Skip to main content
Your favourites

No saved places yet. Use the heart to save your favourite spots!

🇮🇹 Italiano 🇩🇪 Deutsch 🇳🇱 Nederlands 🇪🇸 Español 🇫🇷 Français 🇵🇱 Polski 🇧🇷 Português
Sirmione Riva del Garda Malcesine Limone sul Garda Lazise Salò See all
Sports & Trails Culture & Museums Events See all
Events Blog
Getting there Ferries Beaches When to visit Webcam Contacts
Lingua
🇮🇹 Italiano 🇬🇧 English 🇩🇪 Deutsch 🇳🇱 Nederlands 🇪🇸 Español 🇫🇷 Français 🇵🇱 Polski 🇧🇷 Português
Legal

Privacy Policy

How we collect, use and protect your personal data under the GDPR

Last updated: 12 March 2026

This privacy policy describes how the website instagarda.net (hereinafter “the Site”) is managed with regard to the processing of personal data of users who consult it, pursuant to EU Regulation 2016/679 (GDPR), Italian Legislative Decree 196/2003 as amended (Privacy Code) and Italian Legislative Decree 101/2018.

1. Data Controller

The Data Controller for the processing of personal data is:

For any request regarding the processing of personal data, you may contact the Data Controller at the email address indicated above.

2. Types of Data Collected

2.1 Browsing data

The computer systems and software procedures used to operate the Site acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected for the purpose of being associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category includes:

  • IP addresses
  • Browser type and operating system
  • Date and time of the visit
  • Pages visited and browsing path
  • Referring site (referrer)

This data is used solely to derive anonymous statistical information about the use of the Site, to check its correct functioning and to identify any anomalies and/or abuses. The data is deleted immediately after processing, unless further processing is necessary for the investigation of criminal offences.

2.2 Data provided voluntarily by the user

The optional, explicit and voluntary sending of messages to the contact addresses of the Site (including the contact form and the email address) results in the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. In particular:

  • Contact form: name, email address, message
  • Newsletter subscription: email address
  • AI Chatbot (Garda Concierge): messages sent to the chatbot are processed in real time to provide answers. They are not stored or associated with the user’s identity. No personal data is collected through the chatbot.

2.3 Cookies

The Site uses technical cookies necessary for its operation. For detailed information on the cookies used, please see our Cookie Policy.

3. Legal Basis for Processing

The processing of personal data is based on the following legal grounds, pursuant to Art. 6 of the GDPR:

  • Consent of the data subject (Art. 6(1)(a)): for sending marketing communications, newsletters, and for the use of analytics and profiling cookies.
  • Performance of a contract or pre-contractual measures (Art. 6(1)(b)): to respond to contact requests and provide the requested services.
  • Legitimate interest of the Data Controller (Art. 6(1)(f)): to ensure the security and correct operation of the Site, to prevent fraud and for aggregate statistical analysis.
  • Legal obligation (Art. 6(1)(c)): when processing is necessary to comply with a legal obligation to which the Data Controller is subject.

4. Processing Methods

Personal data is processed using automated tools for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, unlawful or improper use, and unauthorised access, in compliance with the GDPR.

Processing takes place at the Data Controller’s premises and at the hosting provider’s data centres. Data is processed solely by authorised personnel or by any data processors appointed by the Data Controller.

5. Place of Processing

Data is processed at:

  • Hosting server: SiteGround — data centres located within the European Union (in compliance with the GDPR)

Data is not transferred outside the European Economic Area (EEA), except where necessary for the provision of specific services and always in compliance with the safeguards provided for by the GDPR (e.g. adequacy decisions, standard contractual clauses).

6. Retention Period

Personal data is retained for the time necessary to achieve the purposes for which it was collected:

  • Browsing data: deleted at the end of the session or within 14 days
  • Contact data: retained for the time necessary to manage the request and in any case no longer than 24 months from the last contact
  • Newsletter data: retained until the user unsubscribes
  • Consent cookies: 12 months from the date consent was given

7. User Rights

As a data subject, pursuant to Articles 15-22 of the GDPR, you have the right to:

  • Access (Art. 15): obtain confirmation of the existence of data concerning you and its communication in an intelligible form
  • Rectification (Art. 16): obtain the correction of inaccurate data or the completion of incomplete data
  • Erasure (Art. 17 — the “right to be forgotten”): obtain the deletion of data, in the cases provided for by law
  • Restriction of processing (Art. 18): obtain the restriction of processing in certain cases
  • Portability (Art. 20): receive the data in a structured, commonly used and machine-readable format
  • Objection (Art. 21): object to the processing of data for legitimate reasons
  • Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal

To exercise your rights, you can send a request to info@instagarda.net.

You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8. Third-Party Services

The Site may use the following third-party services:

  • SiteGround (hosting): provides the server infrastructure for the Site. May process browsing data to ensure security and performance. SiteGround Privacy Policy.
  • Google Fonts (web typography): the Site loads fonts from Google Fonts. Google may collect the user’s IP address. Google Privacy Policy.
  • Leaflet / OpenStreetMap (maps): used to display interactive maps. Map tiles are loaded from OpenStreetMap servers. OpenStreetMap Privacy Policy.
  • Claude AI / Anthropic (chatbot): the Garda Concierge chatbot uses the Claude API. Messages are processed in real time and are not stored. Anthropic Privacy Policy.
  • Iubenda (cookie consent management): used to manage the cookie banner and the user’s consent preferences. Iubenda may process technical data (IP address, browsing data) to record consent choices. Iubenda Privacy Policy.
  • OpenFreeMap (map tiles): the Site loads map tiles from OpenFreeMap servers for interactive maps. OpenFreeMap may collect the user’s IP address when maps are loaded. OpenFreeMap website.
  • Esri / ArcGIS (satellite imagery): the Site uses Esri’s World Imagery service to display aerial/satellite imagery on maps. Esri may collect technical data when tiles are loaded. Esri Privacy Policy.
  • OpenTopoMap (topographic tiles): the Site loads topographic tiles from OpenTopoMap servers to display terrain on maps. OpenTopoMap may collect the user’s IP address. OpenTopoMap information.
  • Open-Meteo (weather data): the Site queries the Open-Meteo API to provide up-to-date weather forecasts. Requests may contain geographic coordinates but no identifying personal data. Open-Meteo Terms.
  • unpkg.com (JavaScript CDN): the Site loads the Leaflet library from the unpkg.com CDN. The CDN may collect technical data (IP address, user agent) when downloading resources. unpkg.com.

Links to social networks: the Site contains links to social media pages (Instagram, Facebook, YouTube, TikTok). By clicking these links, you will be redirected to the respective sites, which are subject to their own privacy policies. These links do not install cookies on the Site.

9. Data Security

The Data Controller adopts appropriate technical and organisational measures to protect users’ personal data, including:

  • Encrypted HTTPS/TLS connection across the entire Site
  • Data access restricted to authorised personnel only
  • Regular data backups with secure storage
  • Ongoing updates to software and security systems
  • Protection against unauthorised access through firewalls and monitoring systems

10. Changes to This Policy

The Data Controller reserves the right to modify this policy at any time, notifying users by publishing the updated version on this page. Please check this page regularly.

11. Contact

For any questions or clarifications regarding this policy or the processing of your personal data, you can contact us: