Last updated: 23 September 2026
1. Data Controller
The Data Controller of the personal data collected through the Website is Guglielmo Valia, owner and manager of the Gugsto.it editorial project.
Email: gugsto.it@gmail.com
For any request concerning the processing of personal data or the exercise of rights under applicable data protection legislation, the Data Controller may be contacted at the email address indicated above.
2. Types of Data Processed
The following categories of personal data may be processed when using the Website.
2.1 Browsing and Technical Data
The IT systems and software used to operate the Website may acquire, as part of their normal operation, certain technical data relating to browsing activity.
Such information may include, by way of example, IP address, browser and device type, operating system, date and time of requests, requested pages, technical information relating to connections, and other data necessary for the proper functioning and security of the Website.
These data are used to enable browsing, ensure the technical operation of the Website, prevent abuse and unauthorised access attempts, and identify potential security issues.
2.2 Data Relating to Comments
When a user posts a comment on an article on the Website, the data entered in the relevant form are processed, in particular:
- name or pseudonym;
- email address;
- optional website address;
- content of the comment.
WordPress may also record technical information associated with the comment, such as the IP address and browser user-agent, including for security, spam prevention and comment management purposes.
The name or pseudonym and the content of the comment are published on the Website and are therefore visible to other users.
The email address is not published.
Any website address provided by the user may be publicly associated with the name used for the comment.
2.3 Voluntary Communications by Email
The Website does not use contact forms.
The voluntary sending of communications to the email address published on the Website entails the processing of the sender’s email address and any other personal data contained in the communication, solely to the extent necessary to handle and respond to the request.
3. Purposes and Legal Bases for Processing
Personal data may be processed for the following purposes:
Operation and use of the Website
Processing of technical data necessary to provide the pages and functions requested by the user.
Legal basis: performance of the user’s request and the Data Controller’s legitimate interest in ensuring the proper operation of the Website.
Website security and prevention of abuse, spam and unauthorised access
Processing of technical data, including, where necessary, IP addresses and information relating to requests made to the server.
Legal basis: the Data Controller’s legitimate interest in protecting the Website, its systems and its users.
Management and publication of comments
Processing of data voluntarily provided by the user in order to enable the publication and management of the requested comment.
Legal basis: performance of the user’s request and legitimate interest in managing editorial activities and interactions with readers.
Management of communications received by email
Processing of data necessary to read, manage and respond to communications voluntarily sent by the user.
Legal basis: taking steps at the request of the data subject and, depending on the nature of the communication, the Data Controller’s legitimate interest.
Compliance with legal obligations
Data may be processed where necessary to comply with obligations imposed by applicable law or with lawful requests from competent authorities.
Legal basis: compliance with a legal obligation.
Cookies and technologies subject to consent
Where cookies or technologies are used for which applicable legislation requires the user’s consent, the related processing is carried out on the basis of the consent expressed through the preference management system.
For further information, please refer to the Website’s Cookie Policy (EU).
4. Comments and Spam Prevention
The Website allows users to comment on articles.
To protect the commenting system against spam, bots and automated use, the Website uses Cloudflare Turnstile, a service provided by Cloudflare.
Turnstile performs technical checks designed to distinguish human users from automated traffic. As part of these checks, technical data and signals relating to the connection and device may be processed, including the IP address, user-agent and other technical information necessary for the operation of the service.
Cloudflare states that Turnstile does not access the content of comments or other data entered by the user in the fields on the page for the purpose of performing its anti-spam verification.
Further information on the processing carried out through Turnstile is available in the specific information provided by Cloudflare.
5. Website Security and Wordfence
The Website uses Wordfence Security to help protect the WordPress installation against unauthorised access, cyberattacks, malware and other potentially harmful activities.
For these purposes, technical data relating to requests made to the Website may be processed, including IP addresses and information concerning the browser and connection.
The Live Traffic feature is configured in “Security Only” mode and logging is therefore used for security purposes.
Data recorded through Live Traffic are retained according to the Website’s technical configuration for a maximum of 30 days, with a maximum limit of 2,000 records, without prejudice to any data that may need to be retained for a longer period for the management and documentation of specific security incidents.
Wordfence may also use remote services necessary for its security functions, including the approximate geolocation of IP addresses.
6. Hosting and Infrastructure
The Website is hosted on infrastructure provided by Aruba S.p.A.
As part of the provision of hosting services, data necessary for the operation of the Website may be stored and processed on the provider’s infrastructure.
Aruba states that its main hosting services are managed within data centres located in Italy.
The infrastructure may also include technical backup and recovery systems designed to ensure service continuity, security and recoverability.
7. Cookies and Similar Technologies
The Website uses cookies and similar technologies necessary for technical operation and for managing user preferences.
