Privacy & Cookie Policy

Last updated: 3 August 2026.
This notice explains how personal data collected through the Saint Elia’s Basilica website is processed under Article 13 of Regulation (EU) 2016/679 (GDPR).

Data controller and contact details

Clivis APS manages public opening and visitor services on behalf of the Municipality of Castel Sant’Elia. It is the controller for data collected through this website’s forms and contact channels.

Data we process

• Wedding and service enquiries: name, email, optional telephone number, preferred date, selected services and message.
• Voluntary contacts: information sent by email, telephone or WhatsApp.
• Technical data: IP address, browser type, date and time, requested resource and security/server log information normally generated by internet protocols.

Visitors cannot create public accounts. Data is not used for profiling or advertising. Contact-form messages are sent to the configured Clivis APS email address and are not used to create visitor profiles.

Purposes and legal bases

• answering requests about information, guided visits, weddings and related services: steps taken at the data subject’s request before entering a contract (Article 6(1)(b) GDPR);
• website security, continuity and abuse prevention: legitimate interests (Article 6(1)(f));
• legal obligations and lawful authority requests: Article 6(1)(c).

The acknowledgement box in the form confirms that the user has read this notice. Data is not used for newsletters or marketing without a separate legal basis.

Required and optional data

Name, email and message are necessary to answer an enquiry. Telephone, preferred date and services are optional but may help us respond. Without the required data, the message cannot be sent or answered.

Recipients and security

Authorised Clivis APS personnel process data with appropriate security measures. Hosting, email, maintenance and technical-support providers may act as processors where necessary. Data may be disclosed to authorities where required by law. It is not sold or made public.

External services

Public pages do not currently embed analytics, advertising, social-media feeds or third-party trackers. WhatsApp, map, social-network and external-site links open independent services only when selected by the user; their own privacy notices then apply.

Retention

Contact enquiries and correspondence are normally retained only as long as necessary and no longer than 24 months after the last exchange, unless legal obligations or the protection of a right require otherwise. Technical logs are normally retained for up to 90 days, except in the event of security investigations or legal duties.

Your rights

Where Articles 15–22 GDPR apply, you may request access, correction, erasure, restriction, portability or objection by writing to info@clivis.it or clivis@pec.it. You may also lodge a complaint with the Italian Data Protection Authority.

Children

Contact services are intended for adults. Enquiries concerning children must be sent by a person holding parental responsibility or legal guardianship.

Cookies and functional storage

Public pages do not use analytics, advertising or profiling cookies. WordPress may use strictly necessary technical cookies for administration, security and service operation. The language suggestion stores only the visitor’s IT/EN preference locally in the browser; it is functional, is not transmitted for advertising or profiling, and contains no personal identifier.

Because only strictly necessary or functional storage is used, no consent banner is displayed. If non-anonymised analytics, embedded tracking content or profiling technologies are introduced, this notice and the consent mechanism will be updated before activation.

Updates

This notice may change following legal, organisational or technical developments. The revision date appears at the beginning of the page.