Sights and Wonders of Tremiti
Un'anteprima fotografica dei paesaggi spettacolari, delle calette segrete e delle acque turchesi che potrai ammirare partecipando alle nostre escursioni in barca.
The Diomede Islands: an unspoiled paradise in the Adriatic Sea.
The Tremiti Islands are a natural marine reserve of extraordinary beauty, made up of five islands: San Domino, San Nicola, Capraia, Cretaccio, and Pianosa.
It is the largest island and is famous for its pine forests and picturesque coves, such as Cala delle Arene, the only sandy beach in the archipelago, and for marine caves like the Grotta del Bue Marino.
The historic and monumental island, dominated by the Abbey of Santa Maria a Mare and majestic fortifications that testify to a glorious past.
Capraia is a wild and uninhabited island, a paradise for snorkeling where you can find the submerged statue of Padre Pio. Cretaccio is a small clay rock shaped by the wind.
An integral marine reserve and uninhabited, where nature and marine life reign supreme.
By choosing an excursion with Costantino Tour, you can visit all these paradise spots by sea in total relaxation.
Un'anteprima fotografica dei paesaggi spettacolari, delle calette segrete e delle acque turchesi che potrai ammirare partecipando alle nostre escursioni in barca.
The data controller for personal data is:
For any requests regarding personal data protection, you can write to the email address mentioned above.
This notice is provided in accordance with the Regulation (EU) 2016/679 (GDPR — General Data Protection Regulation) and the Legislative Decree 196/2003 (Code regarding the protection of personal data), as amended by Legislative Decree 101/2018, as well as the Guidelines of the Guarantor for the Protection of Personal Data.
Through the contact form available on the homepage, the user can voluntarily provide:
| Data | Mandatory | Purpose |
|---|---|---|
| First and Last Name | Yes | Identification of the interlocutor |
| Email Address | Yes | Response to the request |
| Phone Number | No | Phone contact upon request |
| Text Message | Yes | Description of the request/booking |
The form is protected by an anti-spam verification system (text captcha "Tremiti") and requires explicit acceptance of this notice (checkbox) before submission.
The site integrates a virtual assistant powered by artificial intelligence (language model via OpenRouter API). When the user interacts with the chatbot:
chatbot_usage table for aggregated statistical purposes (total number of messages per day).The site's internal logging system records the following information for statistical purposes:
| Data | Detail | Retention |
|---|---|---|
| IP Address | Not recorded — replaced with 0.0.0.0 (complete anonymization) | — |
| Browser User-Agent | Type of browser and operating system (truncated to 250 characters) | 90 days |
| URL of the visited page | Path of the page (truncated to 250 characters) | 90 days |
| Referrer | Page of origin (truncated to 250 characters) | 90 days |
| Session ID | Technical session identifier PHP | 90 days |
Note: The anti-refresh system prevents duplicate recordings of the same page in the same session within 5 minutes.
| Purpose | Legal Basis (Art. GDPR) | Description |
|---|---|---|
| Response to contact requests | Art. 6(1)(b) — Execution of pre-contractual measures | The data provided through the contact form is necessary to respond to user requests regarding quotes and excursions. |
| Technical operation of the site | Art. 6(1)(f) — Legitimate interest of the Controller | Session cookies, language preferences, CSRF token for site security. |
| Virtual Assistant (AI Chatbot) | Art. 6(1)(a) — Consent of the data subject | The user expresses consent via the cookie banner before being able to interact with the chatbot. |
| Anonymized traffic statistics | Art. 6(1)(f) — Legitimate interest | Aggregated and anonymous analysis of visited pages to improve the site. The IP is never recorded. |
| Advanced statistical analysis (Google Analytics / GTM) | Art. 6(1)(a) — Consent of the data subject | Activated only upon explicit consent of the user in the "Statistical Cookies" category. |
| Marketing and profiling (Meta Pixel) | Art. 6(1)(a) — Consent of the data subject | Activated only upon explicit consent of the user in the "Marketing Cookies" category. |
| Map display | Art. 6(1)(f) — Legitimate interest | Integration of Google Maps to show the location of the boarding point. |
| Security and abuse prevention | Art. 6(1)(f) — Legitimate interest | CSRF protection, rate limiting, Content Security Policy, HSTS, anti prompt-injection in the chatbot. |
Personal data is processed using automated IT tools, adopting appropriate technical and organizational security measures to ensure an adequate level of protection, including:
| Type of Data | Retention Period | Deletion Mechanism |
|---|---|---|
| Contact Messages | 24 months from the date of sending | Automatic daily deletion (GDPR Auto-Cleanup) |
| Visit Logs | 90 days | Automatic daily deletion |
| Chatbot Statistics | 12 months | Automatic daily deletion |
| Session Cookies | Until the browser is closed | Automatic deletion |
| Language Preference Cookies | Duration of the session | Automatic deletion |
| Consent Cookies | 12 months (365 days) | Natural expiration of the cookie |
The automatic deletion system (GDPR Auto-Cleanup) runs once a day in a transparent and silent manner.
