COOKIE POLICY
Last updated: 10/03/2026
The https://booking.carontetourist.it website (hereinafter, the 'Website') uses cookiesBelow you will find more information about cookies, how they are used on the Website, and which control procedures we have in place with regard to cookies. By continuing to browse the Website after reading our banner, you may consent to the use of cookies, in accordance with this policy. If you do not consent to the use of cookies, please disable them by following the instructions provided below in this policy.
1. WHAT ARE COOKIES?
Cookies are small text files containing small amounts of information which are stored on your electronic device (PC, tablet, etc.) when you visit a website ('Cookie'Cookies'). Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises those cookies. Cookies act as a form of memory for a website, enabling it to recognise your device on each subsequent visit. They also enable storing your browsing preferences, thereby enhancing your browsing experience within the Website and making the Website content as personalised as possible.
Web browsers allow you to exercise some degree of control over cookies by adjusting your browser settings. Most browsers allow you to block Cookies in general or to block Cookies from specific websites.
However, this may result in any opt-outs or preferences you have set on the Website being lost. If you choose to disable technical cookies, some parts of the service may not function properly or may be slower. If you choose to disable analytical or profiling cookies and/or reject these cookies directly via the banner, your data will not be processed for analytics and/or profiling purposes, but the other functionalities of the Website will not be affected.
2. DATA CONTROLLERS JOINT CONTROLLER, DATA PROCESSOR AND DATA PROTECTION OFFICER (DPO)
Caronte & Tourist S.p.A., with registered office at Via Ing. Giuseppe Franza 82, Messina (ME) 98124, Italy, is the data controller for the data collected via cookies through this Website (hereinafter, the 'Company').
Furthermore, Caronte & Tourist S.p.A. acts as Data Processor, pursuant to Article 28 of Regulation (EU) 2016/679 (hereinafter, the 'GDPR'), on behalf of its subsidiaries Caronte & Tourist Isole Minori S.p.A., Cartour S.r.l., and Maddalena Lines S.r.l.
For Facebook Business Tools only (including but not limited to Facebook Cookies, plug-ins and Pixel), the Company and Facebook Ireland Limited, with registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, act as Joint Controllers pursuant to a specific Joint Controllership Agreement, in order to measure the degree of interaction between the websites visited based on Data Subjects’ preferences and to provide targeted advertising within the social network. Further information on how Facebook Ireland processes Data, including the legal basis relied upon by Facebook Ireland and on how to exercise the data subject's rights vis-à-vis Facebook Ireland, can be found in Facebook Ireland's Data Policy at https://www.facebook.com/about/privacy.
You may contact the Company:
- by sending an email to: privacy@carontetourist.it;
- or by calling telephone number: 090/9038201.
The Company has appointed a Data Protection Officer, in accordance with Article 37 et seq. GDPR, who can be contacted at the head office or by e-mail at dpo@carontetourist.it.
3. TYPES OF COOKIES
Cookies can be technical, analytical or profiling cookies. The Website uses technical, analytical and profiling cookies.
3.1 Technical Cookies
Technical cookies enable us to ensure navigation and the proper functioning of the Website. Specifically, the Website uses the following 'session' and persistent technical cookies (see the table below).
| Technical Cookies | Expiry | Description | Cookie Policy (for third-party cookies) |
|---|---|---|---|
| __Host-next-auth.csrf-token | SESSION COOKIE | This cookie is used to verify that authentication requests are actually made by the authenticated user. | |
| __Secure-next-auth.callback-url | SESSION COOKIE | This cookie is used to detect spam and enhance website security. | |
| __Secure-next-auth.session-token.0 | SESSION COOKIE | This cookie enables the website to function properly (e.g. by allowing user authentication or session management). | |
| __Secure-next-auth.session-token.1 | SESSION COOKIE | This cookie enables the website to function properly (e.g. by allowing user authentication or session management). | |
| AWSALB | 7 DAYS | This cookie keeps the user’s session active by routing user requests to the most appropriate server. This cookie is used for load balancing purposes, in order to optimise the user experience. It helps maintain a stable website and fast browsing by the user. | |
| AWSALBCORS | 7 DAYS | This cookie helps distribute traffic across multiple servers and efficiently handle requests from other domains, thereby ensuring that the website remains responsive and functional for the user. | |
| CookieConsent | 1 YEAR | This cookie stores the user's cookie preferences (including consent given or withdrawn for specific categories), so that users do not have to repeat their choices each time they visit the website. | https://www.cookiebot.com/en/privacy-policy/ |
| nextauth.message | PERSISTENT | This cookie is used to display user authentication messages. | |
| __Secure-ct-next-auth.session-token.0 | SESSION COOKIE | This cookie enables the website to function properly (e.g. by allowing user authentication or session management). | |
| __Secure-ct-next-auth.session-token.1 | SESSION COOKIE | This cookie enables the website to function properly (e.g. by allowing user authentication or session management). | |
| sbarco-modal | 1 DAY | This cookie is used to ensure the proper management of popup. | |
| pacchetti-bar-modal | 3 DAYS | Remembers popup dismissal preferences. | |
| popup_id-cms | 3 DAYS | Remembers popup dismissal preferences. | |
| refund-modal | 1 DAY | This cookie is used to ensure the proper management of refund forms within the website. | |
| test_cookie | 1 DAY | This cookie is used to verify whether the user's browser supports cookies. | Privacy Policy – Privacy & Terms – Google |
3.2 Analytical Cookies
Analytical Cookies enable us to analyse how you browse the Website in order to help us optimise our services and, consequently, your browsing experience. In particular, the Website uses the following Analytical Cookies.
