On this page
1. Data controller
The controller of personal data collected through the website lartedelrisotto.it (the "Site") is the editorial project "The Art of Risotto" / "L'Arte del Risotto", reachable at privacy@lartedelrisotto.it.
2. Data we collect
The Site collects the following data:
- Navigation data: IP address, browser type, operating system, pages visited, visit duration, traffic source. Collected anonymously/pseudonymously via Google Analytics 4.
- Cookies and identifiers: see Section 5 and our dedicated Cookie Policy.
- Voluntarily submitted data: if you email us, we collect the data you provide directly (email address and message content).
The Site does not require registration, does not collect name, surname, date of birth or other direct identifiers.
3. Legal basis
The processing of your data is based on:
- Consent (art. 6.1.a GDPR): for non-essential analytical and advertising cookies, collected through the banner on first visit.
- Legitimate interest (art. 6.1.f GDPR): for technical cookies necessary for site operation and security.
- Legal obligations: log retention for security purposes.
4. Purposes of processing
Data is processed to:
- Allow you to use the Site and its content
- Analyze traffic and improve user experience
- Display relevant advertising (Google AdSense)
- Comply with legal obligations
- Ensure Site security
5. Cookies and similar technologies
We use technical cookies (always on), analytical cookies (Google Analytics) and advertising cookies (Google AdSense). Non-strictly necessary cookies require your explicit consent, collected via the banner on first visit.
You can change your preferences at any time using the "Cookie settings" link in the footer of every page.
For the complete details, see our Cookie Policy.
6. Third-party services
The Site uses the following third-party services:
- Google Analytics 4 (Google Ireland Limited) — Navigation statistics with IP anonymization. Extra-EU data transfer subject to standard contractual clauses. Google Privacy Policy.
- Google AdSense (Google Ireland Limited) — Personalized or non-personalized advertising depending on consent. Ads info.
- Vercel (Vercel Inc., USA) — Site hosting. Access logs kept for security purposes. Vercel Privacy Policy.
- Amazon (affiliate links) — Some pages contain Amazon affiliate links. If you purchase through these links, we receive a small commission at no extra cost to you. Amazon Privacy Policy.
- Buy Me a Coffee — If you decide to support us via donation, you'll be redirected to Buy Me a Coffee. BMaC Privacy Policy.
7. Data retention
Data is kept only as long as necessary for the purposes for which it is collected:
- Google Analytics data: 14 months (default setting)
- Technical cookies: session duration or up to 12 months
- Analytical and advertising cookies: up to 24 months
- Security logs: 6 months
- Email communications: as long as needed to handle the request
8. Your rights
As a data subject, under articles 15-22 GDPR you have the right to:
- Access: confirm processing and access your data
- Rectification: correct inaccurate data
- Erasure ("right to be forgotten"): request deletion of your data
- Restriction: limit processing
- Portability: receive your data in a readable format
- Objection: object to processing on legitimate grounds
- Withdraw consent: at any time, without affecting the lawfulness of processing based on prior consent
- Complaint: file a complaint with the Italian Data Protection Authority or your local DPA
9. Security
The Site uses HTTPS with SSL/TLS certificate. We adopt reasonable technical and organizational measures to protect your data from unauthorized access, loss or alteration.
10. Changes to this Privacy Policy
We reserve the right to amend this Privacy Policy. Changes will be published on this page with the date of last update. We invite you to consult it periodically.
11. Contact
For any question regarding the processing of your data: privacy@lartedelrisotto.it