring the Site functions properly).
- Statistics and traffic analysis (Google Analytics 4): legal basis Article 6(1)(a) GDPR (data subject consent, given via the consent banner).
- Compliance with legal obligations: legal basis Article 6(1)(c) GDPR.
Data recipients
Data may be disclosed to the following recipients, appointed as Data Processors pursuant to Article 28 GDPR where required:
- Aruba S.p.A. — Site hosting provider (servers located in Italy / EU).
- Google Ireland Limited — provider of the Google Analytics 4 service. Google may transfer data to the United States in compliance with the EU-US Data Privacy Framework (European Commission Adequacy Decision of 10 July 2023).
- Automattic Inc. — provider of the Akismet anti-spam service (if activated).
Extra-EU data transfers
Some of the services used by the Site (Google Analytics 4) involve the transfer of personal data to the United States. Such transfer occurs on the basis of the EU-US Data Privacy Framework, to which Google LLC has adhered, and which guarantees a level of protection equivalent to that provided by the GDPR.
Retention period
- Browsing data and server logs: maximum 30 days (except where required for criminal investigations).
- Google Analytics 4 data: 2 months (minimum GDPR-friendly setting).
- Consent records (managed by Complianz): 12 months.
Data subject rights
Under Articles 15-22 GDPR, the user has the right to:
- access their personal data;
- obtain rectification or erasure of data;
- obtain restriction of processing;
- object to processing;
- receive their data in a structured format (portability);
- withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
- lodge a complaint with the supervisory authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it).
To exercise these rights, simply send a request to apartmentincatania@gmail.com.
Cookies
For detailed information about the cookies used by the Site, please refer to the Cookie Policy.
Changes to this policy
The Controller reserves the right to modify this policy at any time. The updated version will always be published on this page, showing the date of the last update. Users are invited to consult it periodically.
Competent court
For any dispute relating to the processing of personal data, the Court of Bologna shall have jurisdiction, without prejudice to any other mandatory forum provided by law.