Last updated: October 25, 2026. This is an English translation provided for convenience. If it differs from the Italian version, the Italian version (Informativa privacy e cookie) prevails.
1. Who we are
EstateRomana.com (the “Site”) is an independent guide to events, places and things to do in Rome and the surrounding area. The data controller is Daniele Dezi, sole proprietor (ditta individuale), VAT number IT18149671002, Rome, Italy, who runs the Site (the “Controller”, “we”, “us”).
Contact for privacy matters and any request about your data: info@estateromana.com. We have not appointed a Data Protection Officer because the law does not require one for this Site.
2. What this policy covers
This policy explains what personal data we process when you visit the Site, use the E.R. PLANNER trip planner, write to us, submit an event or click a link to one of our partners. It is written to meet the information duties of Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and of the Italian Privacy Code (Legislative Decree 196/2003, as amended), and it includes our cookie policy (section 9).
3. Data we process, why, and on what legal basis
| What | Data | Purpose | Legal basis | How long |
|---|---|---|---|---|
| Browsing the Site | IP address, browser and device type, pages requested, date and time, referring page (server logs) | Delivering the pages, security, preventing abuse | Legitimate interest in running a secure website (Art. 6(1)(f) GDPR) | For the limited period set by our hosting provider for security purposes, then deleted |
| Language and technical preferences | The language you chose (cookie pll_language), your cookie choices | Showing the Site in your language and remembering your consent | Strictly necessary for a service you requested; no consent needed (Art. 122 Privacy Code) | Language: 1 year. Cookie choices: 6 months, then we ask again |
| Consent records | Date and time, the choices made, banner version, language, page, a random consent code, a one-way hash of your IP address | Being able to prove that you gave or refused consent | Legal obligation to demonstrate consent (Art. 6(1)(c) and 7(1) GDPR) | 24 months |
| Statistics | Pseudonymous identifiers, pages viewed, approximate location, device data | Understanding which pages are useful so we can improve them | Your consent (Art. 6(1)(a) GDPR), given through the cookie banner | See section 9 |
| Maps | IP address and map requests | Showing places on an interactive map | Your consent, given through the cookie banner or by clicking “Show the map” | Set by the map provider |
| E.R. PLANNER on your device | The places, dates and preferences you add to your trip | Building your trip plan | Performance of the service you request (Art. 6(1)(b) GDPR) | Stored only in your browser until you clear it |
| E.R. PLANNER saved trip and trip emails | Email address, trip dates, the places in your plan, consent date and time, a one-way hash of your IP address | Saving your trip so you can open it on other devices, and sending the plan and the reminders you asked for (7 days and 1 day before you leave) | Your consent, confirmed through the link we email you (double opt-in) | Deleted automatically 60 days after your departure date, or earlier if you click “Delete” in any email or in the planner |
| “Custom itinerary” request | Email address, dates, number of travelers, what you are interested in | Sending you the itinerary you asked for; for groups, companies and VIP requests, replying personally | Performance of your request and your consent | As for the saved trip |
| Newsletter (optional) | Email address, date of consent and confirmation | Sending occasional ideas and offers about Rome | Your separate, optional consent | Until you unsubscribe (one click in every email) |
| Emails you send us | Your email address and what you write | Replying to you | Legitimate interest in answering, or steps taken at your request | As long as needed to handle your message, then up to 24 months |
| Event submission and user accounts | Name, email, username, password (stored encrypted), the content you submit | Letting organizers publish and update their events | Performance of the service you request | Until you ask us to delete the account or the content |
| Legal claims | Any of the above, only where relevant | Establishing, exercising or defending legal claims | Legitimate interest | For the applicable limitation period |
We do not ask for, and ask you not to send us, special categories of data (for example health information).
