Cookie policy

1. What cookies and similar tools are

Cookies are small text files that a website can save on a user’s device. Other technical tools, such as temporary identifiers or browser storage, can serve similar security or service-function purposes.

2. Data controller

Gelato IT Consulting S.r.l.s
Via Tazio Nuvolari, 2 - 40055 Castenaso (BO), Italy
VAT/Tax code: IT03807951201
Email: info@andreabandiera.it
Certified email: amministrazione@pec.gelatoitconsulting.it

3. Current website configuration

As of the update date of this policy, the website code does not load Google Analytics, Google Tag Manager, advertising pixels, profiling tools, embedded videos, social widgets or embedded maps.

For this configuration, no consent banner is shown: the website does not use cookies or other tracking tools for marketing, profiling or analytics. Google Maps links and hotel-search links open external services only after a voluntary user action.

4. Technical and security tools

The contact form uses Cloudflare Turnstile to prevent automated submissions and abuse. Turnstile may process browser technical signals and use technical mechanisms needed for the anti-spam check. It is loaded only on the contact page when protection is configured.

Tool	Provider	Purpose	Basis for use
Hosting and infrastructure protection	Cloudflare	Website delivery, security and abuse prevention	Technical/necessary
Turnstile	Cloudflare	Anti-spam verification for the contact form	Technical/necessary to protect the requested service

For more details: Cloudflare privacy policy and Turnstile privacy addendum.

The names and duration of any strictly technical cookies depend on the actual Cloudflare service configuration. Before final publication, the controller must verify them in production and update this table if needed.

5. User choices

Because the current configuration has no optional analytics or marketing tools, there are no cookie preferences to manage through a banner. Browser settings can still manage or delete technical cookies; disabling them may prevent the security features or contact form from working correctly.

If analytics, advertising, embedded maps, videos or other non-technical tools are added in the future, they will be blocked until any required consent is obtained and this policy will be updated before they are enabled.

6. Rights and contacts

For information about personal-data processing and to exercise GDPR rights, see the Privacy policy or write to info@andreabandiera.it.

7. Updates

This policy was updated on 1 October 2026.