Last updated: 4 October 2026
This notice is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”) and Italian Legislative Decree 196/2003 as amended, to visitors of suites-in-florence.com and to anyone who contacts us or stays in our apartments.
1. Data controller
The data controller is Leonardo, manager of the “Suites in Florence” apartments (Florence, 50123, Italy). Contact: phone and WhatsApp +39 328 281 1779, or via the contact form.
2. Data we process
- Browsing data: the systems running the website collect some technical data (e.g. IP address, browser type, time of request) needed for the site to work securely.
- Data you provide via the contact form, WhatsApp, phone or email: name, email, phone number, stay dates, number of guests and your message.
- Guest data: for stays, the identity document data required by law.
3. Purposes and legal basis
- Answering enquiries and quote requests and managing bookings: pre-contractual measures and performance of a contract (Art. 6(1)(b) GDPR).
- Complying with legal obligations, such as reporting guests to the Public Security Authority, statistical and tax obligations and the tourist tax: legal obligation (Art. 6(1)(c) GDPR).
- Keeping the website secure and preventing abuse: legitimate interest (Art. 6(1)(f) GDPR).
The website does not use your data for marketing or profiling.
4. How we process and store data
Data is processed electronically with appropriate security measures. Enquiry data is kept for as long as needed to handle the request and any booking; guest data for the periods required by law.
5. Recipients
Data may be processed by providers acting on the controller’s behalf as processors (hosting and email providers) and disclosed to competent authorities where required by law. Data is never published.
6. Third-party services
- WhatsApp (Meta Platforms): if you contact us via WhatsApp, processing also follows WhatsApp’s privacy policy.
- Google Maps: the map on the contact page loads only if you click “Show map”; from then on Google may collect data under its own privacy policy.
- Airbnb: if you book via Airbnb, processing also follows the platform’s privacy policy.
Some of these providers may transfer data outside the European Union on the basis of adequacy decisions or standard contractual clauses.
7. Providing data
Providing the data requested in the contact form is optional, but without it we cannot reply. Providing guest data is mandatory by law.
8. Your rights
You may exercise your rights under Articles 15-22 GDPR at any time — access, rectification, erasure, restriction, portability and objection — by contacting the controller at the details above. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
9. Cookies
For information on cookies see our Cookie Policy.