4. Affiliate links
Many buttons and links on the Site (“See on…”, “Book”, “Tickets”) take you to partner websites such as Tiqets, GetYourGuide, Viator, Booking.com, Hotels.com, Agoda, IHG, TicketOne, Trainline and others, often through affiliate networks (Awin, CJ, TradeDoubler, Travelpayouts) and Amazon. When you click, the partner or the network records the click, usually with a cookie set on its own website, so that we can receive a commission if you buy. We do not receive your name, payment details or what you buy, only aggregated reports. From the moment you land on the partner site, its own privacy policy applies. Details: Affiliate disclosure.
5. Who receives your data
We do not sell your personal data and we do not share it for third-party advertising. Your data is handled by the Controller and by these service providers, which act as processors or as independent controllers as indicated:
- Hostinger International Ltd. (hosting, content delivery network, email): processor.
- Google Ireland Limited / Google LLC: Google Analytics 4 (statistics) and Google Maps (maps), which load only after your consent.
- Automattic Inc.: Jetpack statistics, only after your consent, and the network that delivers the Site’s images (i0.wp.com), which receives your IP address to deliver them and sets no cookies.
- Affiliate networks and partners: independent controllers for what happens on their own sites (section 4).
- Authorities, when the law requires it.
6. Transfers outside the European Economic Area
Some providers (Google, Automattic) are based in the United States or may access data from there. Transfers rely on the EU-U.S. Data Privacy Framework adequacy decision of July 10, 2023, for providers certified under it, and otherwise on the European Commission’s Standard Contractual Clauses (Art. 46 GDPR). You can ask us for a copy of the relevant safeguards.
7. Your rights
Under the GDPR you can ask us at any time to access your data, correct it, delete it, restrict its use, receive it in a portable format, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting what was done before. Write to info@estateromana.com; we reply within one month. You can also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or with the authority of the EU country where you live or work.
8. Visitors from the United States and other countries
The Site is run from Italy and is governed by European data protection law, which applies to everyone who uses it. We do not sell personal information and we do not “share” it for cross-context behavioral advertising as those terms are used in California law. Residents of U.S. states with privacy laws can exercise the rights described in section 7 by writing to the same address. The Site is not directed to children under 16 (under 13 in the United States), and we do not knowingly collect their data.
9. Cookie policy
Cookies are small text files that a website stores in your browser. Similar technologies (local storage, pixels) work the same way and follow the same rules here.
Strictly necessary (always active, no consent needed):
pll_language(estateromana.com, 1 year): remembers the language you chose.er_consent(estateromana.com, 6 months): stores your cookie choices.- WordPress login cookies, only if you log in to submit or edit an event (session, or 14 days if you choose “Remember me”).
- E.R. PLANNER data in your browser’s local storage: keeps your trip on your device; it is never sent to us unless you choose to save the trip with your email.
Statistics (only with your consent):
- Google Analytics 4:
_gaand_ga_BYJ2NQBXMS(estateromana.com, up to 2 years; most browsers cap them at 400 days). They count visits and pages with a pseudonymous identifier. - Jetpack statistics by Automattic: counts page views.
Maps (only with your consent, from the banner or by clicking “Show the map”): Google Maps on listing pages and maps; Google receives your IP address and may set its own cookies.
Fonts and icons are served from our own server: no requests go to Google Fonts or Font Awesome.
Third-party cookies after you click an affiliate link: set on the partner’s own website (section 4), not on ours.
You can accept or reject non-essential cookies in the banner, and change your choice at any time with the “Cookie settings” link at the bottom of every page. Rejecting them does not stop you from using the Site. You can also delete or block cookies in your browser settings (Chrome, Firefox, Safari, Edge) and opt out of Google Analytics with the Google Analytics opt-out add-on.
10. Security
The Site uses HTTPS. Planner data saved on the server is limited to what is listed above, and IP addresses linked to saved trips are stored only as a one-way hash. No system is completely secure; if a breach affects your data, we will act as required by Articles 33 and 34 of the GDPR.
11. Changes
We will update this policy when the Site or the law changes, and show the date at the top. If a change affects consent you gave, we will ask again.