Last updated: 2 October 2026
This page explains what personal data the visitbordighera.com website collects, why, and how you can exercise your rights, under Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003.
Data controller
Federico Bertaina. For any privacy request: info@visitbordighera.com.
What data we collect
Browsing data
Like all websites, the servers hosting visitbordighera.com automatically record some technical data (IP address, browser, pages visited, date and time). This data is used only to run the site and protect it from abuse; we do not use it to identify you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
Newsletter
If you subscribe to the newsletter we collect your email address and the consent you have given, in order to send you news about Bordighera (events, places, itineraries). Legal basis: your consent (Art. 6(1)(a) GDPR). Your address is stored in the website’s database, is not shared with email marketing services and is kept until you unsubscribe: you can do so at any time by writing to info@visitbordighera.com.
Information requests
If you write to us using the “Information” form, we collect your first name, last name, email address, country, city, phone number (optional) and your message, together with the language, the page you are writing from and the date of your consent. We use them only to reply to your request. Legal basis: your consent and the handling of your request (Art. 6(1)(a) and 6(1)(b) GDPR). The data is not stored in the website’s database: it is sent by email to the Tourist Information Office (IAT) of the Municipality of Bordighera, which replies to you and keeps it for as long as needed to handle the request. To protect the form from spam, we keep a code derived from your IP address for one hour.
Push notifications
If you turn on notifications using the “Notifications” button, your browser generates a technical delivery address and two encryption keys. We store these together with the language of the site you signed up from and the topics you chose (major events, special offers and initiatives, news and useful updates). We do not collect your name, email address, phone number or location, and we do not record whether you open the notifications. We use this data only to send you alerts on the topics you chose, in your language. Legal basis: your consent (Art. 6(1)(a) GDPR), which you give by turning on notifications and allowing them in your browser.
The data is stored in the website’s database. To reach your device, each notification goes through your browser’s push service (see “Third-party services”), which receives the encrypted message and the delivery address but cannot read the content. Links in notifications carry a label that only shows the visit came from a notification, without linking it to you. To prevent abuse, we keep a code derived from your IP address for one hour.
You can turn notifications off at any time with the same button (“Turn off notifications”) or in your browser settings. Your subscription is deleted immediately or, if you block notifications in the browser, automatically at the next send.
Cookies
The site only uses technical cookies, which are necessary for it to work and do not require consent:
- wp-wpml_current_language – remembers the language you chose (duration: 1 day).
We do not use profiling cookies or any analytics or advertising tools.
Third-party services
Some features of the site rely on external services, which receive your IP address when you load the page:
- Google Maps (Google Ireland Ltd) – the maps on the pages of places and events. Google may set its own cookies. Google’s privacy policy.
- Google Fonts (Google Ireland Ltd) – the site’s typefaces.
- Hostinger (Hostinger International Ltd, EU) – hosting of the site (including the database in which newsletter subscriptions are stored) and related technical services.
- Browser push services (Google for Chrome and most Android browsers, Apple for Safari, Mozilla for Firefox, Microsoft for Edge) – only if you turn on push notifications: they deliver the alerts to your device and receive the encrypted message and the delivery address.
The links to Instagram and Facebook are simple links: no data is sent to these social networks until you open them.
Some providers may transfer data outside the European Union; in such cases the transfer takes place on the basis of the EU-U.S. Data Privacy Framework or the standard contractual clauses approved by the European Commission.
Who we share data with
Data is not sold or passed on. It is processed only by the data controller and by the technical providers listed above, appointed as data processors where necessary. Requests sent with the “Information” form are forwarded to the IAT office of the Municipality of Bordighera, which replies to you.
Your rights
You can ask at any time to access your data, correct it, delete it, restrict its processing, object to it or receive it in a portable format (Arts. 15–22 GDPR), and withdraw your consent to the newsletter and push notifications. Just write to the address given in the “Data controller” section. If you believe your data is being processed incorrectly, you can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
Changes
This policy may be updated; the date at the top shows the latest revision.
