Privacy Policy

This privacy policy explains how Chianti Guide collects, uses, and protects your personal data when you visit chianti.guide. We are committed to handling your data with transparency and in full compliance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

1. Data controller

Ricardo Lourenço, operating as Chianti Guide — [email protected] — chianti.guide

As data controller, Ricardo Lourenço determines how and why your personal data is processed. For any data protection enquiry, please write to [email protected] and we will respond within 30 days.

2. What data we collect and why

2.1 Analytics cookies — only with your consent

If you choose to accept analytics cookies, we use Google Analytics 4 to collect data about how visitors use this site. This helps us understand which content is most useful so we can improve the guide over time. Data collected through Google Analytics is not used for advertising or profiling. It includes the pages visited and time spent on each; your general location (country or region — not your precise location); device type, screen resolution and browser; and the website that referred you here.

Legal basis: consent — Article 6(1)(a) GDPR. You may withdraw your consent at any time (see section 7).

2.2 Cloudflare Web Analytics — cookieless

We also use Cloudflare Web Analytics, a privacy-first measurement service provided by Cloudflare, Inc. It sets no cookies, uses no local storage and does not fingerprint visitors. It counts page views, referring sites, country and browser or device type in aggregate only, without collecting personal data or following you across other websites.

Legal basis: legitimate interest — Article 6(1)(f) GDPR, in understanding in aggregate how the guide is used. Because it collects no personal data and stores nothing on your device, it does not require your consent.

2.3 Hosting

This site is hosted on Cloudflare Pages. To deliver pages to you and protect the site against abuse, Cloudflare processes the technical data your browser sends with every request — such as your IP address, the page requested, the date and time, and your browser’s user agent. Cloudflare acts as our processor and handles this data under its own data processing terms.

Legal basis: legitimate interest — Article 6(1)(f) GDPR, in operating a secure and reliable website.

2.4 Fonts

All typefaces used on this site are self-hosted on our own domain. No request is made to Google Fonts or any other external font service.

2.5 Contact form

When you use the contact form, we collect your name, email address, and the content of your message. This data is transmitted via Web3Forms (web3forms.com) and used solely to respond to your enquiry. It is not shared with any third party beyond Web3Forms’ processing role.

Legal basis: legitimate interest — Article 6(1)(f) GDPR. Data is retained for no longer than 12 months after the enquiry is resolved, and deleted immediately upon request.

3. Cookies

This site does not place any cookies without your explicit consent. Your consent choice itself is stored locally in your browser so that we do not ask again; it is not sent to us. If you accept analytics cookies, Google Analytics sets the following cookies on your device:

_ga — distinguishes unique users by assigning a randomly generated identifier. Duration: 2 years.

_ga_SSHB1MN8XZ — keeps session state for Google Analytics 4. Duration: 2 years.

No advertising or other tracking cookies are set by Chianti Guide. If you decline analytics, no cookies are placed on your device by this site.

4. Third-party services

Google Analytics 4 (Google Ireland Ltd / Google LLC) — traffic measurement, only with your consent. Privacy policy: policies.google.com/privacy

Cloudflare (Cloudflare, Inc.) — website hosting (Cloudflare Pages) and cookieless Web Analytics. Privacy policy: cloudflare.com/privacypolicy

Web3Forms — contact form processing; receives your name, email and message when you use the form. Privacy policy: web3forms.com/privacy

Stay22 (Stay22 Inc., Canada) — hotel “Compare prices” links. When you click one, you leave this site for Stay22, which forwards you to a booking site (such as Booking.com or Expedia) and may set its own cookies there to attribute a booking. Privacy policy: stay22.com/privacy

GetYourGuide (GetYourGuide Deutschland GmbH) — links to tours, tastings and classes. When you click one, GetYourGuide records our partner ID with your visit to attribute a booking. Privacy policy: getyourguide.com/privacy_policy

We do not sell, share, or transfer your personal data to any other third parties. Some links are affiliate links (marked as such): if you book through them we may earn a commission, at no extra cost to you. No business pays to be listed, and these links load no script or cookie on this site; they take effect only once you click and leave. All other links to wineries, restaurants and hotels lead directly to their own websites, which are independent businesses — their own privacy policies apply when you visit them.

5. International data transfers

Google LLC and Cloudflare, Inc. are headquartered in the United States. Where personal data is transferred to the United States, the transfer is based on the EU–US Data Privacy Framework, under which both companies are certified, and on the European Commission’s Standard Contractual Clauses, which provide appropriate safeguards under the GDPR.

6. Your rights under the GDPR

As a data subject under the GDPR, you have the following rights. To exercise any of them, contact us at [email protected] — we will respond within 30 days.

Right of access (Art. 15) — request a copy of the personal data we hold about you.

Right to rectification (Art. 16) — ask us to correct inaccurate data.

Right to erasure (Art. 17) — request deletion of your personal data (“right to be forgotten”).

Right to restriction of processing (Art. 18) — ask us to limit how we use your data.

Right to data portability (Art. 20) — receive your data in a portable, machine-readable format.

Right to object (Art. 21) — object to processing carried out on the basis of legitimate interest.

Right to withdraw consent (Art. 7(3)) — withdraw your analytics consent at any time, without affecting the lawfulness of any processing that took place before withdrawal.

7. Managing your cookie preferences

You can change your analytics cookie choice at any time. The button below resets your preference and shows the consent prompt again.

You can also manage or delete cookies directly through your browser settings; for guidance, visit aboutcookies.org. Note that clearing your browser’s site data will reset your preference here too.

8. Data retention

Google Analytics 4 keeps user-level and event-level data for the retention period set in our account, at most 14 months; aggregated reports are not affected. If you withdraw your consent, no new analytics data is collected from that point; you may request deletion of previously collected data by writing to [email protected]. Cloudflare Web Analytics stores no personal data. Contact form messages are kept as described in section 2.5.

9. Supervisory authority

If you are unhappy with how we handle your personal data, you have the right to lodge a complaint with the Italian data protection authority:

Garante per la protezione dei dati personali — Piazza Venezia, 11 — 00187 Roma, Italia — [email protected] — garanteprivacy.it

We would, of course, appreciate the opportunity to address any concerns directly before a formal complaint is made — please reach out to us first.

10. Changes to this policy

We may update this policy from time to time as the site evolves. The date at the top of this page always reflects the most recent revision. Where changes are material, we will make this prominent.

11. Contact

For any questions about this privacy policy or how we handle your personal data: Ricardo Lourenço, data controller, Chianti Guide — [email protected]