Last updated: 23 October 2026
This notice explains how we process the personal data of visitors to www.florencerooftopapartments.com and of anyone who sends a request through the form, in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003.
Data controller
Eleonora Calamini
Vicolo del Barbi 6, 50139 Florence (FI), Italy
Email: info@florencerooftopapartments.com
What data we collect
Data sent through the request form. Name and surname, country, mobile number, email address, number of guests, arrival and departure dates and any message. Please do not include sensitive data in your message, such as health information, unless it is needed for your request.
Data of other people. If you enter data of other people in the form, for example the other guests, make sure you have informed them and are entitled to share it.
Browsing data. The systems that run the website record some technical data, such as IP address, browser, date and time of access and pages requested. This is needed for the website to work and to keep it secure.
Cookies and similar technologies. The website uses technical cookies and, only with your consent, cookies from external services such as Google Maps. All details are in the Cookie Policy, where you can also change your choices.
Why we process data and on what legal basis
- To answer your request about availability and prices and to manage any booking. Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- To protect the form from spam with Google reCAPTCHA. Legal basis: the controller’s legitimate interest in website security (Art. 6(1)(f) GDPR).
- To keep the website working and secure through browsing data. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- To display the Google Maps map. Legal basis: consent (Art. 6(1)(a) GDPR), which you can give or withdraw at any time from the cookie banner.
- To defend the controller’s rights in case of misuse of the website or disputes, including in court. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
The form data is needed to reply: without it we cannot handle your request. Sending a request is not binding and does not oblige you to book.
External services used by the website
Google reCAPTCHA (Google Ireland Limited). It checks that requests sent from the website do not come from automated programs. To do so it analyses some information about your device and how you use the website, such as IP address and interaction with the page, and sends it to Google. This automated assessment is used only to filter spam and has no other effect on you. Google’s Privacy Policy and Terms of Service apply.
Google Maps (Google Ireland Limited). It shows where the apartments are. The map loads only after you give your consent; before that, no data is sent to Google.
Fonts and other graphic elements of the website are loaded from our own server, without external services.
Facebook and Instagram. The website only contains links to our social media pages: no data is sent to these services unless you click on them. Once on their websites, Meta’s privacy policies apply.
How we protect data
Data is processed with IT tools and with security measures suitable to prevent unauthorised access, modification, disclosure or deletion. Only the controller has access to it and, when needed, the providers listed below.
Who we share data with
Data is never sold or made public. It may be processed on behalf of the controller, and only for the purposes described, by:
- Aruba S.p.A., which provides website hosting and email, with servers in Italy;
- Google Ireland Limited, for reCAPTCHA and, if you consent, for Google Maps.
If your request becomes a booking, some guest data is passed to the authorities where required by law, for example to the Police (guest registration) and to the Municipality of Florence (tourist tax). These communications are explained to you when you book.
Transfers outside the European Union
Google may also process data in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, recognised as adequate by the European Commission, and also applies the standard contractual clauses approved by the Commission.
How long we keep data
- Requests that do not become a booking: up to 24 months from the last contact.
- Requests that become a booking: up to 10 years, for the civil and tax obligations connected with the stay.
- Browsing data: for the time set by the hosting provider for security reasons, usually a few months.
- Data processed by reCAPTCHA and Google Maps: according to Google’s rules.
Your rights
You can ask at any time to access your data, correct or delete it, restrict its processing, receive it in a readable format (portability) and object to processing based on legitimate interest. If you have given consent, you can withdraw it whenever you want, without affecting processing carried out before. To exercise your rights write to info@florencerooftopapartments.com: requests are free of charge and you will receive a reply as soon as possible, and in any case within one month.
You also have the right to lodge a complaint with the Italian Data Protection Authority, Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live.
Children
The website and the request form are not intended for children under 14.
Changes to this notice
This notice may be updated if the services used by the website or the law change. The date of the last update is shown at the top of the page.