Skip to main content
Cookie

Cookie policy

Last updated: 25 July 2026. Revised on 27 September 2026.

The website uses necessary technical cookies and, only after the user has given consent, Google Analytics 4 to obtain page-usage statistics. If consent is not given or is refused, the Analytics tag is not loaded and no data is sent to Google Analytics. The optional Google Map is subject to a separate choice on the Contact page.

1. What cookies are

Cookies are small pieces of information that a website can store in the browser. Technical cookies enable browsing, delivery of a requested service or storage of a choice and do not require consent. The analytics cookies described below are optional and are installed only after consent.

2. Technical cookies

Name Category Purpose Duration
go4_cookie_consent First-party technical cookie Stores the version and the user's acceptance or refusal of analytics cookies. It does not contain a user identifier. 6 months from the date of the choice.
ASP.NET_SessionId First-party technical cookie Maintains the application session required by the booking page and the one-time token that prevents duplicate submissions. Session cookie; it expires when the browser session closes, without prejudice to the earlier server-side expiry.

The session cookie does not contain data entered in the form and is not used to track browsing on other websites.

3. Google Analytics 4

With the user's consent, the website loads Google Analytics 4, a service provided by Google Ireland Limited, using measurement ID G-XFSQX89WMX. Its purpose is to understand statistically which pages are viewed and how the website is used. The legal basis is consent under Article 6(1)(a) of the GDPR.

Name Category Purpose Configured maximum duration
_ga Optional first-party analytics cookie Uses a pseudonymous identifier to distinguish browsers visiting the website. 6 months, without automatic renewal on each visit.
_ga_* Optional first-party analytics cookie Maintains the state of the GA4 measurement session. 6 months, without automatic renewal on each visit.

Only automatic events relating to page views, scrolling, outbound clicks and downloads are enabled. Google Signals, advertising personalisation, user-provided data, granular location and device data, internal search, form interactions and video interactions are disabled. The website does not send booking or payment data to Google.

In the initial page-view event, the page address and any referrer are stripped of query strings and fragments. Automatic outbound-click and download events may include the public address of the selected link. The payment-return pages PagamentoSuccess.aspx and PagamentoCancel.aspx are excluded entirely from Analytics. User- and event-level data in the Analytics account is configured for a two-month retention period without reset on new activity; standard aggregated reports may follow different retention periods.

Google may process data outside the European Economic Area in accordance with the mechanisms and safeguards described in its policies. You can consult Google's privacy policy and information about Google Analytics cookies .

4. Choice, refusal and withdrawal

On the first visit, the banner allows you to accept, reject or open the preferences. Closing the banner is equivalent to refusal. If you refuse, the website continues to function and Analytics is not loaded.

You can change your choice at any time using the following button or the permanent link in the footer. Withdrawal deletes Analytics cookies accessible to the website from the browser and blocks future measurement; it does not erase data lawfully transmitted before withdrawal.

5. Technical resources supplied by external providers

To display fonts and icons, the pages request static resources from Google Fonts, cdnjs/Cloudflare and jsDelivr. The connection transmits ordinary technical request data, such as IP address, browser type, date and time, required to deliver and protect the resource. Analytics consent does not control these resources.

On the Contact page, the Google Map is not loaded automatically. Only after you press “Load the map” does the browser contact Google, which may use cookies or other identifiers in accordance with its own policy. The choice applies to that single load and remains separate from consent to Google Analytics.

6. Payment through Stripe

When you choose to pay by card, you are redirected to the secure page managed by Stripe. From that point, Stripe may use its own cookies and technologies for operation, security and fraud prevention. The related choices are managed within the Stripe environment.

Read Stripe's cookie policy

7. Browser controls

You can also delete or block cookies using your browser settings. Disabling the technical session cookie may prevent the online booking process from working correctly.

8. Data controller, rights and contact details

The data controller is I-TAF s.a.s. di Roberto Taffelli & C., registered office at Corso Felice Cavallotti 19, 28100 Novara (NO), VAT no. and Tax ID 02528830033, REA NO-241937. Requests may be sent by certified email to i-taf.sas@legalmail.it or info@areasostanovara.com. Further contact details and information on exercising your rights are set out in the personal data privacy notice. You may also lodge a complaint with the Italian Data Protection Authority.

For further information, please consult the Italian Data Protection Authority's cookie FAQ .

9. Updates

This page is updated whenever cookies, technologies, providers or purposes change. After publication, the actual behaviour of the domain, hosting environment and any external security services must also be checked.