Cookie Policy
This Cookie Policy explains which cookies and tracking tools are used on the malatestanovello.it website, what they are for, and how you can control them. It is drafted pursuant to art. 122 of Legislative Decree 196/2003, the Guidelines of the Data Protection Authority of June 10, 2021, and Regulation (EU) 2016/679.
The data controller is Casa di Cura Malatesta Novello S.r.l., Via Renato Serra 2, 47521 Cesena (FC) – C.F. and VAT number 00377720404. For any aspect not covered here, please refer to the Privacy Policy.
1. What cookies are
Cookies are small text files that the visited sites send to the user's device, where they are stored to be retransmitted to the same sites on the next visit. Alongside cookies, there are other tools that perform similar functions, such as the browser's local storage: in this document, for simplicity, we refer to all these tools as “cookies”.
Cookies are distinguished based on who installs them (first-party, managed directly by the Controller, and third-party, managed by external entities), based on duration (session, deleted when the browser is closed, and persistent), and, above all, based on purpose.
2. Cookies used by this site
2.1 Necessary technical cookies
They are essential for the functioning of the site and to provide the services requested by the user. They do not require consent and cannot be disabled from the preferences panel: without them, the site does not function correctly.
| Name | Type | Finalità | Duration |
|---|---|---|---|
malatesta_novello_session | First-party | Identifies the browsing session and keeps services active (forms, reserved area, bookings) | 12 mesi |
XSRF-TOKEN | First-party | Protects site forms from cross-site request forgery attacks | 12 mesi |
cookie_consent | First-party | Stores preferences expressed on this panel, to avoid showing the banner on every page | 12 mesi |
mtp_timezone | First-party | Records the browser's time zone to correctly display appointment dates and times | 10 anni |
consent_uid (local storage) | First-party | Random code that identifies the expressed choice, without identifying the person; serves as proof of consent and allows the user to download their receipt | Until browser data deletion |
2.2 Cookie statistici
They are used to understand in aggregate form how the site is used (most consulted pages, traffic origin, errors) to improve it. They are activated only after your consent and remain deactivated if you choose “Reject” or if you close the banner without accepting.
| Servizio | Fornitore | Finalità | Informazioni |
|---|---|---|---|
| Google Analytics 4 | Google Ireland Limited | Site usage statistics with IP address not stored | policies.google.com |
2.3 Marketing and profiling cookies
They would be used to show ads in line with the user's interests and to measure the effectiveness of campaigns. This site does not use them. The preferences panel includes the category for completeness: any such tool would be activated only with express and prior consent, and revocation is always possible.
3. Third-party resources loaded by the pages
Some elements of the site are served by external providers. These services do not install profiling cookies, but to deliver the file they necessarily receive the visitor's IP address.
| Risorsa | Fornitore | Where it appears | Privacy Policy |
|---|---|---|---|
| Bunny Fonts | BunnyWay d.o.o. (Slovenia, EU) | Fonts on all pages | bunny.net |
| cdnjs | Cloudflare, Inc. | Interface and map libraries | cloudflare.com |
| jsDelivr / Tailwind CDN | jsDelivr, Tailwind Labs | Interface stylesheets and scripts | jsdelivr.com |
| Mappa OpenStreetMap | OpenStreetMap Foundation | Only on the Contacts page | osmfoundation.org |
| Stripe | Stripe Payments Europe Ltd. (Ireland) | Only on the payment page for Laboratory Analysis booking | stripe.com |
| OpenAI | OpenAI Ireland Ltd. | Only when writing a message to the virtual assistant Clara: processes the response and does not install cookies | openai.com |
The site does not use Google Fonts, Google Maps, Google Tag Manager, the “Like” button or other Facebook widgets.
4. How to express, modify, or withdraw consent
On the first visit, a banner appears allowing you to accept, reject, or customize choices for each category. Until a choice is made, only the necessary technical cookies are used.
You can change your preferences at any time:
- by reopening the panel from the “Cookie Preferences” link at the bottom of each page;
- by deleting cookies from your browser: the banner will be displayed again on the next visit.
Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
5. Proof of your consent
Each choice made on the banner is recorded in an append-only archive, protected by a control chain that makes any alteration detectable and automatically verified daily. The record includes the date and time, the categories accepted or rejected, the version of the privacy policy in effect at that time, and a random code; your name, email, or phone number are not recorded.
You can view and download the receipt of your consent at any time on the My Consent page, also in PDF format.
6. How to manage cookies from the browser
You can set your browser to block or delete cookies. Remember that disabling necessary technical cookies may prevent the site from functioning correctly. Below are instructions for the most popular browsers:
7. I tuoi diritti
Regarding data processed through cookies, you can exercise the rights provided by Articles 15-22 GDPR (access, rectification, erasure, restriction, portability, objection, withdrawal of consent) by writing to info@malatestanovello.it or to the Data Protection Officer (DPO) at dpo@malatestanovello.it. You also have the right to lodge a complaint with the Data Protection Authority.
The complete list of purposes, legal bases, and retention periods is provided in the Privacy Policy.
8. Aggiornamenti
This Cookie Policy may be updated to comply with technical or regulatory changes. When the update concerns tools subject to consent, the version of the notice is incremented and the banner is re-displayed to all users to collect preferences again. Each previous version is archived by the Owner.
Do you need clarifications?
For any request regarding this document, the processing of your data or to exercise your rights, you can write to us: we will respond within a month.
