Privacy, cookies
and terms of use.

Privacy and cookie notice

Last updated: 10 November 2026.

This notice describes how the personal data of people who visit grottepalinuro.it, send an enquiry or use the website’s features are processed, in accordance with Articles 12 and 13 of Regulation (EU) 2016/679 (GDPR). The boat tour booking terms are set out in a separate section at the bottom of this page.

Data controller

The data controller is Lido Marechiaro, VAT number 00370078883, based at Località Marinella SNC, Centola (SA), Italy. For enquiries about personal data: marechiarolido@gmail.com. Contact numbers: boat tours +39 379 243 9813; beach services +39 338 596 9929.

Data processed and purposes

Browsing and security. The systems used to provide the website process technical data such as IP addresses, request dates and times, requested resources, browser and device information, and error logs. These are used to display the pages, keep them working and prevent misuse. The legal basis is the controller’s legitimate interest in the availability and security of the website, under Article 6(1)(f) GDPR. Strictly necessary technologies operate without cookie consent.

Contact enquiries. The WPForms contact form collects your full name, email address, optional telephone number, subject and message, together with your declaration concerning this notice. These data are used to respond to and handle your enquiry. For information about a possible purchase or booking, the legal basis is taking pre-contractual steps at your request under Article 6(1)(b) GDPR; for other communications, it is the legitimate interest in responding under Article 6(1)(f). Fields marked with * are required to send the form; your telephone number is optional. Do not include health data or other particularly sensitive information that is unnecessary for your enquiry. The form does not subscribe you to a newsletter.

Bookings and assistance. Data provided for a booking or related assistance are processed to manage the relationship and associated requirements under Article 6(1)(b) and (c) GDPR. The booking button opens booking.grottepalinuro.it: before completing a booking, please consult the information on data processing and payments provided by that service. This page mainly describes the information website and does not replace the specific information provided during the payment process.

Usage statistics. With your consent, Google Tag Manager and Google Analytics 4 are activated to measure website visits and interactions. The data processed may include online identifiers, pages visited, referral sources, browsing events, device information and approximate location. The legal basis is consent under Article 6(1)(a) GDPR. The container used is GTM-N8ZCWMDL and the Analytics tag identified is G-HCZQ58VGH3. The GTM identifier alone identifies the tag manager, not a separate Analytics property.

Embedded maps. Google Maps helps you locate the lido. The map is not requested automatically: it is loaded after you enable the “Functionality” category in your cookie preferences. Your browser then communicates with Google, transmitting technical data such as your IP address and browser information, and Google may read or set cookies according to its settings. The legal basis for this optional activation is consent under Article 6(1)(a). Alternatively, you can use the external directions link, which takes you directly to a Google service.

Form protection. The form uses Google reCAPTCHA to limit spam and misuse. This service may analyse technical browser and device data, IP addresses and interactions with the page to distinguish human use from automated requests. Its purpose is to protect the form, based on the legitimate interest in security under Article 6(1)(f). The following also apply: Google’s privacy policy and Google’s terms.

Cookies are small files stored on your device; other technologies, such as tags and identifiers, may perform similar functions. The banner lets you choose “Only necessary”, “Preferences” or “Accept all”. Optional services are not loaded before consent. Refusing maps and statistics does not prevent you from reading the pages or contacting the lido.

Strictly necessary. These include consent preferences and tools essential to the operation and protection of the website. TermsFeed stores your choice using cookies such as cookie_consent_level and cookie_consent_user_accepted and may associate an identifier with that choice. Preferences are configured to last 365 days unless deleted from your browser. Authentication cookies may also be used for authorised users accessing the WordPress administration area; ordinary visitors do not need them to read the website.

Functionality — Google Maps. This optional category is used for the embedded map. The cookies Google may use also depend on your browser, whether you are signed in to a Google account and the preferences you have already expressed to Google. Google’s cookie names and durations are described in its cookie documentation. Without consent, a placeholder remains visible with a link to preferences and an alternative external directions link.

Statistics — Google Analytics. In the preferences panel, this category is called “Tracking and performance cookies”. Typical GA4 cookies are _ga, which distinguishes browsers, and _ga_ followed by the identifier, which maintains session information. Google specifies a default expiry of 2 years; browsers and settings may limit this, and subsequent visits may update it. The lifetime of a cookie on your device is separate from data retention on Analytics servers. See the GA4 cookie documentation.

You can change or withdraw your choices at any time through Cookie settings, also available in the footer. Saving reloads the page and applies your new preferences. Withdrawal does not affect the lawfulness of processing already carried out; it stops subsequent optional loading. You can use your browser’s settings to delete cookies already stored. Deleting your preferences means you will be asked to choose again on your next visit.

Suppliers, recipients and external services

Data may be processed by the controller’s authorised staff and by suppliers providing hosting, maintenance, email, support and website tools, appointed as data processors where required by Article 28 GDPR. Data may also be disclosed to other parties and authorities where necessary to comply with legal obligations or protect rights.

WPForms is the component used for the contact form; enquiries are forwarded to marechiarolido@gmail.com through the configured email system. Google provides Analytics, Maps and reCAPTCHA; for services aimed at users in the European Economic Area, the entity identified by Google is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The roles and processing involved in Google services are described in their respective terms and privacy notices.

TermsFeed provides the consent management software: loading it involves requests to the supplier’s servers, together with the technical data necessary for communication. See theTermsFeed privacy policy.

Links to Facebook, Instagram, WhatsApp and external directions open third-party services. Sending a message through those services is your choice and involves the processing described in their privacy notices. You do not have to use these channels to contact the lido: you can choose the telephone or contact form instead.

Transfers outside the European Economic Area

Using international suppliers, particularly Google services, may involve processing outside the European Economic Area. Transfers must comply with Chapter V GDPR, through adequacy decisions applicable to the recipient or other recognised safeguards, such as standard contractual clauses, together with any necessary supplementary measures. Information about Google’s processing and transfer mechanisms is available in Google’s privacy policy and in the information for websites using Google services. You can ask the controller for further details about the applicable safeguards.

Data retention

Enquiries and correspondence are retained for the time needed to respond and handle the request. If they lead to a contractual relationship, relevant documentation is retained for the time needed to fulfil that relationship, meet legal obligations and protect rights within the applicable limitation periods. Information that is not relevant to those purposes must not be retained beyond that time.

Technical logs are retained for periods proportionate to operational and security needs; in the event of an incident, they may be retained for the time needed to investigate it. Consent cookies last 365 days, as stated above.

Detailed GA4 user and event data are retained for 2 months, according to the default setting used for this website. Resetting on new activity, if enabled, may update the identifier’s retention period; standard aggregated reports are not subject to the same setting. Google’s rules and the distinction between detailed data and aggregated reports are explained in the Analytics data retention documentation. Data processed independently by suppliers remain subject to their privacy notices.

Your rights

In the cases and within the limits set out in Articles 15–22 GDPR, you may request access to your data, rectification, erasure, restriction of processing and data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation and withdraw consent you have given. To exercise your rights, write to marechiarolido@gmail.com; the controller may ask for information necessary to verify your identity and will respond within the time limits set by the GDPR.

You may lodge a complaint with the Italian Data Protection Authority or the competent supervisory authority. Refusing optional services does not result in automated decisions producing legal effects or similarly significant effects on you.

Updates and references

This notice is updated when services or processing methods change. For the framework on consent to non-essential technologies, see the Italian Data Protection Authority’s guidelines on cookies and tracking. The date at the top identifies the published version.