Any cookies or technologies that are not strictly necessary are used, where required by applicable legislation, only after obtaining the user’s consent.
Consent may be refused or subsequently changed through the preference management system available on the Website.
Consent preferences are stored in the browser for the period specified in the Cookie Policy.
For detailed information on the cookies and technologies used, their purposes and retention periods, please refer to the Cookie Policy (EU).
8. External Services and Data Recipients
Personal data may be processed, to the extent necessary for their respective functions, by parties providing technical services to the Website.
The main parties and services actually used include:
- Aruba S.p.A., for hosting and infrastructure services;
- Cloudflare, through the Turnstile service used to protect comments against spam;
- Wordfence / Defiant, for WordPress Website security functions.
Data may also be disclosed to authorised parties where necessary to comply with legal obligations, protect the Data Controller’s rights or respond to lawful requests from competent authorities.
The Website may contain links to external websites and services. A simple link to an external website does not in itself result in the transmission of the user’s data to that service by Gugsto.it. When the user chooses to follow such a link, any subsequent processing carried out by the destination website is governed by that website’s own privacy notices.
9. Transfers of Data to Countries Outside the EEA
The hosting infrastructure used for the Website is provided by Aruba, which states that its main hosting services are operated from its data centres in Italy.
Some technology providers used for Website security, particularly Cloudflare and services associated with Wordfence, may involve the processing of data by entities established or operating outside the European Economic Area.
Where processing involves an international transfer of personal data, such transfer must take place in accordance with the conditions set out in Articles 44 et seq. of the GDPR, on the basis of an applicable adequacy decision or through appropriate safeguards provided for by applicable legislation, such as the Standard Contractual Clauses approved by the European Commission, where applicable.
Cloudflare provides contractual data-processing terms that include mechanisms and safeguards for international transfers, including the European Union Standard Contractual Clauses.
10. Retention Periods
Personal data are retained for no longer than is necessary for the purposes for which they are processed.
In particular:
- comments: the comment and the data associated with it are retained until the comment is deleted, unless further retention is necessary to comply with legal obligations or protect legal rights;
- email communications: these are retained for the time necessary to manage the communication and any resulting relationship, as well as for any additional periods required by law or necessary for the protection of legal rights;
- Wordfence security data – Live Traffic: for a maximum of 30 days and 2,000 records according to the Website’s configuration, without prejudice to specific security incidents;
- cookie and consent preferences: according to the periods specified in the Cookie Policy; Complianz preferences are currently stored in the browser for approximately one year;
- data contained in backup copies: for the period provided for by the provider’s technical backup and recovery systems, with progressive overwriting in accordance with the relevant procedures.
When retention is no longer necessary, data are deleted, anonymised or otherwise made unavailable for further use, subject to any obligations imposed by law.
11. Nature of the Provision of Data
The provision of browsing data necessary for the technical operation of the Website is inherent in the use of the service itself.
To publish a comment, users must provide the data indicated as mandatory in the relevant form. Failure to provide such data prevents publication of the comment.
Providing a website address in the comment form is optional.
Sending communications by email is voluntary.
Consent to non-essential cookies and technologies is optional, and refusal does not prevent access to the essential content of the Website.
12. Data Subject Rights
In the cases provided for by the GDPR, data subjects may exercise the rights granted under Articles 15 et seq. of the Regulation, including the right to:
- obtain confirmation as to whether or not personal data concerning them are being processed and access such data;
- request their rectification or updating;
- request their erasure in the cases provided for by law;
- request restriction of processing;
- object to processing in the cases provided for;
- request data portability, where applicable;
- withdraw consent previously given at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Requests may be sent to gugsto.it@gmail.com.
Data subjects also have the right to lodge a complaint with the competent supervisory authority. In Italy, this is the Garante per la protezione dei dati personali, in accordance with the procedures provided for by applicable legislation.
13. Data Security
The Data Controller adopts technical and organisational measures designed to protect personal data against unauthorised access, loss, destruction, disclosure or improper alteration.
However, no IT system or Internet-accessible service can guarantee absolute security.
14. Changes to this Privacy Policy
This Privacy Policy may be updated to reflect changes in applicable legislation, technical developments or changes to the services used by the Website.
The updated version will be published on this page, together with the date of the latest update.
DISCLAIMER AND TERMS OF USE
15. Nature of the Content
Gugsto.it is an editorial project dedicated to places, experiences, travel, food & wine, lifestyle, culture, art, hospitality, design, recreational activities and other topics covered on the Website.
The content published is primarily intended for journalistic, informational, editorial, cultural and educational purposes and may reflect the experiences, assessments, opinions and personal views of its authors.
