Information notice pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR)
1. Data Controller
Nicla Ottanelli - Via Nazionale, 43, 50123 Firenze - CF TTNNCL58T46B036A - Tel +39 335 315 201
Email: nicla@nicla.org
2. Categories of data collected
Contact and booking data: first name, last name, email address, phone number, postal address, stay dates, number of guests and any other data provided through the contact and booking request forms.
Browsing data: IP address, browser type, operating system, pages visited, time spent on the site (collected through cookies, subject to your consent).
3. Purposes of processing
- Handling information and booking requests
- Communications regarding your stay and the services requested
- Sending the newsletter and special offers, subject to your consent
- Anonymous statistical analysis of web traffic, subject to your consent
- Compliance with legal and contractual obligations
4. Legal basis
- Consent of the data subject (art. 6.1.a GDPR)
- Performance of pre-contractual and contractual measures (art. 6.1.b GDPR)
- Legal obligations, including reporting guest data to the public security authorities (art. 6.1.c GDPR)
- Legitimate interest of the controller (art. 6.1.f GDPR)
5. Methods of processing
Data is processed using electronic and/or paper-based tools, following logic strictly related to the stated purposes and in any case in a manner that guarantees the security and confidentiality of the data.
6. Data retention
Personal data will be kept for the time strictly necessary for the purposes for which it was collected and in any case no longer than 24 months from the last contact, unless different legal obligations apply (in particular tax and public security requirements).
7. Disclosure and dissemination
Data will not be disseminated. It may be disclosed to third parties only to fulfil legal obligations or to deliver related services, such as hosting, email delivery, property management systems and booking intermediation portals.
8. Transfers outside the EU
Some third-party services (for example Google Analytics or social platforms) may involve transferring data to countries outside the EU. Where this occurs, the transfer takes place in compliance with the safeguards set out in Chapter V of the GDPR.
9. Rights of the data subject
Pursuant to articles 15-22 of the GDPR, you have the right to:
- Access your personal data
- Obtain its rectification or erasure
- Restrict processing
- Object to processing
- Request data portability
- Withdraw your consent at any time
- Lodge a complaint with the Data Protection Authority
To exercise these rights please write to: nicla@nicla.org
10. Cookies
For information about the cookies used by this website please see our Cookie Policy.
11. Changes to this Privacy Policy
The Controller reserves the right to amend this notice. We recommend checking this page periodically.
Last updated: September 2026
