Legal

The controller is Roberto Galati, operating Essential City Info. For personal-data requests contact support@essentialcityinfo.com.

If you create an account, we process email, authentication data and profile information you provide. Passwords are managed by the authentication service.

With analytics consent, visited pages, interactions and session identifiers may be processed. Technical providers may receive IP addresses, browser details and diagnostic data to deliver and protect the service.

GPS location is used to calculate distances on your device. Address search sends the entered address to the geocoding service. Favourites remain in your browser; reports, ratings and support requests are data you choose to submit. Do not include health or other sensitive data in free-text fields.

Providing the Service (showing nearby points of interest, ZTL zones, transit, alerts) — legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legitimate interest in operating the Service (Art. 6(1)(f)).

Authentication and account management — legal basis: performance of a contract (Art. 6(1)(b)).

Geolocation features — legal basis: your explicit consent (Art. 6(1)(a)), revocable at any time via your browser/device settings.

Security, fraud prevention, abuse mitigation — legal basis: legitimate interests (Art. 6(1)(f)).

Analytics and product improvement (if and when enabled) — legal basis: your consent (Art. 6(1)(a)) collected via cookie banner.

Compliance with legal obligations (e.g. responding to lawful requests from competent authorities) — legal basis: legal obligation (Art. 6(1)(c)).

Handling user feedback or support requests — legal basis: legitimate interest (Art. 6(1)(f)).

Lovable Cloud supports accounts, data and hosting; Cloudflare contributes to site delivery and security.

With Analytics consent we use Google Analytics 4, Microsoft Clarity and internal statistics. See Google’s policy (https://policies.google.com/privacy) and Microsoft’s statement (https://privacy.microsoft.com/privacystatement). Clarity may record browsing sessions and interactions and is not exclusively anonymous measurement.

Maps load OpenStreetMap resources; address search uses Nominatim. These services may receive IP addresses, requests and technical data. Public sources read to prepare content do not automatically receive account data.

Opening an external or affiliate link means interacting with another provider under its privacy policy. We do not sell users’ personal data.

Providers may process data in several countries, including outside the European Economic Area. Regions, recipients and safeguards depend on the service and its documentation. Contact the controller for information about applicable transfers and safeguards; we do not claim exclusively European storage without verification.

Account data supports account management while the account is active. You may request deletion using the privacy contact; legal obligations or the defence of claims may require retention of specific data.

Favourites remain in the browser until you remove them or clear site data: deleting an account does not clear localStorage.

Reports, support correspondence and technical logs are retained for their respective purposes. Provider retention and backup rotation must be checked for the service concerned: we do not promise unverified automatic 30-day deletion or 24-month limits. You can request details or deletion from the controller.

GPS coordinates are used on-device to calculate distances. Consent choices and some preferences are also recorded to document users’ choices.

Right of access (Art. 15) — obtain a copy of your data.

Right to rectification (Art. 16) — correct inaccurate data.

Right to erasure / "right to be forgotten" (Art. 17) — request deletion.

Right to restriction (Art. 18) — limit how we use your data.

Right to data portability (Art. 20) — receive your data in a structured, machine-readable format.

Right to object (Art. 21) — object to processing based on legitimate interest.

Right to withdraw consent at any time without affecting prior lawful processing.

Right not to be subject to automated decision-making (Art. 22) — we do NOT perform automated decisions that produce legal or similarly significant effects on you.

Right to lodge a complaint with a supervisory authority. For Italy: Garante per la Protezione dei Dati Personali — www.garanteprivacy.it. For other EU countries: your national DPA. For the UK: the Information Commissioner's Office (ICO) — ico.org.uk.

To exercise any right, email support@essentialcityinfo.com. We will respond within 30 days (extendable by 60 days for complex requests, with notice). We may ask for proof of identity to prevent fraudulent requests.

If you are a California resident you have the right to: (a) know what personal information we collect, use, disclose; (b) delete personal information; (c) correct inaccurate information; (d) opt out of "sale" or "sharing" of personal information; (e) limit the use of sensitive personal information; (f) non-discrimination for exercising your rights.

We do NOT sell or share your personal information for cross-context behavioural advertising as defined under the CPRA.

To exercise CCPA/CPRA rights, email support@essentialcityinfo.com with subject line "California Privacy Request". We will verify your identity before processing.

We use access controls and technical measures to protect accounts and data without promising absolute security or unverified certifications. Applicable legislation governs breach handling and notification obligations.

The Service is not intended for and shall not be used by children under the age of 16 in the EU/EEA, 13 in the US/UK, or the equivalent minimum age in your jurisdiction. We do not knowingly collect personal data from minors. If you believe a minor has provided personal data to us, contact support@essentialcityinfo.com and we will promptly delete it.

When you open Google Maps or another external service, the provider processes data under its own policy. Place information may come from public sources and third-party services; we do not claim an unverified cache limit or provider contract here. Google: https://policies.google.com/privacy.

Revisions to this notice are shown by the revision date. Material changes are highlighted on the site; a revision does not replace consent where consent is required.

Questions, complaints, or requests: support@essentialcityinfo.com.

Postal address available upon written request to the email above.

Only after analytics consent, Google Analytics 4, Microsoft Clarity and our internal statistics may process visited pages, interactions, a random session identifier, language, broad device class, referrer, landing page and approximate country derived from the connection. IP anonymisation is enabled for Google Analytics. We do not use this data for individual decisions or behavioural advertising.

Precise GPS coordinates are processed on-device for distances and sorting and are not stored on our servers. If you voluntarily enter an address, its text, language and broad city/country restriction are sent to OpenStreetMap Nominatim for geocoding. When you open directions or an external site, that third party processes data under its own policy.

Microsoft Clarity records interactions, heatmaps and browsing sessions using the provider’s masking features. It may receive technical data and use cookies or identifiers. Its privacy statement is available at https://privacy.microsoft.com/privacystatement. We do not describe it as exclusively anonymous measurement.