Privacy & Cookie Policy

Last updated: 11 August 2025

1. Who we are

This Privacy & Cookie Policy explains how CaseMaggi (“we”, “us”, “our”) processes personal data and uses cookies and similar technologies on casemaggi.com.

We are based in Italy and process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Italian data protection law.

Our contact details are in section 11 below.

2. What personal data we process

We may process the following categories of personal data:

Contact information: when you contact us via forms, email, or booking widgets.
Booking and payment details: when you make a reservation through our booking partner Smoobu.
Technical data: IP address, browser type, device type, operating system, and similar data collected through our security and performance systems.
Usage data: pages visited, time spent, interactions, and preferences (where consent is given).
Social media interactions: if you engage with embedded content (e.g., Instagram posts).

We do not sell your personal information to third parties.

3. Legal bases for processing

We process your personal data on the following legal bases:

Performance of a contract: to handle your booking or enquiry.
Compliance with legal obligations: for accounting, tax, and regulatory purposes.
Legitimate interests: to maintain site security, prevent fraud, and improve services (strictly necessary cookies only).
Consent: for analytics, functional features (e.g., maps, social media embeds), and marketing-related cookies.

You can withdraw your consent at any time via the Cookie settings link available on every page.

4. How we collect personal data

We collect personal data directly from you when you contact us or make a booking, and automatically through cookies and similar technologies (see section 7).

5. Sharing your personal data

We may share data with:

Service providers: hosting (SiteGround), booking (Smoobu), analytics (Google), content delivery (Instagram), security (Wordfence, SiteGround Security Optimizer).
Payment processors: if you pay for bookings through Smoobu’s payment partners.
Authorities: if required by law.

These providers may process your data outside the EU; when they do, we ensure an adequate level of protection (e.g., through EU Standard Contractual Clauses).

6. How long we keep your data

We retain personal data only as long as necessary for the purposes collected:

Booking and contact records: up to 6 years (for legal compliance).
Analytics data: as per cookie lifetime (see section 7).
Security logs: typically 90 days, unless needed for investigation.

7. Cookies and similar technologies

7.1 What are cookies?

Cookies are small files stored on your device by your browser. Similar technologies include local storage, tracking pixels, and CAPTCHA tools.

7.2 How we use cookies

We use cookies for:

Strictly necessary purposes (always active): to run our site, provide security, and manage consent.
Functional purposes: to enable features like language choice, booking widgets, and map embeds.
Analytics: to understand how our site is used and improve it.
Marketing: to measure and potentially personalise content in third-party embeds.

Non-essential cookies are only set if you give your consent.

7.3 Cookie categories and examples

A. Strictly necessary (no consent required)

Security & firewall: Wordfence, SiteGround Security Optimizer.
Spam protection: Akismet.
Consent management: CookieYes GDPR Cookie Consent, WP Consent API (stores your choices).
Hosting performance: SiteGround caching and load balancing.

B. Functional (consent required)

Language: GTranslate (googtrans) remembers your chosen language.
Booking widgets: Smoobu embeds (smoobu.com) allow checking availability and making reservations.
Maps: Google Maps embeds provide interactive maps.
Social embeds: Instagram posts, which may also load cookies from Facebook.
reCAPTCHA: Google reCAPTCHA protects forms from spam and abuse.

C. Analytics (consent required)

Google Analytics 4 (GA4) via Site Kit — uses _ga, _gid, _ga_* to distinguish users and sessions; configured with Consent Mode v2 so no personal tracking occurs without consent.
Jetpack Stats (Automattic) — anonymised site statistics.

D. Marketing (consent required)

Instagram embeds and Google Maps may allow their providers to use data for personalised advertising on their own platforms.

7.4 How to manage cookies

You can manage your preferences via the Cookie settings link at any time. You can also block cookies in your browser settings, but some features may not work.

8. Your rights under GDPR

You have the right to:

Access your personal data.
Request correction or deletion.
Withdraw consent at any time.
Restrict or object to processing.
Request a copy of your data in a portable format.
Lodge a complaint with the Garante per la protezione dei dati personali (www.garanteprivacy.it).