Cookie Policy
This Cookie Policy explains how Vincenzo Pistoia (VAT 04353620711), owner of Creti Room GuestHouse (website cretiroom.it), uses cookies and similar tools during browsing and the digital services linked to the stay (in particular self check-in and access guide).
For the processing of guests’ personal data (document, biometrics, communications to the authorities, etc.) please refer to the Guest privacy notice.
1. What cookies are
Cookies are small text files that a website may save on the user’s device. They may be first-party (set by this site) or third-party (set by different domains). Similar technologies also exist, such as the browser’s localStorage / sessionStorage.
2. Which cookies we use
On the public website and in guest flows we use only technical / necessary cookies, essential for the service to work. We do not use profiling, marketing or analytics cookies (e.g. Google Analytics, Meta Pixel) on public browsing.
| Name | Type | Purpose | Duration |
|---|---|---|---|
creti-room-guesthouse-session |
Technical (first-party) | Maintains the browsing session (e.g. form state, system messages, reserved area authentication) | About 7 days of inactivity (or until the configured server expiry) |
XSRF-TOKEN |
Technical (first-party) | Protection against CSRF attacks on site requests | Aligned with the session |
2.1 Local storage (not cookies)
On some check-in pages the browser’s localStorage may be used to avoid repeated submission of the same form or to remember a temporary technical state on the guest’s device. These data remain on the device and are not HTTP cookies.
3. Third-party services and any cookies
Some features load scripts or resources from external providers. As a rule we do not install marketing cookies; however, when the guest uses a specific function, the provider may set its own technical cookies or storage, for example:
- Amazon Web Services / Amazon Rekognition — during facial verification (Face Liveness), to make the real-time recognition widget work (typical region:
eu-west-1); - CDN and libraries (e.g. Bootstrap, jQuery, Leaflet/maps) — needed for UI and maps; they do not normally perform advertising tracking;
- Maps / geolocation — GPS location is requested from the browser only when the «on-site» check is needed; it is not a continuous tracking cookie.
For details on the processing of personal data linked to such services, see the Guest privacy notice.
4. Legal basis and consent
Technical / necessary cookies do not require the user’s prior consent, because they are strictly necessary to provide the requested service (Art. 122 of the Italian Privacy Code and the Garante Cookie Guidelines, within the applicable limits).
If analytics or marketing cookies are introduced in the future, this Cookie Policy will be updated and, where required, a consent banner will be shown before they are activated.
5. Managing and disabling cookies
You can delete or block cookies from your browser settings. Disabling technical cookies may prevent check-in, access to the reserved area or other site functions from working correctly.
Useful guides from the main browsers:
6. Controller and contacts
- Vincenzo Pistoia — VAT 04353620711
- Address: Via Donato Creti 49, Bologna, 40128
- Email: info@cretiroom.it or vincenzo.pistoia94@gmail.com
7. Updates
This Cookie Policy may be amended in case of technical or regulatory changes. The current version is indicated at the top of the page.