| Analytical Cookies | Expiry | Description | Cookie Policy (for third-party cookies) |
|---|---|---|---|
| c.gif | SESSION COOKIE | Collects data on the user’s navigation and behavior on the website. This is used to compile statistical reports and heatmaps for the website owner. | https://www.microsoft.com/en-us/privacy/privacystatement |
| _cltk | SESSION COOKIE | Registers statistical data on users' behaviour on the website. Used for internal analytics by the website operator. | https://www.microsoft.com/en-us/privacy/privacystatement |
| _ga | 2 YEARS | Used to send data to Google Analytics regarding the web session and the user's behaviour on the website in order to monitor the performance of campaigns with a view to optimising them. It tracks the user's browsing behaviour on the website by collecting information such as pages visited and the time spent on each page. Google acts as an external data processor for the provision of analytics services and as an independent data controller for the purposes of improving its own services. | How Google uses information from sites or apps that use our services – Privacy & Terms – Google Privacy Policy – Privacy & Terms – Google |
| _ga_[container_ID] | 2 YEARS | Used to send data to Google Analytics regarding the web session and the user's behaviour on the website in order to monitor the performance of campaigns with a view to optimising them. It tracks the user's browsing behaviour on the website by collecting information such as pages visited and the time spent on each page. The container_ID is a unique identifier associated with a specific instance of Google Analytics on the website. Google acts as an external data processor for the provision of analytics services and as an independent data controller for the purposes of improving its own services. | How Google uses information from sites or apps that use our services – Privacy & Terms – Google Privacy Policy – Privacy & Terms – Google |
| _clck | 1 YEAR | This cookie is used to recognise when the same user returns to the website and to record the user's preferences, in order to better analyse how the website is used over time. | |
| _clsk | 1 DAY | This cookie consolidates all the user’s browsing events (pages visited, menus selected, duration of sessions, etc.) into a single session. |
3.3 Profiling Cookies
Profiling cookies enable us to analyse how you browse the Website, your habits, your purchases and your behaviour in order to provide you with marketing communications in line with your preferences. Specifically, the Website uses third-party profiling cookies.
| Profiling Cookies | Expiry | Description | Cookie Policy (for third-party cookies) |
|---|---|---|---|
| MUID | 1 YEAR | Used widely by Microsoft as a unique user ID. The cookie enables user tracking by synchronising the ID across many Microsoft domains. | https://www.microsoft.com/en-us/privacy/privacystatement |
| MR | 7 DAYS | Used to track visitors on multiple websites, in order to present relevant advertisement based on the visitor's preferences. | https://www.microsoft.com/en-us/privacy/privacystatement |
| SRM_B | 1 YEAR | Tracks the user’s interaction with the website’s search-bar-function. This data can be used to present the user with relevant products or services. | https://www.microsoft.com/en-us/privacy/privacystatement |
| SM | SESSION COOKIE | Registers a unique ID that identifies the user's device during return visits across websites that use the same ad network. The ID is used to allow targeted ads. | https://www.microsoft.com/en-us/privacy/privacystatement |
| ANONCHK | 1 DAY | Registers data on visitors from multiple visits and on multiple websites. This information is used to measure the efficiency of advertisement on websites. | https://www.microsoft.com/en-us/privacy/privacystatement |
| _fbp | 90 DAYS | This cookie is used by Meta/Facebook to track users’ visits across websites that use Pixel and to display personalised advertisements, including via real-time bidding among third-party advertisers. | https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 |
| _gcl_au | 90 DAYS | This cookie is used by Google AdSense/Ads to test and measure the effectiveness of advertising campaigns on websites that use Google services, by linking ad clicks to subsequent user actions. | Privacy Policy – Privacy & Terms – Google |
| lastExternalReferrer | PERSISTENT | This cookie stores the last website or web page from which the user arrived, in order to understand where traffic to the website originated (external website). | https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 |
| lastExternalReferrerTime | PERSISTENT | This cookie records the time (date/time) at which the user arrived on the website from another website. | https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0 |
| pagead/1p-user-list/# | SESSION COOKIE | This session identifier, used by Google’s advertising services, helps determine whether the user has shown interest in specific content or offers and include the user on audience lists, so that targeted ads can also be displayed on multiple websites. | Privacy Policy – Privacy & Terms – Google |
| _gcl_ls | PERSISTENT | Used by Google Ads and Google Tag Manager to measure advertising performance and track conversions. | Privacy Policy – Privacy & Terms – Google |
4. NATURE OF CONSENT
The data subject’s explicit consent is not required for Technical Cookies, as these are necessary to ensure navigation and the proper functioning of the Website. Therefore, these cookies are always enabled.
