Cookie Policy
This Cookie Policy describes which cookies and similar technologies are used on the regiasuite.com website, the purposes for which they are used, and how the user can manage their preferences. This policy forms an integral part of the Website Privacy Policy, to which we refer for the general processing of personal data.
Cookies are small text files that visited websites save on the user’s device (computer, tablet, smartphone) to store information that can be reused on subsequent visits. They are used to make the site work, to improve its performance, or to provide statistical information about usage.
In addition to traditional cookies, the site may use similar technologies with analogous purposes: web storage (localStorage, sessionStorage), pixel tags, device identifiers. In this policy, unless otherwise specified, the term “cookie” refers to all these technologies.
Cookies can be classified according to different criteria:
- By origin: first-party cookies (set by the visited site — regiasuite.com) and third-party cookies (set by external domains called by the site, e.g. YouTube, Google).
- By duration: session cookies (deleted when the browser is closed) and persistent cookies (kept for a defined period).
- By purpose: technical/necessary cookies (exempt from consent), functional cookies (require consent), analytics cookies (require consent, except for specific exceptions), profiling/marketing cookies (require consent).
The use of cookies on the regiasuite.com website is governed by:
- Regulation (EU) 2016/679 (GDPR) — legal basis for the processing of any personal data collected via cookies;
- Directive 2002/58/EC (ePrivacy) and subsequent amendments;
- Where applicable, the Italian Data Protection Authority’s Guidelines on cookies and other tracking tools (10 June 2021).
In compliance with these rules:
- Technical/necessary cookies are installed without prior consent (Art. 122 of Italian Legislative Decree 196/2003 and the Authority’s Guidelines).
- All other cookies (functional, third-party analytics non-anonymised, marketing) are installed exclusively after the free, specific, informed and revocable consent of the user (Art. 6 and 7 GDPR).
On the user’s first visit to the site, a consent banner managed via CookieYes (provided by CookieYes Ltd) is displayed, allowing the user to:
- Accept all cookies (“Accept All” button);
- Reject all non-strictly-necessary cookies (“Reject All” button);
- Customise preferences by category, individually selecting which cookies to activate (“Customise” / “Save My Preferences” button).
Until the user expresses their choice on the banner, only strictly necessary technical cookies are installed. All other cookies remain blocked.
The user’s choice is recorded by CookieYes with proof of consent (timestamp, choice made, anonymous identifier) and kept for 12 months, after which the banner will be displayed again.
Below is the list of cookie categories used on regiasuite.com, with details of individual cookies, their purpose, and their duration.
Technical / Strictly Necessary Cookies
These cookies are essential for the proper functioning of the site and its basic services (authentication, WooCommerce cart management, language selection, form security). They do not require user consent under Art. 122 of the Italian Privacy Code and Authority Guidelines. Without these cookies, the site cannot work properly.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| wordpress_* | WordPress (first party) | Maintains authentication session for logged-in users | Session |
| wordpress_logged_in_* | WordPress (first party) | Identifies authenticated users | Session |
| wp-settings-* | WordPress (first party) | Stores visual preferences for registered users | 1 year |
| woocommerce_cart_hash | WooCommerce (first party) | Stores the contents of the shopping cart | Session |
| woocommerce_items_in_cart | WooCommerce (first party) | Counts items in the cart | Session |
| wp_woocommerce_session_* | WooCommerce (first party) | Manages the user session during checkout | 2 days |
| pll_language | Polylang (first party) | Stores the language selected by the user | 1 year |
| cookieyes-consent | CookieYes (first party) | Stores the consent preferences expressed by the user | 1 year |
Note: SureForms (the plugin used for contact forms) only uses temporary security tokens (nonces) to prevent CSRF attacks. These tokens are part of WordPress’s security mechanism and do not constitute trackable cookies.
Functional Cookies (third party)
These cookies allow the site to provide advanced functionality offered by third parties, such as displaying embedded videos. They require the user’s prior consent. If the user does not consent, the related features remain disabled or limited.
Some pages of the site may contain tutorial videos embedded via the YouTube service, provided by Google LLC. To reduce the privacy impact, the site uses the “youtube-nocookie.com” domain (YouTube’s “Privacy-Enhanced Mode”), which delays the installation of some cookies until the user actually interacts with the video.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| VISITOR_INFO1_LIVE | YouTube (youtube-nocookie.com) | Estimates the user’s bandwidth to optimise playback | 6 months |
| YSC | YouTube | Records a unique ID to keep video view statistics | Session |
| __Secure-YEC | YouTube | Security and performance cookie | 1 year |
| __Secure-ROLLOUT_TOKEN | YouTube | Manages the rollout of YouTube features | 6 months |
More information on YouTube cookies: policies.google.com/privacy.
Analytics Cookies (third party)
These cookies collect aggregate information about site usage (pages visited, session duration, traffic source, country of origin) to enable the Controller to understand how to improve the site. They require the user’s prior consent.
The site uses Google Analytics 4, a statistical analysis service provided by Google LLC. GA4 is configured in a privacy-respectful mode:
- Prior consent: GA4 cookies are installed exclusively after the user’s explicit acceptance via the CookieYes banner;
- Google Consent Mode v2 active: limits data transmission to Google until consent has been given;
- IP anonymisation enabled by default in GA4;
- The data collected is used exclusively in aggregate form for statistical purposes.
| Cookie name | Provider | Purpose | Duration |
|---|---|---|---|
| _ga | Google Analytics | Unique identifier to distinguish users | 2 years |
| _ga_* | Google Analytics | Maintains session state (specific to each GA4 property) | 2 years |
| _gid | Google Analytics | Distinguishes users during the session | 24 hours |
Data collected via Google Analytics may be transferred to the United States. Such transfers take place under Google LLC’s certification to the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission Decision of 10 July 2023 pursuant to Art. 45 GDPR. More information: www.dataprivacyframework.gov.
Google Analytics privacy policy: policies.google.com/privacy · Direct opt-out: tools.google.com/dlpage/gaoptout.
The list of cookies above is kept up to date by the Controller following changes to the site or the introduction of new third-party services. Any changes will be reflected in this policy with the last update date indicated in the header.
In addition, the CookieYes system periodically performs an automatic scan of the site to detect new cookies and update its categorisations.
Newsletter subscription, when activated in the future, will take place via a dedicated form on the site. The technical provider used for the newsletter may install functional cookies to measure email opens and clicks; such cookies will be installed exclusively after the user voluntarily subscribes and will be described in this policy as soon as the service is operational.
Regardless of the consent banner, the user can always manage or disable cookies directly from their browser settings. Below are links to the official instructions of the main browsers:
The user’s rights regarding personal data protection (access, rectification, erasure, restriction, objection, portability, withdrawal of consent, complaint to the supervisory authority) are described in detail in the Website Privacy Policy, Section 12, to which we refer.
To exercise their rights in relation to cookies and data collected through them, the user can:
- Modify their preferences via the “Cookie Settings” button in the site footer;
- Write to privacy@regiasuite.com;
- Lodge a complaint with the competent supervisory authority (in Italy: Garante per la protezione dei dati personali).
- Company: FIDES FABER MOTUS S.R.L.
- VAT code: C.F. 14585740963
- Registered office: Via Vincenzo Monti 7, 20123 Milan (MI), Italy
- Privacy contact: privacy@regiasuite.com
This Cookie Policy may be updated to reflect technical changes to the site, the introduction of new third-party services, or regulatory changes. The updated version will be published on this same page with indication of the last update date. For substantial changes, registered users will be notified by email and/or via the CookieYes banner, which will request consent again.