This Cookie Policy describes the types of cookies used on the website ilpanoramico.com, the purposes of their use and the ways in which you can grant, modify or withdraw consent.

This document supplements the Privacy Policy and is drafted in accordance with Regulation (EU) 2016/679 (GDPR), Art. 122 of Italian Legislative Decree 196/2003 and the Guidelines of the Italian Data Protection Authority dated 10 June 2021.

1. What are cookies

Cookies are small text files that the websites visited by users send to their device (computer, tablet, smartphone), where they are stored and later transmitted back to the same websites upon subsequent visits. Cookies are used to perform authentication, monitor sessions, store preferences and collect statistical information about browsing.

During navigation on a website, cookies may be received from the visited site (first-party cookies) or from different sites (third-party cookies). Other tracking technologies (e.g. pixels, local storage, fingerprinting), to which the same rules apply, are considered equivalent to cookies.

Cookies are classified by duration (session cookies, deleted when the browser is closed, or persistent cookies, retained for a defined period) and by purpose (technical cookies, which do not require consent, and non-technical cookies, which require the user's prior consent).

2. Data Controller

The Data Controller for data collected through cookies is Ristorante Il Panoramico, based at Via Nazionale, 2 — 25056 Ponte di Legno (BS), Italy. Italian Tax Code and VAT number 03462270988, registered with the REA of Brescia under no. 536136.

Data Controller contacts:
Email: info@ilpanoramico.com
Phone: +39 0364 1951856

For more information on the Data Controller and the rights of data subjects please see the Privacy Policy.

3. Types of cookies used

The website uses four categories of cookies, of which only the first does not require the user's consent:

a) Technical cookies (necessary)

Essential for the correct operation of the website and for the delivery of the services requested by the user. They do not require consent under Art. 122(1) of Italian Legislative Decree 196/2003. Without these cookies some website features (cart, user session, language preferences, consent storage) would not be available.

b) Experience cookies

They enable the integration of third-party content and services that enrich the browsing experience. They require the user's prior consent. Without consent, third-party content is replaced by an informational notice with an activation button.

Google Maps — Google Ireland Limited

Purpose: display of the interactive map on the Contacts page.

Country: Ireland (EU), with possible transfers to the United States.

Privacy Policy: business.safety.google/privacy

YouTube — Google Ireland Limited

Purpose: display of videos embedded on event pages.

Country: Ireland (EU), with possible transfers to the United States.

Note: we use the youtube-nocookie.com endpoint in enhanced privacy mode, which does not set cookies until the user actively interacts with the video.

Privacy Policy: business.safety.google/privacy

Vimeo — Vimeo Inc.

Purpose: display of videos embedded on event pages.

Country: United States.

Privacy Policy: vimeo.com/privacy

Note: the specific cookies set by these services may change over time based on the respective providers' policies. Updated information is available in the privacy policies indicated.

c) Measurement cookies

Used to collect aggregate statistics on website usage (most visited pages, session duration, user sources). They require the user's prior consent.

Google Analytics 4 — Google Ireland Limited

Purpose: website traffic analysis, page performance measurement, understanding user behaviour in aggregate form.

Country: Ireland (EU), with possible transfers to the United States.

Main cookies: _ga, _ga_<ID>.

Duration: up to 2 years.

GDPR safeguard: EU-U.S. Data Privacy Framework + Standard Contractual Clauses (SCC 2021).

Privacy Policy: business.safety.google/privacy

Note: the Google Analytics script is loaded only after the user has given consent to the “Measurement” category. We also use Google Consent Mode v2 in default-denied mode: until the user grants consent, Analytics does not receive personal data.

d) Marketing cookies

Used to track user navigation, create profiles based on user interests and display targeted commercial communications both on the site itself and on external advertising platforms. They require the user's prior consent.

Meta Pixel (Facebook Pixel) — Meta Platforms Ireland Limited

Purpose: measurement of the effectiveness of advertising campaigns, creation of audience segments for remarketing, conversion tracking.

Country: Ireland (EU), with possible transfers to the United States.

Main cookies: _fbp, fr.

Duration: up to 90 days.

GDPR safeguard: EU-U.S. Data Privacy Framework + Standard Contractual Clauses (SCC 2021).

Privacy Policy: facebook.com/privacy/policy

Note: the Meta Pixel script is loaded only after the user has given consent to the “Marketing” category. Without consent, no pixel is executed and no marketing cookie is set.

4. Legal basis

The legal basis for the use of cookies varies according to the type:

Technical cookies (necessary): legitimate interest of the Data Controller (Art. 6(1)(f) GDPR) and Art. 122(1) of Italian Legislative Decree 196/2003 — they do not require consent.

Experience cookies: consent of the data subject (Art. 6(1)(a) GDPR) granted through the cookie banner.

Measurement cookies: consent of the data subject (Art. 6(1)(a) GDPR) granted through the cookie banner.

Marketing cookies: consent of the data subject (Art. 6(1)(a) GDPR) granted through the cookie banner.

5. Consent management

On first access to the website, an informational banner is shown that allows you to:

  • Accept all cookies — including experience, measurement and marketing;
  • Refuse non-necessary cookies — only technical cookies are installed;
  • Customise preferences — individually choose which cookie categories to enable.

Preferences can be changed at any time through the panel available in the “Modify your preferences” section at the bottom of this page.

The consent granted is stored for a period of 180 days, after which the banner is shown again.

Content blocked without consent: if you refuse experience cookies, the interactive map and embedded videos are replaced by an informational notice with an instant activation button. If you refuse measurement or marketing cookies, the related scripts are not loaded.

We also use Google Consent Mode v2 in default denied mode: until the user expresses a choice, all Google tags (including Analytics and any other Google services in future) operate in anonymous mode without storing cookies.

6. How to disable cookies from the browser

In addition to managing cookies through the site banner, you can also control and delete cookies through your browser settings:

Warning: disabling technical cookies may compromise the correct operation of some areas of the site (in particular the online order cart and user session).

7. Data transfers outside the EU

Some third-party cookies (Google Maps, YouTube, Google Analytics 4, Vimeo, Meta Pixel) may involve data transfers to countries outside the European Union, in particular the United States. Such transfers take place only with the user's consent and on the basis of adequate safeguards, including:

  • EU-U.S. Data Privacy Framework (DPF), where applicable;
  • Standard Contractual Clauses (SCC 2021) approved by the European Commission.

For more information please refer to the privacy policies of the individual providers listed in section 3.

8. Retention period

Cookie durations vary by type, as indicated in the table in section 3. In particular:

  • the session cookie ECSID is automatically deleted when the browser is closed;
  • consent cookies (cookie_consent, experience_consent, measurement_consent, marketing_consent) have a duration of 180 days;
  • third-party cookies have specific durations indicated by the respective providers (up to 2 years for Google Analytics, up to 90 days for Meta Pixel);
  • all cookies can be removed manually at any time from the browser settings.

9. Rights of the data subject

In relation to personal data collected via cookies, users enjoy the same rights set out in the Privacy Policy: access, rectification, erasure, restriction, portability, objection and withdrawal of consent (Articles 15–22 GDPR).

To exercise these rights you may contact the Data Controller at info@ilpanoramico.com.

You also have the right to lodge a complaint with the competent Supervisory Authority: the Italian Data Protection Authoritywww.garanteprivacy.it.

You can update your cookie preferences at any time using the controls below. The change is applied to the website immediately.