Last updated: 2026-02-27

1. Data Controller

The Data Controller is:

BUCCI SRL – VAT/Tax Code 01451660110
Registered office: Via Bastione 5, 19016 Monterosso al Mare (SP), Italy
PEC: buccisas.monterosso@pec.it

BUCCI SRL

Establishment contacts (Torre Aurora):
Torre Aurora – Via Bastioni, 5 – 19016 Monterosso (Cinque Terre)
Email: info@torreauroracinqueterre.com – Tel: +39 366 1453702

2. Personal data processed

Depending on the use of the site, the following may be processed:

a) Browsing data (technical): IP address, logs, device identifiers, browser/operating system information, pages visited, date/time of access, technical and security parameters.
b) Data provided by the user: name, email, telephone number, content of messages sent via forms/email/telephone, and any information sent voluntarily.
c) Cookies and online identifiers: cookies and similar technologies for technical, statistical, and marketing purposes (details in the Cookie Policy).

The site does not normally request “special” categories of data (e.g., health). If the user sends them spontaneously, they will be processed only to manage the request.

3. Purposes of processing and legal basis

The Data Controller processes data for the following purposes:

1. Site provision and security (technical operation, abuse prevention, IT security).
   Legal basis: legitimate interest of the Data Controller.

2. Management of requests and contacts (responding to requests via email, form, telephone).
   Legal basis: pre-contractual/contractual measures and/or legitimate interest.

3. Management of commercial requests and information on services (e.g., availability, quotes, operational communications).
   Legal basis: pre-contractual/contractual measures.

4. Legal compliance and protection of rights (legal obligations, management of disputes/controls, defense in court).
   Legal basis: legal obligation and/or legitimate interest.

5. Statistics via Google Analytics (GA4) (measurement of traffic and site usage).
   Legal basis: user consent (via cookie banner).

6. Marketing and remarketing via Meta Pixel (conversion measurement, audience creation, campaign optimization).
   Legal basis: user consent (via cookie banner).

7. Embedded map via Google Maps (displaying location/directions).
   Legal basis: user consent when third-party content is loaded and may set cookies/identifiers or communicate data to third parties (via cookie banner or loading after user choice).

4. Processing methods

Data are processed using IT and/or paper tools, with appropriate security measures to ensure confidentiality, integrity, and availability.

5. Data recipients

Data may be disclosed to:

• technical providers (hosting, maintenance, IT services);

• measurement and marketing service providers (Google and Meta) within the limits of consent;

• professionals and consultants (e.g., lawyers, accountants) if necessary;

• public authorities in cases provided for by law.

Suppliers who process data on behalf of the Data Controller may be appointed as Data Processors (Art. 28 GDPR).

6. Third-party services: Google Analytics, Meta Pixel, Google Maps

The site uses:

Google Analytics (GA4) – statistical traffic analysis service (“Statistical” cookies).
Meta Pixel – marketing/remarketing and conversion measurement tool (“Marketing” cookies).
Google Maps – embedded interactive map (third-party content that may set cookies/identifiers).

These services are activated only after user consent via the cookie banner (except for necessary technical cookies).

7. Transfers outside the EEA

The use of Google and Meta services may involve data transfers to countries outside the EEA. In such cases, the transfer takes place in compliance with the GDPR through appropriate safeguards (e.g., Standard Contractual Clauses and supplementary measures, where applicable), depending on the configuration of the services and the flows actually active.

8. Retention period

• Contact data/requests: for the time necessary to manage the request and for a limited subsequent period, useful for the protection of the Data Controller (e.g., management of disputes).

• Technical data/security logs: for limited periods, according to technical and security needs.

• Data processed via non-essential cookies (statistics/marketing): for the durations indicated in the Cookie Policy and/or according to browser and consent settings.

9. Provision of data

• The provision of data for contacts/requests is necessary to obtain a response.

• The provision for statistics and marketing is optional: it occurs only with consent and can be refused without preventing site navigation (except for any third-party content not loaded).

10. Rights of the data subject

The user may exercise the rights provided for by Arts. 15–22 of the GDPR: access, rectification, erasure, restriction, objection, portability (if applicable), and may withdraw consent at any time (without affecting the lawfulness of processing already carried out).

To exercise your rights:
info@torreauroracinqueterre.com or buccisas.monterosso@pec.it

BUCCI SRL

11. Complaint to the Supervisory Authority

If you believe that the processing violates the GDPR, you may lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).