This page contains the extended information with the methods of processing personal data according to European legislation (EU Regulation 2016/679). According to the law, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights. This Privacy Policy and Cookie Policy only concerns this website which can be reached at the URL www.cortesanfrancesco.it. This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the site but refer to resources external to the site's domain.
The Data Controller of the collected data is Mr. Sabino Rubini
Email address of the Data Controller: info@cortesanfrancesco.it
For the language cookie and for security via reCAPTCHA (Art. 6, para. 1, letter f of the GDPR).
For sending data via the contact form, expressed by clicking the mandatory "I accept the Privacy Policy" checkbox (Art. 6, para. 1, letter a of the GDPR).
We use a technical cookie to store your language selection. This is necessary to display the site correctly and does not require your prior consent.
We collect the data entered in the form (name, email, subject, message) exclusively to respond to your requests. The data submitted will be used solely to contact you using the contact information provided in the contact form to follow up on the requests contained in the message sent. This data is retained exclusively for customer support purposes and is never used for marketing purposes or shared with third parties.
The site is protected by Google reCAPTCHA to prevent automated spam submissions (bots). This service analyzes your behavior on the site and your IP address.
As regards Cookies, please refer to our Cookies Policy
The data sent via the contact forms are forwarded and stored in our email inboxes managed by the providers Aruba S.p.A. and Google (Gmail).
• Web hosting (Aruba S.p.A. - Via San Clemente, 53 - 24036 Ponte San Pietro (BG) - ITALY VAT IT01573850516), is appointed data processor, processing the data on behalf of the owner. Aruba S.p.A. is in Space European Economic and acts in accordance with European standards (privacy policy of Aruba S.p.A.).
• Google Ireland Limited is appointed data processor, processing data on behalf of the owner (Gmail).
If data is transferred outside the European Economic Area (USA), this is done in accordance with the Data Privacy Framework and the standard contractual clauses.
Some data may be transferred outside the European Union (e.g., via Google services).
Such transfers are carried out in compliance with the guarantees provided by the GDPR. (Google privacy policy)
• Storage times
The data will be retained for the time strictly necessary to manage your request and, in any case, for no longer than 24 months from the last contact, unless legally required.
The data will not be disclosed or sold to third parties. In addition to the Data Controller, authorized parties involved in the organization of the site (administrative and technical staff) or external providers appointed, if necessary, as Data Processors (such as the email service providers mentioned above) may have access to the data.
The data collected by the site are processed at the headquarters of the Data Controller, and at the web hosting datacenter. Web hosting (Aruba S.p.A. - Via San Clemente, 53 - 24036 Ponte San Pietro (BG) - ITALY VAT IT01573850516),
which is responsible for data processing, processing the data on behalf of the owner, is located in the European Economic Area and acts in accordance with European standards. Our hosting provider Aruba S.p.A joins
to the EU/US “Privacy Shield”, ensuring data is stored securely and GDPR compliant. For more information on Aruba S.p.A.'s privacy policy, see here: Aruba Privacy Policy.
Some data may be transferred outside the European Union (e.g. via Google services).
The treatment will have a duration no longer than that necessary for the purposes for which the data were collected, or to allow the exchange of communications between the applicant and the Data Controller. The duration of cookies depends on their nature: session cookies expire when the user closes the browser; persistent cookies have typical expiration dates which, barring particular exceptions, they do not exceed the 12 months.
The optional, explicit and voluntary sending of personal data - also by e-mail - to the addresses indicated on this site entails the subsequent and necessary acquisition of the sender's address - as well as of any other data included in the message - in order to respond to requests. The user is free to provide personal data and failure to provide it may make it impossible to be contacted. No data is communicated or disseminated, except to perform the requested service. The user is free to provide his personal data. Failure to provide such data may make it impossible to obtain what has been requested.
Pursuant to European Regulation 679/2016 (GDPR), the User can, according to the methods and within the limits established by current legislation, exercise the following rights:
This information is updated on 04/15/2026