For Analytical and Profiling cookies, the provision of data through cookies is based on your consent and is optional. If you refuse consent by clicking on the 'Reject' button on the banner, you will still be able to browse the Website, but the Company will not be able to place any Analytical Cookies or Profiling Cookies. On the other hand, by clicking the ‘Accept all’ button, you can consent to the placement of both analytical and profiling cookies, or, using the buttons for each category of cookies, which are displayed on the banner and can also be accessed via the ‘Show details’ link, you can consent to the placement of analytical cookies only or profiling cookies only.
5. DATA RETENTION
Data will be retained for the period specified for each category of cookies installed; please refer to the tables showing the applicable retention periods.
The banner will not be displayed again unless there are substantial changes (e.g. to the list of third parties), or if the Company is unable to determine whether a Cookie is already stored on your device, or if 6 months have elapsed since you made your choice.
6. SCOPE OF PROCESSING, DISCLOSURE, DISSEMINATION
The data collected for the fulfilment of the aforementioned purposes will also be processed by third parties appointed as Data Processors or, as the case may be, disclosed to such third parties as independent data controllers, namely: i) individuals, companies, associations or professional firms that provide the Company with support and consultancy services, including in accounting, administrative, legal, tax and financial matters; ii) companies, organisations or associations that provide services connected with and necessary to enable Data Subjects to browse the Website; iii) public administrations, for the performance of their institutional functions within the limits established by law and regulations; iv) third parties whose cookies are placed on the Website and whose cookie policies can be found in the table, alongside the corresponding third-party cookies.
In addition, the data may be made accessible, disclosed and transferred to public bodies, judicial authorities and law enforcement agencies, which will process the data as independent data controllers in order to comply with any investigation requests or where expressly required by law.
7. TRANSFER OUTSIDE THE EEA
The Company, including through its data processors, may transfer Data outside the European Economic Area. For this purpose, in accordance with data protection legislation, the Company assesses the impact of data transfers and implements, where applicable, the most appropriate safeguards (e.g., adequacy decisions or standard contractual clauses).
For information on the transfer of personal data collected through third-party Cookies, please refer to the privacy policies of each third party, which are available on their websites and linked in the tables above.
8. HOW TO CONTROL AND DELETE COOKIES
You can consent to the use of Analytical and Profiling Cookies by clicking the ‘Accept all’ button directly on the Banner, or by consenting to each category of cookies using the relevant buttons displayed on the banner or accessible via the ‘Show details’ link on the Banner.
You can reject the use of Analytical and Profiling Cookies by clicking the ‘Reject’ button on the Banner, or you can manage your preferences for each category via the ‘Show Details’ link on the banner.
Please note that you may review your choices at any time using the control available at the bottom left of the Website pages, or by manually changing your browser settings in accordance with the instructions provided in the policies of the Cookie providers.
How to disable cookies manually:
- Delete, allow and manage cookies in Chrome – Computer – Google Chrome Help
- Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
- Microsoft Edge: https://support.microsoft.com/en-gb/windows/manage-cookies-in-microsoft-edge-view-allow-block-delete-and-use-168dab11-0753-043d-7c16-ede5947fc64d
- Safari: https://support.apple.com/en-gb/105082
If you use a web browser that is not listed above, please refer to your browser's documentation or online help for further information. The Company acts solely as a technical intermediary for the links provided in this document and cannot accept any liability for any changes to such links.
9. RIGHTS OF THE DATA SUBJECT
In relation to the processing of data collected using Cookies, you may exercise your rights under the GDPR (Articles 15–21), including the right to:
- Obtain confirmation of the existence of the data and access its content (right of access);
- Update, amend and/or rectify the data (right to rectification);
- Request erasure or restriction of processing of data that has been processed in breach of the law, including data whose retention is not necessary for the purposes for which they were collected or otherwise processed (right to be forgotten and right to restriction of processing);
- Object to the processing (right to object);
- Withdraw consent, where consent has been given, without affecting the lawfulness of processing based on consent before its withdrawal, by using the control available at the bottom left of the Website pages;
- Lodge a complaint with the supervisory authority, using the relevant Complaint Form in the event of a breach of data protection legislation;
- Receive a copy of personal data concerning you, which you provided in the context of processing, in an electronic format and request that such data be transmitted to another data controller (right to data portability).
To exercise these rights, you may contact the Company:
- by sending an email to: privacy@carontetourist.it;
- or by calling telephone number: No. 090/9038201;
- by ordinary mail addressed to: Caronte & Tourist S.p.A., with registered office at Via Ing. Giuseppe Franza 82, Messina (ME) 98124.
