Last updated: 27 July 2026
1. Summary
This website sets no cookies — neither technical nor for profiling. Audience measurement is carried out through Google Analytics 4 in a cookieless configuration: no identifier is written to or read from the visitor’s device.
Because no information is stored on or retrieved from the visitor’s terminal equipment, the consent requirement under Article 5(3) of Directive 2002/58/EC (as implemented by Article 122 of Italian Legislative Decree no. 196/2003) does not apply, and no prior consent is required to browse italy4vat.com.
2. Audience measurement — how it is configured
The Data Controller uses Google Analytics 4, provided by Google Ireland Limited, configured so that:
- consent signals are set to
deniedby default and are never raised, includinganalytics_storage: this prevents the measurement tag from writing the_gacookie or any other browser storage entry; - no persistent visitor identifier is stored on the device or reused across visits — each visit is counted independently, and returning visitors cannot be recognised as such;
- Google Signals and advertising personalisation are disabled, and the advertising consent signals (
ad_storage,ad_user_data,ad_personalization) are likewise set todenied; - the visitor’s IP address is used by Google transiently to derive an approximate location and is not recorded in the reports available to the Data Controller.
The resulting reports are aggregate: page views, referring channels, approximate country, and device category. They do not allow the Data Controller to single out an individual visitor.
Legal basis: the Data Controller’s legitimate interest in understanding which pages of the site are reached from search, pursuant to Article 6(1)(f) GDPR. Since no identifier is stored on the device, this processing does not rest on consent. The data subject may object at any time under Article 21 GDPR — see the Privacy Policy.
Retention: aggregate measurement data is retained in the Analytics property for no longer than 14 months, after which it is deleted by the provider.
Transfers: measurement data is transmitted to Google LLC (United States). Transfers are governed by the European Commission’s Standard Contractual Clauses and by Google’s Data Processing Terms. Details in section 5 of the Privacy Policy.
Should the visitor prefer that no measurement occurs at all, Google publishes a browser opt-out add-on, and any browser-level tracking-protection setting is equally effective.
3. Infrastructure logs
The hosting provider (Cloudflare, Inc.) may retain edge request logs for strictly operational and security purposes — DDoS mitigation, abuse prevention, and platform diagnostics — pursuant to its own privacy policy. Such logs are not accessible to the Data Controller as analytics, are not used to profile visitors, and are retained by the provider according to its standard retention windows.
4. Third-party services not used
For the avoidance of doubt, this website does not use:
- Google Tag Manager, Google Ads, or any advertising or remarketing tag;
- Meta Pixel, LinkedIn Insight Tag, or other advertising-platform trackers;
- Google Fonts or other externally hosted font services (fonts are served from the Data Controller’s own domain);
- Embedded media (YouTube, Vimeo, social timelines) or chat widgets that would set cookies on the visitor’s device.
5. Contact and references
For any question regarding this Cookie Policy, or to exercise the rights described in the Privacy Policy, the data subject may write to rome@italy4vat.com.
Data Controller: Italy4VAT S.r.l., registered office in Rome, Italy.