Personal data is not sold, transferred, or disclosed to third parties for the Controller's direct marketing purposes.
Data may be communicated to:
| Service | Provider | Purpose | Conditional on Consent |
|---|---|---|---|
| Google Fonts | Google LLC | Loading of typefaces (Outfit, Inter) | No (only requests for static files) |
| Bootstrap 5 | jsDelivr CDN | CSS/JS framework for layout | No (functional) |
| Font Awesome 6 | Cloudflare CDN | Vector icons | No (functional) |
| Google Maps (iframe embed) | Google LLC | Interactive map of the boarding point | No (functional) |
| Google Analytics | Google LLC | Statistical analysis of traffic | Yes — Statistical Cookies |
| Google Tag Manager | Google LLC | Centralized tag management | Yes — Statistical Cookies |
| Meta Pixel | Meta Platforms Inc. | Measuring advertising conversions | Yes — Marketing Cookies |
| WhatsApp (direct link) | Meta Platforms Inc. | Quick contact via message | No (external link, no data transmitted) |
| OpenRouter API | OpenRouter | AI Chatbot (natural language processing) | Yes — subject to cookie consent |
| Open-Meteo API | Open-Meteo | Real-time weather widget | No (no personal data transmitted) |
Some third-party services (Google, Meta, OpenRouter) may involve the transfer of data to the United States of America or other non-EU countries.
Such transfers occur based on:
| Right | GDPR Article | Description |
|---|---|---|
| Access | Art. 15 | Obtain confirmation of the existence of personal data and access it. |
| Rectification | Art. 16 | Obtain correction of inaccurate or incomplete data. |
| Deletion | Art. 17 | Obtain deletion of personal data ("right to be forgotten"). |
| Restriction | Art. 18 | Obtain restriction of processing in certain cases. |
| Portability | Art. 20 | Receive personal data in a structured and machine-readable format. |
| Objection | Art. 21 | Object at any time to processing based on legitimate interest. |
| Withdrawal of Consent | Art. 7(3) | Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. |
How to exercise your rights: send a written request to: info@costantinotour.it. The Controller will respond within 30 days.
Right to lodge a complaint: The data subject also has the right to lodge a complaint with the Guarantor for the Protection of Personal Data (Website: www.garanteprivacy.it).
The site is not intended for individuals under the age of 16. The Controller does not knowingly collect personal data from minors.
The Controller reserves the right to modify this notice at any time. The updated version will always be available on the website.
Cookies are small text files that websites visited send to the user's device (computer, tablet, smartphone), where they are stored to be retransmitted to the same sites on the next visit. Thanks to cookies, the site remembers the user's actions and preferences (such as language, font sizes, and other display preferences) so that the user does not have to re-enter them every time they return to the site or navigate from one page to another.
The site uses a cookie consent banner compliant with GDPR that:
Consent is saved for 12 months (365 days). After this period, the banner will be presented again.
