Cookie Policy

This document technically illustrates the use of scripts, cookies, and similar tracking technologies (e.g., web beacons, local storage) by the www.lafelicina.com web infrastructure, in order to ensure service delivery, analyze traffic, and manage user preferences in compliance with the GDPR (EU Regulation 2016/679) and the ePrivacy Directive.


1. Data Controller

Company Name: Azienda Agricola La Felicina – Società Semplice
Registered Office: Frazione San Bartolomeo, 27 - 12062 Cherasco (CN)
Contact Email: agriturismolafelicina@gmail.com


2. Types of Trackers Used

The trackers employed by this platform are divided into two operational macro-categories: technical trackers (necessary for code execution) and third-party trackers (used for external services, security, and analytics). The installation of non-essential trackers is strictly subject to the acquisition of the user's prior consent.


3. Technical and Functional Cookies (First-Party)

This type of cookie is delivered directly by the local server and does not require user consent, as it is essential for the correct execution of the code and navigation.

Session and Booking Management

The booking system and the server's caching protocols generate temporary session cookies to store user choices during the booking flow (e.g., selected dates, rooms) and to optimize the loading speed of HTML/CSS resources.

Saving Consent Preferences

The site uses a dedicated application (CookieYes) to cryptographically record the user's choice regarding the acceptance or rejection of trackers, in order to prevent the banner from reappearing on every page load.


4. Third-Party Trackers

The integration of cloud services and external APIs involves the execution of scripts managed by third-party providers. These entities operate as independent Data Controllers or Data Processors.

Measurement and Analytics

Google Analytics 4 (Google Ireland Limited):
Tracking system used for aggregated monitoring of network metrics. The application is configured with forced server-side IP address anonymization, preventing granular user profiling. The data is used exclusively for statistical purposes.
Processed data: Usage metrics, session identifiers. Google Privacy Policy.

Infrastructure Security and Antispam

Google reCAPTCHA (Google Ireland Limited):
Heuristic analysis script that evaluates user interaction with contact forms to filter bot attacks and malicious traffic. The algorithm performs temporary client fingerprinting to assign a risk score.
Processed data: Interaction metrics, client IP. Google Privacy Policy.

External Content Rendering

Google Maps and Google Fonts (Google Ireland Limited):
API calls for the asynchronous loading of typographic and cartographic libraries. The resolution of the request exposes the client's IP address to the destination servers.
Processed data: TCP/IP traffic data. Google Privacy Policy.

Payment Gateways

Transaction processing occurs via the encrypted gateways of PayPal and Stripe. These platforms install technical security cookies essential for fraud prevention and client authentication during checkout.
Consult the PayPal Privacy Policy and the Stripe Privacy Policy.


5. Consent Management and Revocation

The user has complete control over non-essential trackers. Preferences can be modified in real-time by interacting with the cookie control panel icon overlaid on the site.

Alternatively, tracker control can be enforced at the browser level. Instructions for clearing the cache and removing cookies in major clients are available at the following technical addresses:


6. Technical and Legal Glossary

  • Cookie/Tracker: Text string saved in the client's filesystem (browser) by the web server, used to maintain state or execute asynchronous instructions.
  • Navigation Data: Logs generated by network protocols, including the IP address, URI routing, User Agent, and the GET/POST request timestamp.
  • Data Subject / User: The physical entity that establishes the TCP/IP connection to the server and to whom the processed data refer.
  • Data Controller: The legal entity that determines the purposes and logic of the data processing architecture.

Legal Basis: Information drafted pursuant to Articles 13-14 of EU Regulation 2016/679 and Directive 2002/58/EC (amended by 2009/136/EC).

Last updated: March 21, 2026