Information pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”)
Data Controller
The Data Controller is Maison Florence S.r.l., with registered office in Florence, Lungarno Benvenuto Cellini, 25, VAT No. 07368470485, contactable at the e-mail address [email protected]
Purposes and legal basis of the processing
The personal data collected through the Guest Portal are processed exclusively for the management of the booking and stay, the completion of check-in procedures, the preparation and signing of the rental agreement, administrative and tax obligations, and the management of the tourist tax, where applicable.
The guests’ personal data and the details of their identity documents are also collected in order to comply with the obligations provided for by Italian legislation on public security and for the communication of accommodated persons to the Public Security Authority through the Alloggiati Web system, pursuant to Article 109 of the T.U.L.P.S.
The processing is carried out insofar as it is necessary for the performance of the booking and contractual relationship and to comply with the legal obligations to which Maison Florence is subject.
Provision of data
The provision of data indicated as mandatory is necessary to complete the requirements relating to the stay. Failure to provide the required data may prevent completion of the check-in procedure and, where applicable, access to the property.
Disclosure of data
The data are processed by authorised personnel and may be disclosed, where necessary, to the Public Security Authorities, the Municipality and other competent public bodies, as well as to parties and service providers appointed for the services strictly necessary for the management of the booking, the Guest Portal, payments and the stay.
The data are not disclosed publicly or used for purposes other than those indicated in this privacy notice.
Data retention
Personal data are retained for the period necessary for the management of the stay and, subsequently, for the periods required by the applicable legal obligations.
Images of identity documents that may be acquired through the Guest Portal are automatically deleted within 7 days of upload.
Rights of the data subject
In the cases and within the limits provided for by the GDPR, the data subject may exercise the rights of access, rectification, erasure, restriction of processing, objection and portability of their personal data.
Any request for erasure shall not affect the retention of data necessary to comply with legal obligations or for the establishment, exercise or defence of legal claims.
Requests may be sent to [email protected]
The data subject also has the right to lodge a complaint with the Italian Data Protection Authority.
