Last updated: 17 September 2026
This Cookie Policy describes cookies and similar technologies on arredointernivasallucci.it. The controller is VASALLUCCI GIOVANNI, an individual business operating under the commercial name Arredo Interni Vasallucci, Via S. Elia 144, 70033 Corato (BA), Italy; VAT number IT04420150726, Italian tax code VSLGNN65T20A285E. For enquiries: info@arredointernivasallucci.it, telephone +39 080 8722584, mobile +39 339 4090143. For purposes, legal bases, recipients and rights, see the Privacy Policy.
1. Cookies and similar technologies
Cookies are small pieces of data stored by the browser that may be sent to a website with subsequent requests. First-party cookies are set by the website being visited; third-party cookies belong to an external provider. Session cookies are normally removed when the browser session ends; persistent cookies have an expiry. Session restoration and browser settings may affect their actual behaviour.
localStorage stores data on the device for a particular origin without automatic expiry, until it is removed. sessionStorage retains data for the browser-tab session; it is not automatically sent to the server like a cookie. Other technologies may hold values in memory or perform temporary processing in the browser. The applicable rules depend on what a technology actually does, not just its name.
Storage strictly necessary for communication or a service explicitly requested by the user does not require consent under Article 122 of the Italian Privacy Code. Any personal-data processing follows the legal bases described in the Privacy Policy. Loading optional external content instead requires an explicit choice.
2. How consent works
The Necessary category is always active. The only current optional category is External content, disabled by default, which allows services such as Google Maps. Before consent, the map is neither inserted nor loaded: visiting the page alone does not activate it.
The banner offers “Reject optional”, “Accept all” and “Manage preferences”. Rejection and acceptance are directly available with comparable prominence and no extra steps to reject. Optional choices are not preselected. Closing the panel, ignoring the banner, scrolling or continuing to browse does not constitute consent. The “Load Google Maps” button explicitly authorises the External content category.
You may reopen the panel at any time through “Cookie preferences” in the footer. To withdraw, disable External content and select “Save preferences”: the map iframe is removed. Withdrawal does not undo earlier processing or retrieve data already transmitted to Google.
Your choice, including rejection, is stored for six months, with a technical maximum of 180 days from the decision. A new choice is requested on expiry; missing, invalid or unrecognised-version consent does not enable the map. A new decision may also be requested when services or purposes materially change. If your browser blocks storage, the choice may apply only to the current page.
3. Storage inventory
This inventory distinguishes normal public use from restricted or conditional WordPress functions. [hash], [user] and * identify variable parts of a name: they are not cookie values. Administrative cookies are not assigned merely because someone visits a public page. WordPress durations may be affected by logout, browser settings and authentication configuration.
On small screens, scroll the table horizontally to read all columns; with a keyboard, focus the table and use the arrow keys.
| Name and type | Provider and context | Purpose | Category and consent | Duration |
|---|---|---|---|---|
aiv_contact_visitor — first-party cookie | This website; preparation for form submission | Binds contact-form security validation to a random visitor identifier | Necessary; consent not required for strictly necessary anti-abuse functionality | 1 day |
aiv_consent — first-party cookie | This website; after a preference choice | Stores schema/version, External content choice, choice time and expiry; no unique identifier | Necessary; consent not required because it records the visitor’s privacy choice | 6 months, maximum 180 days |
aiv-appearance — localStorage | This website; explicit appearance selection | Remembers the selected light/dark appearance | Requested functional preference; consent not required for this use alone | Until removed by the user; no automatic expiry |
wpEmojiSettingsSupports — sessionStorage | WordPress / this website | Records browser emoji-rendering capability | Necessary/functional; consent not required | Browser-tab session |
wordpress_test_cookie — first-party cookie | WordPress / this website; login page | Tests whether the browser supports cookies | Necessary; consent not required | Session |
wordpress_[hash] and wordpress_sec_[hash] — first-party cookies | WordPress / this website; authorised operators | Authentication and security of restricted access | Necessary; consent not required | Session or authentication duration; normally valid for 2 days, or 14 days with “Remember me”, subject to WordPress behaviour |
wordpress_logged_in_[hash] — first-party cookie | WordPress / this website; authenticated operators | Identifies an authenticated WordPress session | Necessary; consent not required | Authentication normally valid for 2 days or 14 days with “Remember me”; otherwise a session cookie, subject to browser behaviour |
wp-settings-[user] and wp-settings-time-[user] — first-party cookies | WordPress / this website; authorised operators | Administrative preferences and their update time | Necessary/functional; consent not required | 1 year |
