This Cookie Policy complements our Privacy Policy and describes the cookies and equivalent browser storage technologies (localStorage, sessionStorage) used on borgotaurino.it by Relais Borgo Taurino. It is drafted in accordance with the Italian Data Protection Authority's Guidelines of 10 June 2021 and the EU Regulation 2016/679 (GDPR).

1. Definitions

Cookies are small text files that a website stores on the user's device and reads back on subsequent visits. They are used for many purposes: authentication, preference storage, aggregated analysis of user behaviour, advertising profiling.

We also rely on equivalent technologies such as localStorage and sessionStorage (browser-level storage with purposes similar to cookies). Unless otherwise stated, what this policy says about cookies also applies to these technologies.

2. Legal basis

Pursuant to Article 122 of the Italian Privacy Code, strictly necessary cookies do not require consent. All other cookies (non-anonymous analytics, profiling, marketing) require your explicit, informed and specific consent, collected via the banner shown on your first visit.

3. Cookies and storage technologies we use

3.1 Strictly necessary — always active

Essential for the site to work and to keep your session secure. No consent required.

Name	Type	Domain	Duration	Purpose
cc_consent_v1	localStorage	borgotaurino.it	6 months	Stores your cookie preferences (accepted categories, date, version).
cf_clearance	HTTP cookie	borgotaurino.it	30 days	Cloudflare: attests that the anti-bot check (Turnstile) has been cleared so you're not challenged again.
__cf_bm	HTTP cookie	borgotaurino.it	30 minutes	Cloudflare Bot Management: distinguishes human traffic from automated traffic at the edge.

3.2 Measurement & analytics — opt-in

Loaded only after your explicit consent via the banner (category "Analytics cookies"). They help us understand, in aggregated and pseudonymised form, how the site is used so we can improve the experience.

We use Google Analytics 4 (data controller Google Ireland Ltd.) orchestrated via Google Tag Manager. IP addresses are pseudonymised, no directly identifying data is collected, and no personal data is shared with third parties for commercial purposes. GA4 data retention is set to 14 months.

Name	Domain	Duration	Purpose
_ga	borgotaurino.it	2 years	Google Analytics 4: anonymous visitor identifier.
_ga_XXXXXXXXXX	borgotaurino.it	2 years	Google Analytics 4: session state and duration (placeholder for the specific property ID).
_gid	borgotaurino.it	24 hours	Google Analytics: distinguishes users (short-retention, legacy compatibility).
_gat	borgotaurino.it	1 minute	Google Analytics: rate-limits requests to avoid overload.

3.3 Marketing & profiling — opt-in, pre-configured but not active

The "Marketing cookies" category is pre-configured in our consent banner for future activation of advertising tools. At present, no marketing or profiling cookie is set: none of the identifiers listed below is currently issued. If we activate them in the future, this page will be updated and a new consent will be requested.

Tools we may activate in the future (subject to your fresh acceptance):

Meta Pixel + Conversions API (Meta Platforms Ireland Ltd.) — conversion measurement on Facebook and Instagram campaigns. Typical cookies: _fbp (90 days), _fbc (90 days).
Google Ads Conversion Tracking (Google Ireland Ltd.) — conversion measurement on Google campaigns. Typical cookies: _gcl_au (90 days), _gcl_aw (90 days), _gcl_dc (90 days).

4. Google Consent Mode v2

We implement Google Consent Mode v2 to make sure no data is sent to Google until your explicit consent. On your first visit all consent signals (analytics_storage, ad_storage, ad_user_data, ad_personalization, personalization_storage) are set to denied. If you accept the analytics category, only analytics_storage turns granted; if you also accept marketing, the other signals follow. Without consent, Google can only receive anonymous aggregated pings with no identifiers.

5. Managing and withdrawing consent

You can change your choices at any time by clicking "Manage cookies" in the footer of every page. Disabling a category automatically deletes the related cookies from your browser when you save the preferences.

Alternatively, you can block or delete cookies through your browser settings (Chrome, Firefox, Safari, Edge, etc.) or install dedicated extensions. Please note that disabling strictly necessary cookies may prevent the site from functioning correctly.

6. Extra-EEA transfers

Google services (Analytics 4, Tag Manager, and any future activation of Ads) may involve transfers of pseudonymised data to the United States. These transfers are performed under the EU-US Data Privacy Framework (European Commission adequacy decision of 10 July 2023) and, subordinately, under the Standard Contractual Clauses pursuant to Decision 2021/914/EU.

The same principle will apply, once activated, to the Meta Pixel for transfers to Meta Platforms Inc.

7. Your rights and contact

To exercise your rights under Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) please write to info@borgotaurino.it. You also have the right to lodge a complaint with the Italian Data Protection Authority.

For further details about how we process your personal data see our Privacy Policy.