Cookie Policy

This policy describes the use of cookies and similar technologies on the Napulè Apartment website, in accordance with Regulation (EU) 2016/679 (GDPR), Directive 2002/58/EC (ePrivacy) and the guidelines of the Italian Data Protection Authority (Garante) on cookies and other tracking tools (measure of 10 June 2021, in force from 10 January 2022).

1. What are cookies

Cookies are small text files that websites can store on your device (computer, tablet, smartphone) when you visit them. They are used to store information about your visit (e.g. preferred language, login session) or to recognise the device on later visits. Similar technologies (e.g. local storage, pixels, identifiers) may also be used for similar purposes; in this policy, «cookies» may refer to these technologies where applicable.

2. Types of cookies we use

2.1 Technical (strictly necessary) cookies

These cookies are essential for the website to function and to provide the services you request. They do not require your consent under the Garante guidelines. They are not used for any other purpose.

• Session / authentication: they keep you logged in (account area, bookings) and ensure security (e.g. CSRF protection).
• Language preference: they store your chosen language (Italian/English).
• Cookie preferences: they store your choices on the cookie banner so we do not ask for consent on every visit, within the validity period indicated below.
• Load balancing / security: cookies strictly necessary for infrastructure (e.g. server session) when provided by our hosting providers.

2.2 First-party analytics cookies

We use first-party (or minimally identifiable) analytics to understand how the site is used (e.g. most visited pages, errors) and to improve performance. Under the Garante guidelines, first-party analytics cookies that do not allow direct identification and are not combined with other data may be used without prior consent, provided the notice is clear and you can object. Where we use analytics cookies that require consent, they are only enabled after you accept them in the banner.

• Vercel Analytics (or similar): aggregate, anonymous analytics on performance and usage (e.g. visit counts, load times), without user profiling.

2.3 Third-party cookies (with consent)

Some pages may use third-party services that set their own cookies. These cookies are only enabled with your consent (via the cookie banner or settings), unless they are strictly necessary for the service you requested.

• Stripe: for secure payment processing (checkout). Stripe may set cookies necessary for payment and for analytics/fraud prevention. See Stripe Privacy Policy.
• Cloudflare Turnstile (or similar): for anti-spam and anti-abuse protection on forms (e.g. contact). Cookies may be set to manage the challenge and security.
• Google Maps (embed): if a Google map is embedded on a page, Google may set cookies according to its policy. Using the map implies acceptance of Google’s policy.

Third parties act as independent data controllers for their cookies; to exercise your rights over such data you must contact them directly or use the tools they provide.

3. Banner and consent management

On first visit (or after the consent validity period), a banner allows you to:

• Accept all cookies (including those that require consent).
• Reject non-essential cookies (only technical cookies will be used).
• Access detailed settings to make granular choices by category (where implemented).

Consent is not required for technical cookies. Scrolling or simply continuing to browse does not constitute valid consent for non-essential cookies: a positive action is required (e.g. click «Accept» or on individual categories). Preferences are stored and we will not ask for consent again before at least 6 months have passed, unless the purposes or cookies used change. You can revoke or change your choices at any time via the «Cookie preferences» link (usually in the footer) or your browser settings.

4. Consent record

In line with the Garante guidelines, where we use cookies that require consent, we may keep a record of the preferences you expressed (e.g. timestamp, choice made) to demonstrate, if required, that valid consent was obtained. Such data is retained for as long as necessary for this purpose and in compliance with legal obligations.

5. Managing cookies in your browser

You can limit or block cookies through your browser settings. Links to instructions for common browsers:

• Chrome: Settings → Privacy and security → Cookies and other site data
• Firefox: Settings → Privacy & security → Cookies and site data
• Safari: Preferences → Privacy → Manage website data
• Edge: Settings → Cookies and site permissions

Disabling or deleting technical cookies may prevent some features from working (e.g. account access, completing payment, storing language). Disabling third-party cookies does not prevent general browsing but may limit linked services (e.g. Stripe payments require cookies necessary for their operation).

6. Cookie duration

Session cookies are removed when you close the browser. Persistent cookies remain on your device for the period indicated for each type or until you delete them. For third-party cookie durations, see the respective policies (Stripe, Google, Cloudflare, etc.).

7. Rights and contact

Regarding personal data processed through cookies, you have the rights under the GDPR (access, rectification, erasure, restriction, portability, objection, complaint to a supervisory authority). To exercise your rights or for any question about this Cookie Policy, contact the Data Controller: Napulè Apartment, email info@napuleapartment.it, phone +39 342 334 7947. For the full notice on personal data processing, see our Privacy Policy.

8. Changes

This policy may be updated to reflect changes in the cookies we use or in the law. The date of the last update is shown at the top. Please check this page periodically.