wp_lang — conditional first-party cookie | WordPress / this website; language selection on the login page | Remembers the selected login language | Necessary/functional; consent not required | Session |
wp-resetpass-[hash] — conditional first-party cookie | WordPress / this website; password-reset process | Allows secure completion of a password reset | Necessary; consent not required | Session; removed when the process is completed or invalidated |
wp-postpass_[hash] — conditional first-party cookie | WordPress / this website; password-protected content, if present | Remembers authorisation to access protected content | Necessary; consent not required | Normally 10 days |
comment_author_* — conditional first-party cookies | WordPress / this website; commenting is not active | On installations permitting comments, remember the commenter’s name, email or website | Functional to the commenter’s choice; not expected during normal public use of this website | Normally 1 year if set; public comments are disabled here |
| Google Maps — possible service cookies and technologies | Google; only after authorisation of embedded content | Interactive map and directions; provider processing described in its information | External content; consent required before embedded loading | Determined by Google and may vary; see the provider’s information |
| CAP CAPTCHA — technical challenge, solution and token | Mediavobis di Ardito Alfredo; form protection, infrastructure in Italy | Anti-abuse verification of the request, using temporary values during verification | Necessary; optional consent not required to protect the requested service | Temporary values during verification; server replay-prevention check for 24 hours |
The actual WordPress password-reset cookie name in this installation is wp-resetpass-[hash], not wp-resetpass_[hash]. Commenter cookies are not expected because public discussion is disabled; any cookies from previous use may be removed through browser settings.
The aiv_consent cookie contains only version, external, timestamp and expires. It is limited to this website, uses a site-wide path and SameSite=Lax, and is set with Secure on HTTPS connections. It contains no name, email address, IP address, user-agent or persistent unique consent identifier. The website’s code reads preferences to apply your choice without reloading the page.
4. CAP and technical observations
The CAP CAPTCHA service is operated in Italy by Mediavobis di Ardito Alfredo. The browser processes a challenge and transmits the solution; the server verifies a token. The form message is not sent to the CAPTCHA service. Network and device data and technical verification information may be processed to prevent abuse; instrumentation may change over time.
During the browser check for this revision, including after a challenge was solved, no CAP cookies or new localStorage or sessionStorage keys attributable to CAP were observed. Challenge and token values are handled temporarily during verification. The website’s aiv_contact_visitor cookie and anti-abuse controls are distinct from CAP. Server HMAC values, fingerprints and counters are protected or pseudonymised technical identifiers, not anonymous data, and are not additional browser cookies. The absence of CAP cookies in this check does not mean that no technical data is processed.
5. Google Maps and third-party information
Google may receive data and use its own technologies only once the embedded map has been authorised and loaded. Storage and retention may depend on the browser, settings, Google account and changes to the service. No stored Google cookies were observed in the browser context used for this revision’s check: consequently no fixed list of cookie names is presented, and their absence in other conditions is not guaranteed.
Consult Google’s Privacy Policy for information on processing, available choices and possible transfers outside the EEA. After consent and loading, third-party storage may be controlled by the provider; withdrawing through our panel blocks embedded content but does not necessarily delete cookies already set by third parties. You may remove them through your browser or provider settings. The directions link is a normal external link opened only through your action and does not load Google resources merely by being displayed.
6. No current analytics or advertising
As of this revision, the audited website does not use Google Analytics, Google Tag Manager, advertising pixels or marketing cookies introduced by the controller. The current optional category is External content. This describes the configuration checked: any new services will require information and, where necessary, consent to be reviewed. Google’s independent processing described above remains distinct.
7. Browser controls
You may inspect, delete or block cookies and other storage in your browser’s privacy and site-data settings. Removing localStorage and sessionStorage may require clearing all website data. Repeat these actions in each browser and device you use.
Deleting aiv_consent results in a new preference request and keeps optional content blocked until you authorise it again. Blocking necessary storage may prevent administrative login, contact-form security checks or preference features from working correctly. Removing the appearance preference restores the website’s default behaviour.
8. Updates and rights
This Cookie Policy may be updated when services, technologies, purposes or applicable rules change. The last revision date appears at the beginning. Material changes to optional processing may result in consent being requested again; you can always change your choices through “Cookie preferences”. For your rights, complaints to the Italian Data Protection Authority and other processing details, see the Privacy Policy.