Riviera Romagnola processes three types of personal data: technical data associated with viewing pages, data from internal visit statistics and data contained in incoming emails. The data controller is Lucio Bonini, a natural person, contactable at info@rivieraromagnola.net.
Viewing pages
Communication between browser and server involves transmitting technical information, including the IP address and requested resource. Hosting is provided by Register.it. Technical data are used to deliver pages, keep them functioning and manage service security, on the basis of the legitimate interest in the site's availability and protection.
The site contains no registration forms, newsletter subscriptions or advertising.
Visit statistics
A site script records visits to produce aggregate statistics: most-read pages, visit origins, devices and time spent viewing content. The script and archive are hosted on the Riviera Romagnola server, without external analytics services; the data are not combined with other data or used for advertising. Only the controller consults them, through a password-protected panel.
For each page opened, the following are recorded: the page address, including the text passage targeted by the incoming link when one is specified; the referring site; screen dimensions; browser language and type; operating system; reading time; and campaign parameters (utm_source, gclid, fbclid and similar) when present in the incoming link. The IP address is truncated before recording: the last block of IPv4 addresses becomes zero, and only the first 48 bits of IPv6 addresses remain. To count each day's visitors, the server derives a non-reversible code from the full IP address, browser and date, changing daily. The random identifier saved in the browser is described in the guide to cookies and local storage.
Country and city of origin are derived by sending the already truncated addresses to the ip-api.com geolocation service when processing the previous day's data. The service terms, accessed on 11 October 2026, state that requests are not recorded and that received data are discarded after the response.
Visit logs are compressed after 7 days and deleted after 90; daily archive data are also deleted after 90 days. The list of currently present visitors, with truncated address and browser, is cleared after 5 minutes. The random identifier remains in the archive with the dates of the first and last visits, without automatic expiry.
The legal basis is the controller's legitimate interest in understanding use of the guide to maintain its content, under article 6(1)(f) of the GDPR. Objections can be submitted through the contact given in the rights section; deleting the site's browser data removes the random identifier.
Emails sent to the site
Writing to the public contact address communicates the sender's address, message contents and any attachments. A link to the page and a description of the problem are sufficient for an editorial report. Sending health data or identity documents is unnecessary.
Incoming emails are retained for 24 months to handle enquiries and editorial reports. The legal basis is the legitimate interest in responding to correspondence and maintaining site content; for requests concerning a service or contract, the necessity of carrying out the data subject's request applies where relevant.
Fonts and weather forecasts
The Spectral and Roboto fonts used for headings and body text are hosted on the site's server: displaying them does not involve requests to external services.
Open-Meteo provides the weather and sea forecasts displayed for the guide's resorts. Forecasts appear on the home page, on the nine resort pages and, on screens at least 768 pixels wide, in the top bar of other pages: only in these cases does the browser send a request to Open-Meteo, repeating it every 15 minutes while the page remains open. The purpose is to supplement tourist information with forecast conditions. Requests include fixed resort coordinates, the IP address and technical connection information; the site does not detect the device's location.
The provider is OpenMeteo GmbH, based in Switzerland. Sending data to the Swiss provider involves a country outside the European Economic Area for which the European Commission recognises an adequate level of protection, under article 45 of the GDPR. Open-Meteo states that it deletes individual API logs after 90 days. Terms and data processing are described in the Open-Meteo terms and privacy notice.
For loading forecasts, the legal basis is the controller's legitimate interest in providing weather information to readers of the guide, under article 6(1)(f) of the GDPR. Objections to this processing can be submitted through the contact given in the rights section.
A copy of the forecasts and the time they were saved is kept in the browser. Its operation and removal are described in the guide to cookies and local storage.
External links and data enquiries
Links to museums, public bodies and other services lead to sites managed by other parties. Once those sites are opened, their information notices and settings apply.
Information on rights and avenues for redress is available on the Garante per la protezione dei dati personali website.
Recipients and rights
Register.it provides hosting and the site's mailbox. Technical providers process the data needed to supply their respective services; OpenMeteo receives the browser's forecast requests, and ip-api.com receives already truncated IP addresses to geolocate visits. Sending an email is optional: without the data needed for the enquiry, a reply is not possible.
In the cases provided for by the GDPR, the data subject may request access, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. A complaint may be lodged with Garante per la protezione dei dati personali. Requests to the controller can be sent to info@rivieraromagnola.net.
Information notice updated on 11 October 2026.