Last updated: April 2026
1. Data Controller
The data controller is:
Case Fiorentine
Via dei Servi 12, 50122 Florence (FI), Italy
Email: info@casefiorentine.it
WhatsApp: Message us on WhatsApp
2. Personal data collected
The website collects the following categories of data:
- Data voluntarily provided via contact and availability request forms: name, surname, email address, stay dates, number of guests and free-text messages.
- Navigation data collected automatically by the browser and, subject to consent, via Google Tag Manager / Google Analytics: anonymised IP address, browser type, pages visited, session duration, traffic source.
- Cookies: see the Cookie Policy section below.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Responding to contact and availability requests | Pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR) |
| Statistical analysis of site visits (Google Analytics) | Consent of the data subject (Art. 6(1)(a) GDPR) |
| Compliance with legal obligations | Legal obligation (Art. 6(1)(c) GDPR) |
4. Recipients of personal data
Personal data is not sold or transferred to third parties for commercial purposes. It may be shared with:
- Technical service providers (hosting, email delivery) acting as data processors under Art. 28 GDPR.
- Google LLC as provider of Google Analytics / Tag Manager, subject to consent. Google processes data according to its own privacy policy: policies.google.com/privacy.
- Competent authorities, when required by law.
5. Retention period
- Form data: retained for the time necessary to handle the request and, in any event, no longer than 3 years from receipt.
- Analytics data: retained in Google Analytics for a maximum of 14 months (standard anonymised configuration).
- Cookies: see the table in the Cookie Policy section.
6. Rights of the data subject
Under Arts. 15–22 GDPR, you have the right to:
- Access your personal data;
- Request rectification or erasure;
- Object to processing or request restriction;
- Request data portability;
- Withdraw consent at any time without affecting the lawfulness of prior processing;
- Lodge a complaint with the supervisory authority (Garante per la protezione dei dati personali — garanteprivacy.it).
To exercise your rights, write to: info@casefiorentine.it
7. Cookie Policy
Cookies are small text files stored on the user's device during browsing. This website uses the following types of cookies:
7.1 Technical cookies (always active)
Required for the site to function. No consent needed.
| Name | Purpose | Duration |
|---|---|---|
cf_cookie_consent |
Stores the user's cookie banner choice | localStorage (no expiry) |
PHPSESSID |
PHP session for CSRF protection on forms | Session (expires when browser is closed) |
7.2 Analytics cookies (subject to consent)
Activated only if the user clicks "Accept all" in the cookie banner.
This site uses Google Consent Mode v2 (gtag): the default state denies analytics and advertising storage; after you accept via the banner, consent is updated to match your choice.
| Provider | Purpose | Duration |
|---|---|---|
| Google Tag Manager / Analytics | Statistical analysis of site usage (anonymised IP) | Up to 2 years |
7.3 Managing consent
You can change your choice at any time by clearing the site data in your browser. You can also manage cookies directly via your browser settings:
8. Transfers to third countries
Google LLC is certified under the EU–US Data Privacy Framework. Analytics data transfers therefore take place with adequate safeguards pursuant to Art. 46 GDPR.
9. Changes to this policy
The data controller reserves the right to amend this policy at any time. Changes will be published on this page with the updated date. In the event of material changes, a notice will be displayed on the site.