Privacy notice
Last updated: November 4, 2026
Controller
The controller of personal data is Davide Teodor Tamas, Via Murari 2, 37067 Valeggio sul Mincio (VR), Italy, VAT number IT04774740239. For any request about personal data: [email protected].
Browsing and statistics
Visit statistics are measured in-house, without cookies or third-party analytics services. To tell one visit from another, a non-reversible code is computed from the IP address and browser type, combined with a random value that changes every day and is deleted after three days: from then on the code cannot be linked to a device or compared across days. The IP address is used only for this computation and to derive the country of origin, and is not stored. The addresses of the pages visited are kept without their parameters, except those naming the campaign a visit came from (utm_*, gclid, fbclid, ref). Visit details are deleted after 90 days.
Cookies
The site uses a single, strictly necessary cookie: it remembers the language of the last page read, so the main address opens that language on the next visit. There are no profiling or third-party cookies, so no consent is asked. Administrators who sign in to the restricted area keep their session in the browser's storage.
Reviews
Writing a review takes a rating, a text, a name and an email address. The rating, text and name are published after moderation. The email address is used only to send the confirmation link: it is not published and is deleted when the link is used or expires, leaving only an encrypted fingerprint that prevents several reviews from the same address for the same facility. Reviews never confirmed are deleted after 7 days. An encrypted fingerprint of the IP address, used to spot bursts of submissions, is deleted after 90 days. Legal basis: the author's request to publish (Art. 6(1)(b) GDPR) and the legitimate interest in keeping reviews genuine (Art. 6(1)(f)).
Requests about listings
The form to correct, remove or claim a listing collects a name, an email address and a message, used only to handle and answer the request. Legal basis: the request of the person writing (Art. 6(1)(b) GDPR).
Facility data
Listings show business data (name, address, phone, email, website, opening hours, services) that the businesses publish on their own websites and that is taken from there; the source page of each item is kept. Where a business is a natural person, this may be personal data: it is processed on the legitimate interest in letting the public know which services are available (Art. 6(1)(f) GDPR). Whoever runs a facility can ask at any time for it to be corrected or removed, through the form on the listing or by writing to [email protected].
Form protection
The review and request forms are protected by Cloudflare Turnstile, a service of Cloudflare, Inc., which processes the IP address and some technical characteristics of the browser to tell people from automated programs, for security only. The site receives only the result of the check.
Maps
Maps load only when opened. The map images come from OpenStreetMap's servers, which receive the browser's IP address as with any image downloaded.
Providers and transfers
Data is processed with the help of these providers, acting as processors: Hetzner Online GmbH (server in Germany), Supabase (database in the European Union), Cloudflare (site delivery, security and Turnstile), Resend (sending confirmation and sign-in emails). Cloudflare and Resend are based in the United States: transfers rely on the EU-U.S. Data Privacy Framework or on standard contractual clauses. Data is not sold or passed to third parties for marketing.
Your rights
Under Articles 15 to 22 GDPR you can ask for access to your data, its rectification or erasure, restriction of processing and portability, and object to processing based on legitimate interest, by writing to [email protected]. You can also lodge a complaint with a supervisory authority, in particular in your country of residence; in Italy this is the Garante per la protezione dei dati personali, in the UK the Information Commissioner's Office.