Skip to content
Milan Tourism Guide
CITOFONO: 135

Privacy Policy

Last updated: 30 August 2026. This policy describes how www.milantourism.org handles information today. Where something is planned but not yet in place, it says so rather than describing it as though it were live.

Who is responsible

Milan Tourism Guide (www.milantourism.org) is an independently published travel reference site. It is the data controller for the limited personal information described below. You can reach the publisher through the contact page; that form is the correct route for any question or request about your data.

The short version

Reading a guide on this site requires no account and no personal details. We do not run a newsletter, we do not accept comments, and we do not sell anything. The only information you actively give us is what you type into the contact form. Beyond that, the site uses Google Analytics to understand which guides are read, and the web server keeps routine access logs.

Information you give us

Contact form. The form on the contact page collects your name, your email address, the topic you select and your message. It is delivered by email to the site’s publisher. We use it to read and answer your message and nothing else — you are not added to any list, and the details are not passed to any third party. Message emails are retained while they are useful for handling corrections and are deleted when they are not. Legal basis: legitimate interest in responding to correspondence you initiated.

Site search. If you use the search box, the term you type is processed to return results and may appear in server logs and in aggregate analytics. Please do not type anything personal into it.

Information collected automatically

Server logs. The hosting provider records standard web-server data for every request: IP address, date and time, the page requested, the referring page and your browser’s user-agent string. These logs are used for security, abuse prevention and diagnosing faults, and are rotated by the host on its own schedule.

Google Analytics 4. The site runs Google Analytics 4, connected through the Site Kit by Google plugin, to see which guides people read, how they arrive and which devices they use. This is reported to us only in aggregate. Analytics sets cookies and identifiers in your browser and may transmit data, including a truncated IP address, to Google. We do not use Analytics to build advertising audiences or to attempt to identify individual readers. Legal basis outside the EEA/UK: legitimate interest in understanding site usage. You can opt out entirely with Google’s browser add-on, or block analytics cookies in your browser.

Google Search Console. The site is verified in Search Console. This reports aggregate search-query and ranking data to us; it does not set cookies on your visit or identify you.

Caching. A page cache (WP Super Cache) serves stored copies of pages to reduce load. It may set a cookie to determine whether you should receive a cached or a fresh page. It does not track you between visits.

Advertising

As at the date above, this site serves no advertising. No advertising network code is loaded, and no advertising cookies are set by us or on our behalf.

We intend to fund the site with display advertising through Google AdSense. This section will be updated with the specifics on the day that starts, and the following will apply from that point and not before:

  • Google and its partners will use cookies and similar technologies to serve ads based on your prior visits to this and other websites.
  • Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visit to this and other sites on the internet.
  • You will be able to opt out of personalised advertising at any time via Google My Ad Center or aboutads.info.
  • Third-party vendors, including Google, may use their own cookies to serve ads based on prior visits. Details of how Google uses data when you use partner sites are published at policies.google.com/technologies/partner-sites.
  • Before advertising is enabled for visitors in the EEA, the UK or Switzerland, a Google-certified consent management platform will be deployed to request consent for advertising and measurement cookies. Until that banner is live, advertising will not be served to those visitors.

Content loaded from elsewhere

Guides link out to official sources — museums, ATM Milano, Trenitalia, the Comune di Milano and similar. Following a link takes you to a site with its own privacy policy, over which we have no control. Where a page embeds a map or a video, the provider of that embed may set cookies once the embed loads.

Who we share information with

We do not sell personal information and we do not share it for cross-context behavioural advertising. Information reaches only the parties that make the site work: the hosting provider (which stores the site and its logs), Google (Analytics and Search Console, as described above), and the email provider that delivers contact-form messages. We will disclose information where we are legally obliged to, and would tell you unless prohibited from doing so.

International transfers

The site’s hosting and the Google services described above involve processing in the United States. Where personal data of EEA or UK visitors is transferred, it is done under the safeguards those providers maintain, including Standard Contractual Clauses and the EU–US and UK–US Data Privacy Framework where applicable.

Your rights

If you are in the EEA or the UK, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to data portability where it applies. If you are in California, you have the right to know what is collected, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising those rights; we do not sell or share personal information as those terms are defined by the CCPA/CPRA.

In practice we hold very little: unless you have written to us, there is likely nothing on file that identifies you. To make a request, use the contact form. EEA and UK visitors also have the right to complain to their national data protection authority.

Children

This site is written for adults planning travel and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has sent us information through the contact form, write to us and it will be deleted.

Security

The site is served over HTTPS and administrative access is restricted. No website can promise perfect security, but the amount of personal data held here is deliberately minimal, which is the most effective protection available.

Changes to this policy

When this policy changes materially — in particular when advertising is switched on — the date at the top will be updated and the relevant section rewritten to describe what is actually happening. Old versions are not archived publicly; if you need to know what the policy said on a given date, ask.