Privacy policy

This notice explains how the personal data of visitors to Free Hot Springs of Italy (https://www.termelibere.it) are processed, under EU Regulation 2016/679 (GDPR) and Italian law. The Italian version of this notice is the reference text.

Last updated: 21 October 2026

1. Data controller

The data controller is Terme Libere d'Italia, who can be contacted at [email protected].

2. Data collected and purposes

Browsing data

The site is hosted on Cloudflare Pages. Like any web service, the servers automatically log some technical data (IP address, browser type, pages requested, date and time) needed for the site to work, for security and to prevent abuse. Legal basis: the controller's legitimate interest (Art. 6.1.f GDPR).

Data you send us

If you email us or use the "Report a hot spring" form, which opens your email program, we will process your email address and the information you choose to send us solely to reply and to check your report. Legal basis: carrying out your request (Art. 6.1.b GDPR). The site has no forms that store data on its own servers.

Advertising (Google AdSense)

The site uses Google AdSense to show ads. Google and its partners may use cookies and identifiers to show ads, including personalised ones, and to measure their effectiveness. Consent is collected through Google's certified consent management platform (CMP), which appears on your first visit and lets you accept, refuse or customise your choices. More information: how Google uses information from partner sites.

Affiliate links (Booking.com via CJ Affiliate)

Some links to Booking.com go through the CJ (Commission Junction) affiliate network. When you click one of these links, CJ and Booking.com may record the click and set cookies on their own domains to attribute any booking. This processing is their responsibility, under their own privacy notices.

Stilla, the chat guide

If you write to Stilla, the site's chat assistant, the text of your message and the page you are writing from are sent to the controller's n8n server, which uses Anthropic's Claude model (United States) to reply. No account is needed: please avoid writing personal data in the chat. Messages remain in the server's history for as long as needed to check that the service works and to improve the answers. Legal basis: your request (Art. 6.1.b GDPR). Stilla is only available when that server is running.

Maps (OpenStreetMap)

The maps use the Leaflet library and OpenStreetMap map tiles. To show a map, your browser downloads images from OpenStreetMap's servers, which receive your IP address. Maps are only loaded when you reach the part of the page that contains them.

Fonts (Google Fonts)

The site uses Google Fonts: your browser downloads them from Google's servers, which receive your IP address.

3. Recipients and transfers

Data may be processed by the providers listed above (Cloudflare, Google, OpenStreetMap Foundation, CJ, Booking.com), some of which may transfer them outside the European Union on the basis of the safeguards provided by the GDPR, such as standard contractual clauses or the EU-US Data Privacy Framework.

4. Retention

Emails we receive are kept for as long as needed to handle the request and in any case no longer than 24 months. Technical data and third-party cookies are kept according to the policies of the respective providers.

5. Your rights

You can ask at any time to access, correct or delete your data, to restrict processing, for data portability, and you can object to processing (Arts. 15-22 GDPR), by writing to [email protected]. You can withdraw your consent to personalised ads at any time from the privacy settings (see the Cookie policy). You also have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

6. Changes

This notice may be updated. The date at the top of the page shows the latest revision.