This Cookie Policy is provided pursuant to Art. 122 of Legislative Decree 196/2003, Directive 2002/58/EC (ePrivacy), and the Garante's «Cookie Guidelines» of 10 June 2021, and supplements the Privacy Policy of the website www.exsurgedomine.org. Controller: Fondazione Exsurge Domine ETS, in the person of its legal representative Don Michael Leoni — info@exsurgedomine.org.
1. What cookies and similar technologies are
Cookies are small files that websites place on the user's device. Similar technologies (e.g. localStorage) store information in the browser for similar purposes. They can be classified as: technical cookies (do not require consent); statistical/analytics cookies (require consent, unless they are anonymous and comparable to technical cookies); and profiling and third-party cookies (require prior consent). They may be first-party (set by the Site) or third-party.
2. Cookies and tools used by this Site
A) Technical and functional — always active, no consent required
| Name | Type | Purpose | Duration |
|---|---|---|---|
ed_session | Technical cookie | Session for the restricted area /admin (collaborators only); httpOnly, secure, SameSite=Lax | 8 hours |
ed-consent | localStorage | Stores the choice made on the cookie banner, so it can be applied and the banner not shown again | Persistent |
B) Statistics — Umami, cookieless, only upon prior consent
The Site measures traffic with Umami, hosted on infrastructure attributable to the Controller. Umami does not use cookies, does not set persistent identifiers, and does not retain the IP address in identifiable form: it collects only aggregate and anonymous data. As a matter of caution, the tool is loaded only after the user has given consent through the banner (the «statistics» category); in the absence of consent it is not active. Consent may be withdrawn at any time from the preferences panel.
C) Third-party content (multimedia) — only upon prior consent
Some pages may embed third-party videos (e.g. YouTube). This content is not loaded automatically: it is activated only after consent to the «multimedia» category has been given through the banner, or when the user clicks on the preview. Only then may the third-party provider set its own cookies and receive browsing data (including the IP address), in accordance with its own privacy notice.
| Provider | Purpose | When | Notice |
|---|---|---|---|
| YouTube / Google | Video playback | Only upon consent or click on the preview | policy |
Everything else is first-party. Fonts, images and article cover images are hosted by the Controller: until consent is given to the statistical tools or third-party content is activated, no request is sent to third parties for those purposes. The details used for donations (Stripe, IBAN, 5×1000) do not install profiling cookies on the Site.
3. Legal basis
Technical/functional cookies: legitimate interest / exemption from consent (Art. 122 of the Italian Data Protection Code; Garante Guidelines 2021). Statistical tools (Umami) and third-party content (video): consent (Art. 6.1.a GDPR; Art. 122 of the Italian Data Protection Code), given freely, specifically, and revocable.
4. How to manage consent
On first access, the Site displays a banner that allows the tools subject to consent (statistics and third-party multimedia content) to be accepted or declined with equal ease. Technical cookies are always active because they do not require consent; the others remain disabled until enabled. You can change or withdraw your choices at any time via the «Manage cookies» link in the footer. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
Where your choices are stored
- In your browser (
localStorage, keyed-consent): the choice you made, so it can be applied and the banner not shown to you again. It stays on your device and you can delete it from your browser settings. - On the Controller's server (consent log): in order to be able to demonstrate that consent was collected (Art. 7.1 GDPR), a pseudonymous entry is stored — a random identifier, date/time, version of the notice, and the categories chosen. No IP address or other personal data is recorded: the log cannot be traced back to the user.
5. How to manage cookies from your browser
You can also manage or delete cookies from your browser settings; disabling technical cookies may impair the functioning of the Site. Chrome · Firefox · Safari · Edge.
6. Transfers outside the EU
Some providers are based in the United States: the related transfers are governed as described in the Privacy Policy (EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses).
7. Updates
This Cookie Policy may be updated in the event of changes to the Site or to the tools used. The version in force is the one published on this page.
Last updated: 4 July 2026.