Unless expressly stated otherwise, the publication of content relating to places, establishments, products, services, activities, brands or experiences does not constitute a commercial offer and does not necessarily imply the existence of sponsorship, collaboration, affiliation or endorsement by the parties mentioned.
Any collaborations, sponsored content, invitations, products received, partnerships or other forms of commercial relationship will be disclosed where required by applicable law or where relevant to a proper understanding of the nature of the content.
15.1 Content Relating to Alcoholic Beverages and Tobacco Products
As part of its editorial and informational activities, Gugsto.it may publish content relating to wines, spirits, alcoholic beverages, cigars, tobacco and other products intended exclusively for adult consumers.
Such content is provided solely for journalistic, informational, cultural and lifestyle purposes and is not intended to promote or encourage the consumption of alcohol or tobacco products.
Gugsto.it does not sell or distribute alcoholic beverages or tobacco products.
Content relating to such products is intended for an adult audience.
Tobacco use poses serious health risks; alcoholic beverages should be consumed responsibly and in accordance with applicable legal restrictions.
16. Intellectual Property of Texts and Editorial Content
Unless otherwise stated, the original texts of articles, pages and other editorial content published on Gugsto.it are owned by their respective authors and/or Gugsto and are protected by applicable copyright and intellectual property laws.
The full reproduction, publication, distribution, modification, adaptation or commercial use of original texts and content is not permitted without the prior authorisation of the relevant rights holder.
Short quotations or excerpts may be used for informational, commentary or reference purposes within the limits permitted by applicable law, provided that the author, where available, and Gugsto.it as the source are clearly identified, with a link to the original page when published online.
Sharing content through the social sharing features provided on the Website does not result in any transfer of intellectual property rights.
Trademarks, trade names, logos and other distinctive signs belonging to third parties remain the property of their respective owners.
17. Images and Third-Party Materials
Images, videos and other multimedia materials appearing on the Website may be original, licensed, supplied by establishments, brands, press offices, agencies or other parties, or used in accordance with the terms applicable to their respective sources.
Credits and attribution are provided where required or appropriate.
The presence of images, trademarks, logos or materials attributable to third parties does not necessarily imply the existence of a commercial relationship, sponsorship or mutual endorsement.
If a rights holder believes that an image or other material on the Website has been published without the necessary authorisation or with incorrect attribution, a report may be sent to:
The report will be reviewed and, where substantiated, the relevant credits will be corrected or the material removed promptly.
18. Links to External Websites
The Website may contain links to websites, services and platforms operated by third parties.
External links are provided for informational or reference purposes and to allow users to access resources, establishments, activities, products or services mentioned in editorial content.
Gugsto.it has no control over the content, terms of use, privacy policies, security or availability of external websites and therefore cannot assume responsibility for the content, changes or services offered by them.
Access to external websites is at the user’s discretion and is subject to the terms and notices established by their respective operators.
19. Accuracy and Updating of Information
Website content is prepared with care and on the basis of information available at the time of publication.
Information concerning, for example, establishments, locations, prices, opening hours, menus, services, events, availability, products, itineraries or other circumstances described in articles may change over time.
Gugsto.it therefore does not guarantee that all published information will at all times be complete, error-free or up to date.
Before making reservations, purchases, travel arrangements or other decisions based on information published on the Website, users should verify that the information is current directly with the relevant establishments, providers or sources.
20. Comments and User-Generated Content
Users may post comments in areas of the Website where this feature is available.
Users are responsible for the content of their comments and agree not to publish unlawful, offensive, defamatory or discriminatory content, content that infringes third-party rights, personal data relating to third parties without authorisation, spam or any other material contrary to applicable law.
Gugsto.it reserves the right to moderate, reject or remove comments considered manifestly inappropriate, unlawful, abusive, irrelevant or attributable to spam, subject to applicable law.
Publication of a comment does not imply that Gugsto.it shares or endorses its content.
For information concerning the processing of personal data associated with comments, please refer to the Privacy Policy above.
21. Limitation of Liability
To the extent permitted by law, Gugsto.it shall not be liable for any damage arising from the use of the Website, temporary inability to access it, reliance on information published on it, or use of third-party websites and services accessible through links on the Website.
The content published on the Website is editorial and informational in nature and does not replace, where necessary, information, guidance or professional advice provided directly by competent parties, the providers of the services described or qualified professionals.
Nothing in this clause is intended to exclude or limit any liability that cannot lawfully be excluded or limited under applicable law.
22. Changes to the Disclaimer and Terms of Use
Gugsto.it may update this Disclaimer and these Terms of Use to reflect changes in applicable legislation, editorial or organisational arrangements, or the features and services of the Website.
The updated version will be published on this page.
Use of the Website is subject to the version of the Disclaimer and Terms of Use in force at the time of access.