PRIVACY POLICY
LungoCosta.it Privacy Policy
Version 1.0 — 28 September 2026
This Privacy Policy explains how personal data relating to users who visit and use LungoCosta.it is processed.
1. Data Controller
The Data Controller is:
Andrea Moretti
Email: info@lungocosta.it
Website: LungoCosta.it
For any questions concerning the protection of personal data, or to exercise any rights available under applicable data protection law, you may contact the Data Controller at the email address above.
2. Data processed when browsing the Website
The IT systems used to operate the Website collect, as part of their normal operation, certain data whose transmission is inherent in the use of Internet communication protocols.
This may include, for example, IP addresses, information about the browser and device used, the date and time of requests, pages requested, server response codes and other technical data required for the operation and security of the Website.
This data is processed for the purposes of operating, securing, maintaining and protecting the Website.
The legal basis for this processing is the Data Controller’s legitimate interest in ensuring the proper operation and security of the Website, pursuant to Article 6(1)(f) GDPR.
3. Data voluntarily provided by users
When you voluntarily contact an email address provided on the Website, your email address and any other personal data included in your message will be processed to the extent necessary to handle and respond to your request.
The data will not be used for further purposes incompatible with the purpose for which it was provided.
4. Free guide
LungoCosta provides, or may provide, free guides, documents and other editorial content.
The free guide can be downloaded directly from the Website without registering or providing an email address.
You may, if you wish, provide your email address to receive the requested guide as an attachment to an email.
An email address provided for this purpose is used to send the requested guide and to carry out the technical operations strictly necessary for that delivery.
Providing an email address to receive the guide does not subscribe you to the newsletter.
5. Newsletter
Separately from requesting the guide, you may choose to subscribe to the LungoCosta newsletter.
Subscription is optional and requires the user to select a separate, unticked consent box.
You do not need to subscribe to the newsletter in order to:
- download the guide from the Website;
- receive the guide as an email attachment;
- access other freely available LungoCosta content.
The newsletter may contain updates about LungoCosta, new editorial content, itineraries, guides and information about rail travel, as well as information about and links to LungoCosta publications that may be available for purchase through third-party platforms such as Amazon.
The legal basis for processing your email address for newsletter purposes is your consent, pursuant to Article 6(1)(a) GDPR.
You may withdraw your consent at any time by using the unsubscribe link provided in the communications or by contacting info@lungocosta.it.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Operation and security of the Website | technical and browsing data | legitimate interests — Art. 6(1)(f) GDPR |
| Handling communications sent by users | email address and any data included in the message | steps taken at the user’s request and/or legitimate interests, as applicable |
| Sending the requested free guide | email address | performance of the user’s request — Art. 6(1)(b) GDPR |
| Sending the newsletter | email address | consent — Art. 6(1)(a) GDPR |
| Google Analytics 4 | data relating to browsing and interaction with the Website | consent — Art. 6(1)(a) GDPR |
| Compliance with legal obligations | data required in the circumstances | legal obligation — Art. 6(1)(c) GDPR |
7. Google Analytics 4
LungoCosta uses Google Analytics 4 (GA4) to obtain statistical information about how the Website is used.
Google Analytics is activated only after the user has consented to the Analytics category through the Website’s consent management system.
Without such consent, Google Analytics is not activated under the configuration used by LungoCosta.
You may subsequently change or withdraw your consent using the cookie preference control available on the Website.
Further information about the cookies used for Analytics is provided in the Cookie Policy.
8. How data is processed and protected
Personal data is processed using IT and electronic systems in ways appropriate to the purposes described in this Privacy Policy.
The Data Controller adopts technical and organisational measures designed to reduce the risks of loss, unlawful or improper use of data and unauthorised access.
9. Recipients and service providers
Personal data may, where necessary, be processed by parties providing technical services to the Data Controller, including:
- hosting and web infrastructure services;
- services required for the operation of WordPress;
- Website form management;
- email services;
- security and maintenance services;
- Google, in connection with Google Analytics 4, where the user has given the relevant consent;
- any additional providers expressly identified in this Privacy Policy when introduced.
Depending on the service and the relevant legal relationship, these parties may act as processors or as independent controllers.
Personal data is not sold to third parties.
10. Newsletter and future service provider
As of the date of this version, a definitive external service provider for managing the newsletter has not yet been selected.
Before any external provider is put into use, this Privacy Policy will be updated where necessary to include relevant information concerning the processing carried out through that service.
11. Transfers outside the EEA
The use of certain technology providers may involve the processing of personal data outside the European Economic Area.
Where applicable, such transfers will be carried out in accordance with Chapter V GDPR using the mechanisms provided for by applicable law, such as an adequacy decision or appropriate safeguards.
Information relating to the services actually used will be updated in line with the Website’s configuration.
12. Data retention
Personal data is retained for no longer than necessary for the purposes for which it is processed.
In particular:
Technical and security data: for as long as necessary for the operation, security and technical management of the Website, according to the retention periods applied by the systems used.
Email address provided solely to receive the guide: for the time required to send the guide and technically manage the request, subject to any further retention required for security, record-keeping or legal obligations.
Newsletter: until consent is withdrawn or the service is discontinued, without prejudice to the possible retention of information necessary to document consent and its subsequent withdrawal.
Communications voluntarily sent by users: for as long as necessary to handle the request and any related requirements.
Cookie consent: the choice recorded by the MC Policy consent management system is currently stored on the user’s device for 365 days.
13. Providing personal data
Providing an email address in order to receive the guide is optional.
If you do not provide an email address, you can still download the guide directly from the Website.
Consent to the newsletter is also optional. Refusing or withdrawing such consent does not restrict access to the guide or to other Website content.
Consent to Analytics is optional. Refusing Analytics does not prevent normal use of the Website.
14. Cookies
The Website uses technical cookies and, subject to consent, Analytics cookies.
The cookies and technologies actually used and the means available to change your preferences are described in the LungoCosta.it Cookie Policy.
15. Links to third-party services
LungoCosta may contain links to websites and services operated by third parties, including railway operators, public bodies, social networks and platforms through which LungoCosta publications may be available.
When you follow a link and leave LungoCosta for an external website, any processing carried out by that third party is governed by its own privacy policy.
16. Data subject rights
Where provided for by the GDPR, data subjects may exercise the rights set out in Articles 15–22, including the rights of access, rectification, erasure, restriction of processing, data portability and objection.
Where processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
Requests may be sent to:
You also have the right to lodge a complaint with the competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali.
17. Automated decision-making
LungoCosta does not carry out automated decision-making, within the activities described in this Privacy Policy, that produces legal effects concerning the data subject or similarly significantly affects them.
18. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes to the Website, the services used, processing activities or applicable law.
The version number and date of the latest update are shown at the beginning of this page.