These cookies are strictly necessary for the functioning of the site and do not require user consent.
| Cookie Name | Provider | Duration | Purpose |
|---|---|---|---|
costantino_session (PHPSESSID) |
Costantino Tour (first party) | Browser session | User session management, authentication in the admin area, CSRF token for form security. |
cookie_consent_costantino |
Costantino Tour (first party) | 12 months (365 days) | Stores user consent preferences (essential, analytics, marketing) in JSON format. |
Data stored in the consent cookie: the cookie cookie_consent_costantino contains a JSON object with three boolean fields:
{
"essential": true,
"analytics": true/false,
"marketing": true/false
}| Cookie Name / Mechanism | Provider | Duration | Purpose |
|---|---|---|---|
Parameter lang in PHP session |
Costantino Tour (first party) | Browser session | Stores the language chosen by the user (it, en, de, fr, etc.) to present content in the preferred language. |
Activated only if the user consents to the "Statistical Cookies" category in the banner.
| Cookie Name | Provider | Duration | Purpose |
|---|---|---|---|
_ga |
Google Analytics (third party) | 2 years | Distinguishes unique users by assigning a randomly generated ID. Included in every page request to calculate data on visitors, sessions, and campaigns. |
_ga_* |
Google Analytics (third party) | 2 years | Used to maintain the session state of Google Analytics 4. |
_gid |
Google Analytics (third party) | 24 hours | Distinguishes users for short-term analysis. |
_gat |
Google Analytics (third party) | 1 minute | Limits the rate of requests to Google Analytics (throttling). |
Google Tag Manager: does not directly install its own cookies but manages the activation of third-party scripts (like Google Analytics) based on user consent.
anonymize_ip). For information on data processing by Google, please consult: policies.google.com/privacy
Activated only if the user consents to the "Marketing Cookies" category in the banner.
| Cookie Name | Provider | Duration | Purpose |
|---|---|---|---|
_fbp |
Meta Pixel / Facebook (third party) | 3 months | Identifies the browser to provide advertising and analytics services for the site. Used by the Meta Pixel for advertising retargeting. |
_fbc |
Meta Pixel / Facebook (third party) | 2 years | Stores the last click on a Facebook ad. |
fr |
Facebook (third party) | 3 months | Used by Facebook to show relevant ads and measure the performance of advertising campaigns. |
| Service | Provider | Type | Purpose |
|---|---|---|---|
| Google Maps (iframe) | Google LLC | Functional | The map embedded in the site may set technical cookies for rendering the map. The integration occurs via iframe embed and does not require client-side API key. |
| Google Fonts | Google LLC | Technical | Loading fonts from Google's CDN may involve transmitting the user's IP address to Google's servers. No profiling cookies are set. |
The site loads static resources (CSS, JS, fonts, icons) from the following Content Delivery Networks (CDN):
| CDN | Loaded Resources | Set Cookies |
|---|---|---|
cdn.jsdelivr.net |
Bootstrap 5 CSS/JS | None |
cdnjs.cloudflare.com |
Font Awesome 6 | None |
fonts.googleapis.com / fonts.gstatic.com |
Outfit and Inter Fonts | None |
These services may log the user's IP address in their access logs for technical and security purposes.
The user can modify their preferences at any time:
The page will automatically reload to apply the new preferences.
The user can also manage cookies through their browser settings:
| Service | Opt-out Link |
|---|---|
| Google Analytics | tools.google.com/dlpage/gaoptout |
| Facebook / Meta | www.facebook.com/ads/preferences |
| Your Online Choices (general) | www.youronlinechoices.eu |
This Cookie Policy may be updated periodically to reflect any changes in the technologies used by the site or in applicable regulations. Users are encouraged to periodically consult this page to review the most recent information.
Utilizziamo cookie tecnici per garantire il funzionamento del sito, cookie analytics per analizzare in modo anonimo il traffico e cookie di marketing per presentare contenuti pertinenti. Puoi accettarli tutti o scegliere quali consentire.