Privacy Policy
Last updated: January 2024
This notice describes how Fiorentini21 ("we", "our") collects, uses and protects the personal data of users of the fiorentini21.it website, in compliance with Regulation (EU) 2016/679 (GDPR).
1. Data Controller
The data controller is Fiorentini21, located at Via dei Fiorentini, 21, 80133 Naples (NA), Italy. Email: infofiorentini21@gmail.com
2. Data collected
We collect: browsing data (IP address, browser, pages visited), data voluntarily provided through the contact form (name, email, phone, stay dates, notes). We do not collect sensitive data.
3. Purposes of processing
Data is processed to: respond to booking and information requests; improve the website through anonymous statistical analysis; comply with legal obligations.
4. Legal basis
Processing is based on: consent of the data subject (Art. 6(1)(a) GDPR) for analytics and marketing cookies; performance of a contract (Art. 6(1)(b) GDPR) for bookings; legitimate interest (Art. 6(1)(f) GDPR) for site security.
5. Data retention
Data provided through the contact form is retained for 24 months from collection. Browsing data is retained for 12 months. Booking data is retained for the period required by tax regulations (10 years).
6. Data subject rights
You have the right to: access your data; rectify it; erase it ("right to be forgotten"); restrict processing; portability; object to processing; withdraw consent at any time; lodge a complaint with the supervisory authority. You may exercise these rights by writing to infofiorentini21@gmail.com
7. Third parties
The website may integrate third-party services (Google Analytics, Booking.com, payment systems). Each provider adopts its own privacy policy, available on their respective websites.
8. International transfers
Data may be transferred to non-EU countries exclusively on the basis of adequate guarantees (standard contractual clauses, Privacy Shield or European Commission adequacy decisions).
9. Security
We adopt appropriate technical and organisational measures to protect personal data from unauthorised access, loss or destruction.
10. Changes to the policy
We reserve the right to modify this notice. Changes will be published on this page with an updated date.