Privacy & cookie policy | Romito San Biagio, Casteggio (PV)

Last updated: 9 October 2026

1. Data controller 2. What data we collect and why 3. Who we share data with 4. How long we keep it 5. Your rights 6. Cookies and third-party tools 7. Changes

1. Data controller

ACASTEGGIO di Emilia Nicole Crisci, sole proprietorship, VAT no. (P.IVA) 10519390966.
Address: Via San Biagio 27, 27045 Casteggio (PV), Italy
Tax code: CRSMNC79D54M109S · REA: PV-297205 (Pavia Business Register, registered 31/10/2018) · SDI code: USAL8PV
Email: emiliacrisci@romitosanbiagio.it · WhatsApp/phone: +39 345 341 1216

The controller runs Romito San Biagio, a wedding and event venue in Casteggio (PV), Italy, Via San Biagio 27. Romito San Biagio is a venue-only business: no catering is provided. No Data Protection Officer (DPO) has been appointed, as it is not required for this kind of activity.

2. What data we collect and why

Situation	Data	Purpose	Legal basis
Enquiry or visit request (site form, email, WhatsApp, phone)	Name(s), email, content of your message; wedding year, number of guests and how you found us, if you give them	Reply, propose a visit and a quote	Pre-contractual steps at your request (Art. 6(1)(b) GDPR)
Booking and contract	Identity and contact data of the couple/client, contract and invoicing data	Perform the contract, manage payments, meet tax and accounting duties	Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c))
Browsing the site	Technical server logs (IP address, date and time, pages requested, browser)	Operation, security and abuse prevention	Legitimate interest (Art. 6(1)(f))
Statistics (Google Analytics)	Aggregated, pseudonymised usage data (pages visited, device type, origin)	Understand how the site is used in order to improve it	Your consent (Art. 6(1)(a) GDPR; Art. 122 Italian Privacy Code). Can be withdrawn at any time

You can contact us through the site's enquiry form (Start your dream page), by writing to emiliacrisci@romitosanbiagio.it or by WhatsApp message (the "WhatsApp" links open the WhatsApp app or website, a Meta service that processes data under its own policy). The form sends the data by email to the controller, only to answer your request (no archive on the site, no newsletter sign-up); required fields are name, email and consent to the processing. If you do not provide the data needed, we cannot answer your request. We do not collect data from children or special categories of data; please do not send us any.

We do not carry out profiling or automated decision-making. Data is never sold.

3. Who we share data with

Aruba S.p.A. (Italy): website hosting — data processor.
Email and communication service providers, acting as data processors.
Google (Analytics, only with consent; Google Fonts, see section 6) and Meta (WhatsApp, if you write to us there).
Tax and accounting advisers assisting the controller, as data processors, for legal obligations.

Some providers (Google, Meta) may process data outside the European Economic Area, notably in the USA, on the basis of GDPR safeguards (adequacy decision / EU-US Data Privacy Framework or standard contractual clauses). Data is not disseminated.

4. How long we keep it

Enquiries with no follow-up: for as long as needed to reply and in any case no more than 24 months, then deleted.
Contract and invoicing data: 10 years from the last tax document (legal obligation).
Technical server logs: for the time strictly necessary for security, according to the hosting provider's settings.
Google Analytics: usage data kept for the period set in Google Analytics, 14 months at most.
Cookie banner choice: 6 months.

5. Your rights

You may at any time ask us for access, rectification, erasure, restriction, portability, and object to processing (Arts. 15-22 GDPR), and withdraw your consent to statistics cookies (without affecting processing already carried out). Write to emiliacrisci@romitosanbiagio.it: we reply within one month.

You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of your own country.

On your first visit a banner shows Accept and Reject buttons (the "X" also means reject). Without your consent no statistics tool is loaded. You can change your mind at any time: change your cookie preferences.

Name	Purpose	Owner	Duration / when
`_ga`, `_ga_G-H0F7LG1PZ7`	Statistics (Google Analytics 4, ID G-H0F7LG1PZ7)	Google Ireland Ltd. / Google LLC	Only after "Accept". Google default: up to 2 years
`rsb_cookie_consenso` (browser localStorage)	Technical: remembers your banner choice (accept/reject)	This site	6 months

Google Fonts

The page typefaces (Fraunces, Cormorant Garamond, Dancing Script, Figtree) are loaded from Google servers (fonts.googleapis.com): Google therefore receives your IP address when you open a page, even without consent. Legal basis: legitimate interest in displaying the site correctly (Art. 6(1)(f)).

External links

The site links to Google Maps, Instagram, Facebook, Matrimonio.com, WhatsApp and drvranjes.it: we do not embed maps or videos, so these services receive data only if you click a link and are governed by their own policies.

How to delete cookies from your browser

You can block or delete cookies in your browser settings (Chrome, Firefox, Safari, Edge). You can also install Google's browser add-on to disable Analytics.

7. Changes

We may update this notice; the version in force is always the one published at this address, with the date at the top.