This Cookie Policy is provided pursuant to Art. 122 of Legislative Decree 196/2003, Directive 2002/58/EC (ePrivacy), and the Garante's «Cookie Guidelines» of 10 June 2021, and supplements the Privacy Policy of the website www.exsurgedomine.org. Controller: Fondazione Exsurge Domine ETS, in the person of its legal representative Don Michael Leoni — info@exsurgedomine.org.
1. What cookies and similar technologies are
Cookies are small files that websites place on the user's device. Similar technologies (e.g. localStorage) store information in the browser for similar purposes. They can be classified as: technical cookies (do not require consent); statistical/analytics cookies (require consent, unless they are anonymous and comparable to technical cookies); and profiling and third-party cookies (require prior consent). They may be first-party (set by the Site) or third-party.
2. Cookies and tools used by this Site
A) Technical and functional — always active, no consent required
| Name | Type | Purpose | Duration |
|---|---|---|---|
ed_session | Technical cookie | Session for the restricted area /admin (collaborators only); httpOnly, secure, SameSite=Lax | 8 hours |
ed-consent | localStorage | Stores the choice made on the cookie banner, so it can be applied and the banner not shown again | Persistent |
B) Statistics — only upon prior consent
The Site uses two measurement tools, both subject to consent to the «statistics» category given through the banner: in the absence of consent neither of them is loaded and no data is transmitted. Consent may be withdrawn at any time from the preferences panel.
B.1) Umami — cookieless
Umami is hosted on infrastructure attributable to the Controller. It does not use cookies, does not set persistent identifiers, and does not retain the IP address in identifiable form: it collects only aggregate and anonymous data. As a matter of caution, it is nonetheless loaded only after consent has been given.
B.2) Google Analytics 4 — with third-party cookies
The Site uses Google Analytics 4 (Google Ireland Limited), a tool required in order to take part in the Google Ad Grants programme reserved for non-profit organisations. Unlike Umami, GA4 installs cookies and assigns an identifier to the device. For this reason it is not loaded in any way before consent is given: no form of prior transmission in anonymous mode is used. If consent is withdrawn, the transmission of data is disabled.
The Controller has configured the property so that «Google signals» are not enabled (no advertising profiling and no cross-device tracking) and so that data retention is limited to 14 months. The IP address is not retained: GA4 uses it solely for approximate geolocation and then deletes it.
| Name | Type | Purpose | Duration |
|---|---|---|---|
_ga | Third-party cookie (Google) | Distinguishes devices in order to count visits | 2 years |
_ga_J9M0WFG0NF | Third-party cookie (Google) | Maintains the state of the measurement session | 2 years |
Google may transfer data outside the European Union (see §6). Provider's notice: Google policy. A browser add-on for opting out, valid across all websites, is also available.
C) Third-party content (multimedia) — only upon prior consent
Some pages may embed third-party videos (e.g. YouTube). This content is not loaded automatically: it is activated only after consent to the «multimedia» category has been given through the banner, or when the user clicks on the preview. Only then may the third-party provider set its own cookies and receive browsing data (including the IP address), in accordance with its own privacy notice.
| Provider | Purpose | When | Notice |
|---|---|---|---|
| YouTube / Google | Video playback | Only upon consent or click on the preview | policy |
Everything else is first-party. Fonts, images and article cover images are hosted by the Controller: until consent is given to the statistical tools or third-party content is activated, no request is sent to third parties — not even to Google. The details used for donations (Stripe, IBAN, 5×1000) do not install profiling cookies on the Site.
3. Legal basis
Technical/functional cookies: legitimate interest / exemption from consent (Art. 122 of the Italian Data Protection Code; Garante Guidelines 2021). Statistical tools (Umami and Google Analytics 4) and third-party content (video): consent (Art. 6.1.a GDPR; Art. 122 of the Italian Data Protection Code), given freely, specifically, and revocable.
4. How to manage consent
On first access, the Site displays a banner that allows the tools subject to consent (statistics and third-party multimedia content) to be accepted or declined with equal ease. Technical cookies are always active because they do not require consent; the others remain disabled until enabled. You can change or withdraw your choices at any time via the «Manage cookies» link in the footer. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Where your choices are stored
- In your browser (
localStorage, keyed-consent): the choice you made, so it can be applied and the banner not shown to you again. It stays on your device and you can delete it from your browser settings. - On the Controller's server (consent log): in order to be able to demonstrate that consent was collected (Art. 7.1 GDPR), a pseudonymous entry is stored — a random identifier, date/time, version of the notice, and the categories chosen. No IP address or other personal data is recorded: the log cannot be traced back to the user.
5. How to manage cookies from your browser
You can also manage or delete cookies from your browser settings; disabling technical cookies may impair the functioning of the Site. Chrome · Firefox · Safari · Edge.
6. Transfers outside the EU
Some providers are based in the United States: the related transfers are governed as described in the Privacy Policy (EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses). In particular, Google LLC — the provider of Google Analytics 4 and of YouTube — adheres to the EU–U.S. Data Privacy Framework, on the basis of the European Commission's adequacy decision of 10 July 2023.
7. Updates
This Cookie Policy may be updated in the event of changes to the Site or to the tools used. The version in force is the one published on this page.
Last updated: 20 July 2026.