Cookie Policy
Version 2.1 — Effective August 4, 2026
This Cookie Policy explains what cookies and similar technologies are, which ones are used on the gaudi.museum website (the "Website") and on other websites owned by Culturae Heritage Services srls (the "Controller"), and how the User can manage their preferences, in accordance with Regulation (EU) 2016/679 (GDPR) and Directive 2002/58/CE (ePrivacy) as they have been incorporated into Italian law.
Manage your preferences: The "Manage cookie preferences" control is available in the footer of all pages of the Website.
1. What are cookies and similar technologies?
Cookies are small text files that websites store on the User's device (computer, mobile phone, tablet). In addition to cookies, equivalent technologies may be used to store or read information on the User's device, in particular, local storage, a browser storage area that, unlike cookies, is not transmitted to the server with each request.
In accordance with Article 5.3 of the ePrivacy Directive, the rules regarding consent apply to any storage of information, or access to information already stored, on the User's device, regardless of the technology used. This policy therefore covers both cookies and local storage.
2. Categories Used on This Website
2.1 Strictly Necessary — Essential for the operation of the Website and for remembering the user's own privacy preferences. They do not require consent.
2.2 Preferences — Stores personalization options chosen by the User. Currently, there are no active technologies of this category on the Website.
2.3 Statistics — Measure how the Website is used (pages visited, session duration, navigation paths) using Google Analytics 4. They require the User's consent.
2.4 Marketing — These are used for personalized advertising, remarketing, and conversion tracking. Currently, there are no active technologies in this category on the Website. This category remains visible in the consent tool so that, if such tools are introduced in the future, they cannot be activated without the User's explicit choice.
3. Consent
The website uses its own (first-party) consent management tool, which is compatible with Google Consent Mode v2, and which:
- It displays an informational banner upon the user's first access and allows the user to accept, reject, or select specific categories.
- It prevents the activation of any non-essential technology before obtaining consent.
- It allows the User to modify or withdraw their consent at any time, with the same ease with which they initially gave it (Article 7.3 of the GDPR), through the "Manage Cookie Preferences" control located in the website footer.
- It records and preserves a record of the user's expressed choice (see section 3.4 of the Privacy Policy for details on the content of this record).
Consent Duration: The choice remains valid for 6 months, after which the User is asked again. The User can modify their choice at any time before this period.
4. How to manage cookies
4.1 From the Website
The user can modify their preferences at any time by using the "Manage cookie preferences" control located at the bottom of every page.
4.2 From the browser
The user can delete or block cookies through their browser settings. Please note that blocking strictly necessary technologies may affect the functionality of the website, including the ability to save your privacy preferences. Guides for major browsers:
5. Technologies Used
| Category | Name | Type | Vendor | Purpose | Duration |
|---|---|---|---|---|---|
| Essential | atlas_consent | Local storage | Own | It preserves the privacy preferences set by the user, so the banner is not displayed again on subsequent visits. | 6 months |
| Essential | atlas_consent_id | Cookie | Own | A randomly generated identifier that links successive interactions from the same visitor (consent confirmation). It does not identify the individual. | 6 months |
| Essential | Cloudflare Browser Insights | Cookie | Cloudflare | This feature distinguishes between human and automated traffic to protect the website from abuse. It is only enabled when the anti-bot protection is activated. | 30 minutes |
| Essential | Atlas newsletter dismissed at [position]. | Local storage | Own | This records the position at which the user closed the newsletter signup form, so that it will not be displayed again on every page. It is only written to the system if the user closes the form. | 30 days |
| Essential | Newsletter subscribed | Local storage | Own | It indicates that a subscription has already been completed from this browser, so the form will not be displayed again. It contains a date, but not the email address. | Until the User clears the browser's cache |
| Statistics (requires consent) | _ga | Cookie | Google Analytics 4 | Distinguish visitors for aggregated traffic measurement. | 24 months |
| Statistics (requires consent) | _ga_<ID> | Cookie | Google Analytics 4 | It maintains the session state for a specific Analytics property. | 24 months |
| Statistics (requires consent) | atlas_ft | Cookie | Own | It records how a user first arrived at the website, including the source and campaign declared in the link (or inferred from the referring website), along with the first page visited and the date. This allows the website administrator to understand which channels are bringing in visitors, without identifying the individual user. This information is only recorded after the user has given consent for data collection, and it is not overwritten by subsequent browsing activity within the website. | 30 days |
The website does not use any advertising technologies, remarketing, profiling, session recording, or heatmaps. No cookies belonging to any social network are used.
The responsible party keeps this table updated with the technologies that are actually in use. Any new additions are published here before the corresponding tool is activated.
6. Supplier Details
6.1 Cloudflare
Cloudflare provides content distribution, DNS, and protection against attacks and abuse services. When anti-bot protection is enabled, it sets a short-lived technical cookie that does not require consent, as it is strictly necessary for the security of the service.
6.2 Google Tag Manager
Google Tag Manager is a tag management system used to load the measurement tools described below. It does not set cookies on its own. Non-essential tags are loaded only according to the choices expressed by the user.
6.3 Google Analytics 4
Google Analytics allows the website owner to analyze, in aggregate form, how the website is being used. Analytics and its cookies are only activated after obtaining consent. If consent is not given, no Analytics cookies are set.
7. Transfers outside the European Economic Area
The use of Google and Cloudflare services may involve the transfer of data to countries located outside the European Economic Area. The data controller relies on Standard Contractual Clauses (Article 46 of the GDPR) and, where available, on the EU-U.S. Data Privacy Framework, along with supplementary measures when necessary. For more details, please see section 7 of the Privacy Policy.
8. Modifications to this Cookie Policy
Each version of this Policy has a version number and an effective date, which are indicated at the top of this page. When a modification introduces a new category or a new non-essential technology, consent will be requested again before that technology is activated.
9. Contact Information
For information about cookies or to exercise your rights regarding privacy: [email protected]