Privacy Policy

Last updated: June 2026

1. Data Controller

The data controller is Appartamenti Fiorenti, based in Milan (MI), Italy. For any enquiry relating to your personal data, please contact us at: info@casefiorenti.it.

2. Data Collected and Purposes

The website casefiorenti.it collects personal data in the following situations:

• Direct booking: when you use the Vikey booking widget, the data you enter (name, email, stay dates, payment information) are processed by Vikey S.r.l. as an independent data controller. Please refer to Vikey's privacy policy for details.
• Email contact: if you write to us at the address shown on the Contact page, we will process your data (name, email, message content) solely to reply to your enquiry.
• Browsing data: the web server automatically collects IP addresses and page-access logs for security and technical diagnostics. These data are not linked to identified individuals.

3. Google Fonts

This site uses Google Fonts, a service provided by Google LLC. When you visit a page, your browser sends a request to Google's servers to download the typefaces: in this process, your IP address is transmitted. The legal basis is our legitimate interest in maintaining a consistent visual presentation of the site. More information: policies.google.com/privacy.

4. Legal Basis for Processing

• Performance of a contract (booking): Art. 6(1)(b) GDPR
• Legitimate technical and security interest: Art. 6(1)(f) GDPR
• Consent (where required): Art. 6(1)(a) GDPR

5. Data Retention

Contact data are retained for as long as strictly necessary to handle the request and, where applicable, to comply with legal obligations (e.g. accounting: 10 years). Technical logs are deleted within 30 days.

6. Your Rights

You may exercise the following rights at any time by sending a request to info@casefiorenti.it:

• Access to your data
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent (without prejudice to processing carried out beforehand)

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it) or any EU supervisory authority.

7. International Transfers

Data are not transferred to countries outside the European Economic Area, except as noted in section 3 regarding Google LLC (with appropriate GDPR safeguards in place).

8. Changes

This policy may be updated periodically. The current version is always available on this page with the date of last revision.