Privacy Policy

This page explains how personal data is handled on www.cielomareterra.org, the biodiversity archive of the Amalfi Coast and Cilento. Last updated: 6 August 2026.

Who processes your data

The data controller is ACARBIO – Associazione Costiera Amalfitana Riserva Biosfera, based in Tramonti (Salerno), Amalfi Coast, Italy. For any request, write to info@riservabiosferacostiera.org.

What data we collect

This site has no contact forms and no public sign-up: we ask for nothing in order to let you read the records. The only data processed is the following:

• Browsing data. Like every web server, ours logs the IP address, date and time of the request, the page requested and the browser type. This keeps the site running and protects it from abuse.
• Visit statistics. Only with your consent, we collect aggregated statistics on which records are read and where visitors come from (see the cookies section).
• Correspondence. If you write to the address above, we process your email address and the content of your message in order to reply.
• Staff area accounts. Volunteers and editors who write the records have an account with a name, an email address and an encrypted password. Accounts are created by us: there is no public registration.

We do not process special categories of data (Art. 9 GDPR), we do not carry out profiling or automated decision-making, and we neither sell nor share data with third parties for commercial purposes.

Legal basis and retention

• Browsing data: legitimate interest in keeping the site working and secure (Art. 6.1.f GDPR). Server logs are kept for the technical period set by our hosting provider.
• Statistics: your consent (Art. 6.1.a GDPR), which you may give or refuse in the banner and withdraw at any time. The data stays in the Google Analytics property for the retention period configured there, in any case no longer than 14 months.
• Correspondence: consent and our legitimate interest in replying. Messages are kept as long as needed to handle the request and no longer than 24 months from the last contact, unless you ask for earlier deletion.
• Staff area accounts: performance of the voluntary collaboration. Data is kept while the account is active and removed when the collaboration ends.

Cookies and statistics

The site uses a single technical cookie, named cmtsess, which keeps the session of those logging into the staff area. It requires no consent.

If you accept in the banner, we load Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), which sets the _ga and _ga_<ID> cookies to tell visits apart. Measurement is configured so that your IP address is anonymised and so that the data is not used for personalised advertising or remarketing. Transfers to the United States rely on the adequacy decision of the EU-US Data Privacy Framework.

Until you choose, no Google script is loaded and no analytics cookie is written. You can change your mind at any time: the Analytics link at the bottom of every page reopens the choice, and declining deletes any cookies already set. You may also use Google's opt-out add-on (tools.google.com/dlpage/gaoptout) or block cookies in your browser settings.

Who else sees the data

Data is processed by ACARBIO staff and authorised volunteers. Our providers, acting as processors or as independent controllers for their own part, are Aruba S.p.A. for hosting, domain and email, and Google Ireland Limited for statistics, if you consented. The maps of places use OpenStreetMap tiles and some videos are embedded from YouTube in no-cookie mode (youtube-nocookie.com): in both cases your browser contacts those services directly when the page loads.

Your rights

At any time you may ask to access your data, correct it, delete it, restrict its processing, receive it in a readable format or object to the processing, and you may withdraw a consent already given (Arts. 15-22 GDPR). Just write to info@riservabiosferacostiera.org: we reply within one month.

If you believe the processing is unlawful, you may lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).