Cookie policy

Cookie policy updated 11 November 2026.

Your choice

On your first visit you can continue without accepting, accept available services or open settings. Scrolling, waiting or navigating never grants consent. Use “Cookie preferences” to change or withdraw consent. Refusal does not prevent reservations. Policies remain accessible before you choose.

Necessary storage

Ital eventi Srl uses the localStorage key maccheroni.consent for format and policy versions, date, expiry and categories. This is not a cookie or a central consent register. A choice is valid for 6 calendar months, without renewal on visits. Expired or invalid choices require a new choice. Expired data may physically remain until replaced or deleted. If storage is blocked, optional services stay disabled and the choice applies only to the current page.

Performance — Google Analytics 4

The confirmed choice for this release is to retain Google Analytics G-8E1C89952Y as an optional statistics service, enabled only after consent to statistics (the performance category), with blocking before a choice and after refusal. The local code keeps ad_storage, ad_user_data and ad_personalization denied, disables Google Signals and advertising personalisation signals, and does not configure user-provided data collection. No marketing services are being introduced. These code restrictions remain distinct from the settings permitted in the Google interface and the limitations of automatic-measurement verification described below.

The local code starts the direct tag G-8E1C89952Y only after performance consent has been saved. No Google Tag Manager container is installed: googletagmanager.com is used to load the GA4 tag. Before a choice or after refusal, local simulated tests observed no Analytics requests or pings, including cookieless pings. The code sends one page_view per page load and navigation clicks with predefined targets; the application commands examined do not include form fields, query strings or fragments. These simulations do not demonstrate the absence of personal data or duplicate events in remote automatic measurements, including possible form interactions. The service is provided by Google Ireland Limited under the standard Analytics terms cited below.

Details verified in the Google Analytics panel: property “Maccheroni — Sito web”, stream “Maccheroni — Web”, URL https://ristorantemaccheroni.com, measurement ID G-8E1C89952Y. Enhanced measurement is enabled. This check identifies the stream but does not demonstrate that tracking is correctly blocked before consent or that events contain no personal data. The actual use of advertising features on the site, the status of the service provided by the studio and the service terms still need to be verified; the Analytics section remains provisional.

According to confirmation from the account creator, the Analytics administrator accounts are limited to the studio and the restaurant; no other users, groups or access by UPANE have been reported. The account screenshot referred to shows both with administrator permissions. These permissions describe technical access and do not automatically determine the studio’s legal role in processing personal data: the status of the service provided by the studio still needs to be clarified.

In the property settings, granular location and device data collection is enabled in all 307 of 307 regions; location is described at city level, not as precise GPS geolocation. Ads personalisation is allowed at property level in all 307 of 307 regions. The earlier screenshots show Google Signals and user-provided data collection as disabled. The “User data collection acknowledgement” section displays an acknowledgement button, labelled “Ne prendo atto” in the Italian panel, which was not pressed during the check.

These settings describe what is allowed in the panel, not what is actually used on the site. They do not demonstrate active campaigns, remarketing or sharing with Google Ads. Nor do they establish that all advertising features are disabled. The “Maccheroni — Sito web” property has no completed Google Ads links, links pending approval or requested links. This is separate from ads personalisation, which remains allowed in the property settings, and does not demonstrate that there are no other advertising tags on the site. The local application code examined does not configure User-ID or user_data and contains no Analytics transmission of form data, including hashed form data. This finding concerns the local sources and does not certify the remote configuration or live site; the User-ID screen only describes the feature.

The verified Analytics data-sharing settings disable sharing for “Google products and services” and contributions to modelling and business insights. Sharing for “Recommendations for your business” is also disabled, while sharing for Google technical support is allowed. This authorisation is separate from the administrator accounts and does not demonstrate that support staff have actually accessed the data. The Google data processing terms provide, for covered services, for processing on behalf of the customer in countries where Google or its subprocessors have facilities, including countries outside the European Economic Area (EEA). According to Google’s international data transfer documentation, covered transfers of EEA data to the United States rely on the EU-U.S. Data Privacy Framework; standard contractual clauses may apply to certain other transfers under the service terms and Appendix 3A. Storage exclusively in Italy or Europe is therefore not claimed. These mechanisms do not automatically guarantee compliance of the entire site. The provider of the standard Google Analytics service is Google Ireland Limited, identified as the contracting party in the official Italian service terms. The provider’s Irish location does not mean that all data remains in the EU. The organisation details in the DPA and the actual application of the terms and transfer mechanism to the service used still need to be verified.

The following retention settings have been verified in the “Maccheroni — Sito web” property: event data 2 months; user data 14 months; “Reset on new user activity” enabled. New activity can therefore restart the user-data retention period. These controls do not affect most standard reports based on aggregated data: they do not mean that all Analytics data is deleted within 2 or 14 months. These periods are separate from the configured lifetime of Analytics cookies (180 days) and the duration of the consent choice (6 calendar months), which remain unchanged.

The expected Analytics library cookies are _ga and _ga_8E1C89952Y. The local code configures a lifetime of 180 days, path / and cookie_update set to false, without requesting renewal on each activity. The actual domain, expiry and renewal of cookies produced by Google’s library must be checked against the actual service: local test cookies are simulated and do not measure that behaviour. Cookie lifetime is separate from the data retention settings in Google systems described above and from the duration of the consent choice. Google cookie documentation · Google privacy policy.

Functionality and advertising

No optional functionality service is embedded. Maps and social accounts are external links. Meta Pixel is not configured, does not load and creates no cookies from this site. No switches are offered for these inactive categories. Adding services requires an updated policy and an assessment of renewed consent.

Withdrawal

Withdrawal disables further events, attempts deletion of accessible optional first-party cookies and reloads the page to stop libraries already executed. It cannot recall requests already sent, erase data already collected by Google or remove inaccessible third-party cookies. You can manage those in your browser settings.

See the Privacy policy for company details, contact, rights and outstanding information.