Cookie policy
This page explains which cookies and similar tools we use, why, for how long, and how you can change your choice at any time.
Who we are and where this policy applies
The data controller is FLOOR S.R.L., Via Arcangelo Ghisleri 22, 26100 Cremona (CR), Italy, VAT no. 01658620198, which runs 10 Manzoni Aparthotel. For any question: info@10manzoni.com.
This policy covers:
- www.10manzoni.com, the 10 Manzoni website (built on the Duda platform);
- prenota.10manzoni.com, the quick booking page;
- book.octorate.com, the booking engine where bookings are completed, run by Octorate on our behalf.
What cookies are
Cookies are small files a website stores in your browser. Some make the pages work; others, only if you agree, count visits or measure the results of ads. By “tools” we also mean the scripts that read or write this data.
Categories and legal basis
| Category | What they are for | Legal basis | Consent |
|---|---|---|---|
| Technical (necessary) | Make the pages and the booking engine work and remember your cookie choice. | Art. 122(1) Italian Privacy Code: no consent needed. | No, always on |
| Statistics | Count visits and page use with Google Analytics 4, to improve the site. | Consent, art. 6(1)(a) GDPR and art. 122 Italian Privacy Code. | Yes, off until you turn them on |
| Marketing | Measure whether a booking comes from one of our ads on ChatGPT, with the OpenAI pixel. | Consent, art. 6(1)(a) GDPR and art. 122 Italian Privacy Code. | Yes, off until you turn them on |
The tools, one by one
Technical
| Name | Provider | Purpose | Duration | First or third party | Domain |
|---|---|---|---|---|---|
10m_consent | 10 Manzoni (FLOOR S.R.L.) | Remembers your cookie choices | 6 months | First party | .10manzoni.com, book.octorate.com |
octobooksessionid | Octorate | Booking session on book.octorate.com | Until the browser is closed | Third party | book.octorate.com |
Statistics
| Name | Provider | Purpose | Duration | First or third party | Domain |
|---|---|---|---|---|---|
_ga | Google (Google Analytics 4) | Tells visitors apart for statistics | Up to 2 years | First party | .10manzoni.com, .octorate.com |
_ga_QCVF2YED2R | Google (Google Analytics 4) | Counts sessions and page views | Up to 2 years | First party | .10manzoni.com, .octorate.com |
Google Tag Manager (container GTM-NZ6SXR8R) is the tool that loads Google Analytics 4 and the OpenAI pixel: it is loaded only after you accept at least one category.
Marketing
| Name | Provider | Purpose | Duration | First or third party | Domain |
|---|---|---|---|---|---|
__obref | OpenAI (pixel ChatGPT Ads) | Random browser code to measure the results of our ChatGPT ads | 365 days | First party | .10manzoni.com, book.octorate.com |
__oppref | OpenAI (pixel ChatGPT Ads) | Remembers the ad click, also on the booking engine | 30 days | First party | .10manzoni.com, book.octorate.com |
oaiq_cs | OpenAI (pixel ChatGPT Ads) | Pixel session | Until the browser is closed | First party | .10manzoni.com, book.octorate.com |
When the OpenAI pixel is active, your browser also contacts OpenAI’s servers, which may set their own technical cookies on their domains.
How consent works
- A banner appears on your first visit. Until you choose, we only use technical cookies: Google Tag Manager and all third-party tools are not loaded.
- “Accept all” turns on statistics and marketing; “Customise” lets you choose category by category.
- “Reject” and the X at the top right of the banner have the same effect: only technical cookies stay on.
- Scrolling or continuing to browse does not count as consent.
- Your choice lasts 6 months; we ask again earlier only if the tools or this information change.
- The choice is shared between the website and the booking page; when you move to the booking engine we carry it in the link, so you do not have to choose again.
- If you withdraw consent, we delete the cookies of that category that we can reach and reload the page.
Changing your choice
You can change your mind at any time here or from the “Cookie preferences” link at the bottom of the pages.
Consent register
- What we record, to be able to prove your choice: a random identifier (also stored in the 10m_consent cookie), date and time, the chosen categories and the type of action (accept, reject, customise, hand-over to the booking engine), the version of the texts, the language, the site and the page (without parameters).
- What we do not record: IP address, user agent, name, email or other data that identify you.
- Where: in the Cloudflare D1 database with EU jurisdiction (the data stay in European Union data centres).
- For how long: 24 months from recording, then they are deleted automatically.
- To exercise your rights on these data, give us the identifier you find in the 10m_consent cookie of your browser.
Providers and transfers outside the EU
These providers are involved in the pages. Where data may leave the European Economic Area, we state the safeguard the transfer relies on.
| Provider | What it does | Company | Transfer outside the EU | Privacy policy |
|---|---|---|---|---|
| Google Analytics 4 and Google Tag Manager (only with consent). The Octorate booking engine also uses Google Maps. | Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland | United States: EU-US Data Privacy Framework and standard contractual clauses | policies.google.com | |
| OpenAI | ChatGPT Ads measurement pixel (only with marketing consent). For these data OpenAI acts as an independent controller. | OpenAI Ireland Limited, 117-126 Sheriff Street Upper, Dublin 1, Ireland | Standard contractual clauses (art. 46 GDPR) | openai.com |
| Cloudflare | Hosting of prenota.10manzoni.com and the consent register (D1 database with EU jurisdiction). | Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA | United States: EU-US Data Privacy Framework and standard contractual clauses | cloudflare.com |
| Octorate | Booking engine on book.octorate.com: technical session cookie and external resources (see below). | Octorate S.R.L., Via Filippo Caruso 23, 00173 Rome, Italy, VAT 13493861002 | Based in Italy; for its providers see Octorate’s policy | octorate.com |
| Duda | Platform www.10manzoni.com is built on. | Duda, Inc., USA | United States: EU-US Data Privacy Framework | duda.co |
| Mapbox | Maps loaded by the Octorate booking engine. | Mapbox, Inc., USA | United States: EU-US Data Privacy Framework | mapbox.com |
| jsDelivr | File delivery network used by the Octorate booking engine. Uses no cookies; receives the IP address. | Volentio JSD Limited, United Kingdom | United Kingdom: see the provider’s policy | jsdelivr.com |
| unpkg | Open-source file delivery network used by the Octorate booking engine; receives the IP address. | Open-source project, hosted on Cloudflare | Not stated by the project | No privacy policy published |
The booking engine on book.octorate.com is run by Octorate. Besides the technical cookie octobooksessionid, its pages load resources from Google Maps, Mapbox, unpkg and jsDelivr: these requests send your device’s IP address to the provider, as for any resource downloaded from the internet. They are Octorate’s technical choices and fall under its responsibility; we do not control them from our banner.
Deleting cookies from your browser
You can also delete or block cookies in your browser settings. If you block technical cookies, some parts (for example booking) may not work.
For Google Analytics there is also Google’s opt-out browser add-on: tools.google.com/dlpage/gaoptout
Your rights
You can ask at any time for access, rectification, erasure, restriction, data portability and object to processing (arts. 15–22 GDPR) by writing to info@10manzoni.com. Withdrawing consent does not affect what was done before. If you think the processing is not lawful, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali.
More information
For other processing (for example bookings and contacts) see the general privacy policy.