Cookie Policy
Last updated: July 17, 2026
1. Who controls these technologies
This policy is issued by READING RETREATS IN RURAL ITALY A.P.S., Codice Fiscale 91154310378, RUNTS no. 122511, registered office c/o Savi Consulting SRL - STP, Via Pietro Nenni 6/B, 46100 Mantova (MN), Italy. It supplements our Privacy Policy and covers readingretreats.com.
2. Cookies and similar technologies
Cookies are small values stored by a website in a browser. We also use local storage and session storage, which remain in the browser but are not automatically sent with every HTTP request, and technical security mechanisms that inspect request or device signals. Under Article 122 of the Italian Privacy Code, strictly necessary technologies do not require consent but must be disclosed. Non-essential technologies are blocked until you freely consent.
3. Technologies set or used by us
| Name/provider | Purpose and contents | Storage/type | Duration |
|---|---|---|---|
rr_cookie_consent | Records “essential” or “all”, policy version, decision time, and expiry so the banner respects and can demonstrate your choice. | First-party local storage; strictly necessary preference record. | Six calendar months, unless you change the choice or a material change requires a fresh request. |
lang | Remembers whether you chose English or Italian. | First-party local storage; requested language preference. | Until you change it or clear browser storage. |
fromLoader | Coordinates the one-time visual transition from the language entry screen. | First-party session storage; technical. | Removed after the transition; at latest when the tab session ends. |
| Vercel WAF and BotID Basic | Protects public forms against bots and abuse using a client challenge and request, browser, device, and network security signals. We do not use these signals for advertising or audience analytics. | Strictly necessary security mechanism; provider-managed challenge/request data. | For the request or short security period determined by Vercel; related logs follow the security-retention criteria in the Privacy Policy. |
sb-<project-ref>-auth-token and numbered chunks | Authenticates authorised administrators. Not created for public visitors. | First-party, HttpOnly, Secure, SameSite=Strict cookie; strictly necessary. | Up to 11 minutes, renewed only during an authorised active session. |
__Host-rr-admin-csrf | Prevents cross-site request forgery in the administrator area. Not created for public visitors. | First-party, HttpOnly, Secure, SameSite=Strict cookie; strictly necessary. | Up to 11 minutes. |
rr-admin:last-activity and rr-admin:session-event | Synchronises administrator inactivity and logout across tabs. Not created for public visitors. | First-party local storage; strictly necessary administrator security. | Overwritten during use; values may remain until browser storage is cleared but are no longer an active public or authenticated session after timeout/logout. |
4. Google Maps — consent required
The interactive Google Maps iframe on our information page is not given a network source and does not contact Google until you select Accept All in the banner or the map’s own consent button. If you consent, Google may receive your IP address, browser/device data, referrer, approximate location, identifiers, account status if signed in, and map interactions. Google may set or read third-party cookies or similar identifiers.
The exact names and lifetimes are controlled by Google and may vary by region, account state, and browser.
Google currently documents examples such as NID (about six months) and SOCS
(about 13 months). See Google’s
cookie information
and privacy policy.
Google acts as an independent controller for its processing.
5. What we do not use
At the date above, the Association does not use Google Analytics, Google Tag Manager, Meta Pixel, advertising cookies, behavioural profiling, cross-site advertising, or sale of browsing data. Remote public images and email resources may still create ordinary network requests as described in the Privacy Policy, but we do not use those requests to build advertising profiles.
6. Your choices
- Close (×) or Essential Only: Google Maps remains blocked; only technical and requested-preference technologies operate.
- Accept All: permits the Google Maps iframe and its third-party technologies.
- Change your mind: use the “Review cookie choices” link in every public-page footer or the button below at any time.
Choosing Essential Only after accepting unloads the map and prevents future loads. It cannot delete cookies already placed by Google; use your browser’s site-data controls or Google settings for those. Refusal does not limit core site, membership, event, contact, or payment functions; only the embedded map is unavailable.
7. Browser controls and external links
Browsers allow you to view, block, or delete cookies and local/session storage. Blocking strictly necessary storage may prevent preferences or the administrator area from working. Clicking a normal link to Google Maps, PayPal, Facebook, Instagram, or another external site is a direct, user-initiated visit; that site may use its own cookies under its own policy even if you rejected the embedded map here.
8. Updates and contact
We update this policy when technologies, purposes, or providers change. The date at the top is maintained manually and does not change automatically. A material change to consent purposes or third parties may cause the banner to request a new choice. Questions or requests can be sent to info@readingretreats.com or by PEC to readingretreatsinruralitaly@pec.it.
Contact the controller
Privacy and cookie requests: info@readingretreats.com
PEC: readingretreatsinruralitaly@pec.it
Postal address: Via Pietro Nenni 6/B, 46100 Mantova (MN), Italy