1. Data Controller
The data controller for this website is:
CristallPont S.R.L.
Traversa Dragone 2, 84010 Atrani (SA), Italy
P.IVA: 06863730650
Email: hello@amalfi.day
2. Data We Collect
This website collects minimal personal data:
- Newsletter subscription: If you voluntarily subscribe to our newsletter, we collect your email address. This data is stored in our Ghost CMS platform and used solely to send you updates about the Amalfi Coast.
- Cookies and analytics: We use Google Analytics (via Google Tag Manager) to understand how visitors use this site. This may involve cookies that collect anonymized usage data such as pages visited, time spent, device type, and approximate geographic location.
- Language preference: We store your language selection in your browser's local storage to remember your preference between visits. This data never leaves your device.
3. Legal Basis for Processing
Under the EU General Data Protection Regulation (GDPR) and Italian Legislative Decree 196/2003 (as amended by D.Lgs. 101/2018), we process your data based on:
- Consent (Art. 6(1)(a) GDPR) — for newsletter subscriptions and non-essential cookies.
- Legitimate interest (Art. 6(1)(f) GDPR) — for essential cookies necessary for the website to function.
4. Cookies
This website uses the following types of cookies:
- Essential cookies: Required for the site to function (e.g., theme preference, PWA service worker). These do not require consent.
- Analytics cookies: Google Analytics cookies that help us understand site usage. These are only set after you provide consent via our cookie banner.
You can withdraw your cookie consent at any time by clearing your browser cookies or using your browser's privacy settings.
5. Data Sharing
We do not sell your personal data. We may share data with the following third-party services that act as data processors:
- Google LLC — Google Analytics for website usage statistics.
- Ghost Foundation — Ghost CMS for newsletter management.
- Vercel Inc. — Website hosting and content delivery.
These providers may transfer data outside the EU/EEA. Such transfers are governed by appropriate safeguards (Standard Contractual Clauses or adequacy decisions).
6. Data Retention
- Newsletter emails: Stored until you unsubscribe.
- Analytics data: Retained for 14 months (Google Analytics default for GA4).
- Local storage data: Stored on your device until you clear it.
7. Your Rights
Under GDPR, you have the right to:
- Access your personal data (Art. 15)
- Rectify inaccurate data (Art. 16)
- Erase your data ("right to be forgotten", Art. 17)
- Restrict processing (Art. 18)
- Data portability (Art. 20)
- Object to processing (Art. 21)
- Withdraw consent at any time without affecting the lawfulness of prior processing (Art. 7(3))
To exercise these rights, contact us at hello@amalfi.day.
You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) at www.garanteprivacy.it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.
9. Contact
For any questions regarding this Privacy Policy or our data practices, contact us at:
hello@amalfi.day