Privacy and cookies

The data controller is Gabriele Masetti, who creates and publishes LagodiComo.it. For any question about personal data, and to exercise your rights, write to info@lagodicomo.it or use the contact form.

As with any website, the server hosting LagodiComo.it receives some technical data with each visit: the IP address, the page requested, the date and time, the type of browser and operating system, and the referring page.

This data is used to deliver the pages and to protect the site from abuse and attacks; it is not used to identify visitors or to profile them. The legal basis is the controller's legitimate interest in running a secure, working site (Article 6(1)(f) GDPR).

The site is hosted by Netlify, Inc. (San Francisco, United States), which processes this data on the controller's behalf as a processor and keeps it for as long as the security of the service requires.

The pages of LagodiComo.it set no cookies, neither the site's own nor third-party ones, and contain no visitor analytics, advertising or profiling tools. That is why the site shows no cookie banner.

Some features keep data in your browser's storage (localStorage, sessionStorage and the service worker's cache):

• the places you save, the itineraries you create and their order;
• the pages you opened most recently and their images, so they can be read when there is no signal, and the pages you download from Saved;
• whether you have already seen the introduction to the Light page, until you close the tab.

Saved data is stored on your device. If you share a list, the link contains the identifiers of your chosen places; when it is opened, the server reads them to display the list. Browser storage supports the features you use, does not track your browsing and requires no consent. You can delete its data at any time in your browser settings, under site data.

“Where am I” on the map, “On board” in “From the boat”, “What am I seeing” and “The sun at any point” can use your position. The browser asks for it only when you tap the button, and you can always refuse.

Your position is processed in your browser. In “The sun at any point”, the point's coordinates are added to the page address, including when they come from your device's position. They can therefore reach the server in subsequent requests, for example when you reload the page or open a shared link. To draw the map and terrain, your browser downloads data for the area from OpenFreeMap and Amazon Web Services, which receive your IP address and the tile requested.

Photographs, typefaces and page data are served by the site itself. Some features load content from other services instead: at that moment the browser connects to their servers, which receive the IP address and the technical data of the request and handle it as independent controllers, under their own privacy policies.

• OpenFreeMap (Hyperknot Software Kft., Hungary): the style, tiles and lettering of the interactive maps.
• Amazon Web Services (Amazon Web Services, Inc., United States): the terrain for the three-dimensional maps, the Light page and “What am I seeing”.
• Windy (Windyty, SE, Czech Republic): the webcam images.

If you write through the contact form or to info@lagodicomo.it, the controller receives your name, email address, topic and message, and uses them only to reply and to act on your request, for example by correcting a page.

The form runs on Netlify Forms: Netlify stores the messages on the controller's behalf and checks them for spam with the Akismet service of Automattic Inc. (United States).

The legal basis is replying to your request (Article 6(1)(b) and (f) GDPR). Messages are kept for as long as the request takes to handle and deleted after twenty-four months at the latest, unless they are needed to protect a legal right.

Netlify, Amazon Web Services and Automattic are based in the United States. Data transferred to them is protected by the EU-U.S. Data Privacy Framework, which the European Commission found adequate in its decision of 10 July 2023, or by the standard contractual clauses approved by the Commission.

The data is neither sold nor passed on. Only the controller and the providers named in this policy process it, for the purposes described.

At any time you can ask the controller for access to your data, its correction or erasure, restriction of processing and data portability, and you can object to processing based on legitimate interest (Articles 15–22 GDPR). Write to info@lagodicomo.it: you will receive a reply within one month, as the Regulation requires.

If you believe the processing breaches the Regulation, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali, or with the supervisory authority of the country where you live.

This policy is updated whenever the site or the services it uses change. The date of the last update is shown at the top.