Cookie Policy

The Controller is GIOVANNI SANTARPIA S.R.L. SOCIETA’ CON UNICO SOCIO, trading as Pizzeria Giovanni Santarpia, with its registered office and restaurant at Via Senese 155/R, 50124 Firenze (FI), Italy. VAT number and tax code: 07232140488; European VAT number: IT07232140488; REA: FI-689131.

Website: giovannisantarpia.com. Contact: [email protected]; certified email (PEC): [email protected]; telephone: +39 055 936 0052.

For general information about personal data processing and your rights, see the Privacy Policy.

Cookies are small pieces of data stored by your browser on your device. They may last for a session or remain until an expiry date. First-party cookies are set on the domain of the website you visit; third-party cookies are set on other parties’ domains. A first-party cookie can still be used by a third-party service such as Google Analytics or Meta Pixel.

Pixels, scripts and other technologies can also collect or transmit information. The absence of cookies does not itself show that no data is processed: loading an external resource can, for example, disclose your IP address to its server.

• Strictly necessary, technical and functional cookies: support requested functions, such as the website language and recording your choices. Prior consent is not required where they are strictly necessary for communication or for a service you request, under Article 122 of the Italian Privacy Code.
• Statistics: the Google Analytics 4 cookies listed below require prior consent. This configuration is not assumed to qualify for the exemption that can apply to certain strictly limited analytics.
• Marketing: Meta Pixel and its trackers require prior consent.
• Optional external content: maps and social content may load following consent or a specific, informed action, depending on the integration. A simple click does not replace consent where the processing requires it.

Consent to processing through optional tools relies on Article 6(1)(a) GDPR. For technical data needed for operation and security, the requested service or legitimate interests may apply as described in the Privacy Policy. Legitimate interests do not replace consent required for non-essential trackers.

These five entries are first-party cookies associated with giovannisantarpia.com, including those used by Google or Meta. Durations come from the audit of 4 September 2026, rather than providers’ generic default values. In particular, about 180 days were observed for GA4.

Durations may change with configuration, updates and browser limits; some cookies may renew during permitted use. Some browsers may restore a session. Cookie expiry is separate from retention of data already transmitted to a provider. The actual WPML cookie duration in the current configuration is to confirm with legal advisor.

WordPress and WPML: the language cookie supports the bilingual website. WordPress may use authentication cookies for people signing into its restricted administration area; these are not listed as cookies normally observed for anonymous visitors.

YOOtheme and Santarpia Cookie Consent: the website’s in-house system uses YOOtheme consent management and the yootheme_consent cookie to record preferences. Its observed duration is about 30 days. You can reopen the panel through Cookie settings.

Google Analytics 4: measures website use through identifiers and visit information. The _ga and _ga_XSRY4YPD52 cookies belong to the statistics category and require prior consent.

Google Tag Manager: when used, organises tags and scripts. No separate GTM cookie is declared: the enabled tags determine cookies, data and purposes. Whether a GTM container is active remains to be confirmed.

Meta Pixel / Facebook Pixel: uses _fbp for advertising tracking. With marketing consent, it may transmit identifiers, pages visited and interactions, and contribute to advertising measurement and personalisation.

Some Google Consent Mode configurations send signals without cookies. The actual mode and processing of these signals are to confirm with legal advisor. Consent cannot be replaced by the technical Consent Mode setting alone.

Provider information: Google and Meta.

Google Maps displays maps and directions. The website provides a control to activate external content. Once loaded, Google may receive technical data and use its own technologies, subject to the required consent and applicable settings.

Instagram through WP Social Ninja displays the social wall. Loading images from Instagram servers can disclose connection data even without setting cookies. Optional components involving tracking must respect prior consent; their actual blocking or loading behaviour is to confirm with legal advisor.

The available scan does not provide a verified list of additional cookies from this content. Refusing the content may prevent it from being displayed; you can still use the restaurant’s address and contact details.

Guestplan handles table bookings through the widget on the website. The available audit did not detect additional cookies when the widget was opened. This does not mean the service processes no data: booking details and technical data are described in the Privacy Policy. See the Guestplan Privacy Policy.

Cloudflare Turnstile performs technical checks to protect forms against bots and spam. It serves a security purpose, not advertising. The available scan does not document specific Turnstile cookies: any cookies or similar technologies must be assessed against strict necessity and the actual configuration. See the Turnstile privacy notice.

The banner lets you accept or reject optional cookies. In the preference panel, you can choose the available categories or services and save your settings. Strictly necessary cookies remain active. Continuing to browse or scrolling does not constitute consent.

You can change or withdraw your choices at any time through Cookie settings, also available in the footer. Refusing optional tools does not prevent you from reading the website or contacting the restaurant, although the relevant external content may not be displayed.

Withdrawal applies to future processing. It does not affect the lawfulness of earlier processing or automatically delete data already received by providers. See the Privacy Policy for requests about that data. Preferences apply to the browser and device you use.

You can also delete or block cookies and other website data in your browser’s privacy settings. Deleting data may remove saved preferences; blocking all cookies may affect necessary functions, including language handling. Browser controls do not replace the website panel for communicating a changed choice to services.

International services may involve data transfers or access outside the EEA, including in the United States. The Privacy Policy explains the GDPR requirements, Controller contact details, your rights and the option to complain to the Italian Data Protection Authority. The safeguards actually applicable to each provider are to confirm with legal advisor.

This policy should be updated when cookies, services or configuration change. Last updated: 5 September 2026.