This policy explains how personal data are handled when you use this website (art. 13 of Regulation (EU) 2016/679, “GDPR”).
Data controller
Hotel Annalena, Via Romana 34, 50125 Florence. Email: infohotelannalena@gmail.com. Phone: +39 055 760 6973.
What we process and why
- Reservation and contact requests. When you send a form we receive your name, email, optional phone number, your dates, guests, room preference and message. We use them only to answer you and, if you wish, to prepare your stay (pre-contractual measures, art. 6(1)(b) GDPR).
- General messages. When you write to us with the contact form or by email, we use your name, email and message to reply (pre-contractual measures or our legitimate interest in answering, art. 6(1)(b) and (f) GDPR). Name, email and, for reservation requests, the dates are required; without them we cannot answer.
- Google Maps. Only if you accept it in the cookie banner, the map is loaded from Google, which then receives your IP address and technical data (consent, art. 6(1)(a) GDPR). You can withdraw your consent at any time under Cookie settings, at the foot of every page.
- Technical data. Like any website, the server records technical data (such as the IP address and the page requested) to deliver the pages and keep them secure (legitimate interest, art. 6(1)(f) GDPR).
How long we keep them
Requests are stored in the website’s administration area and in our mailbox. Requests stored on the website are deleted automatically after 24 months, and we delete the email copies on the same schedule; data needed for a booking are kept as long as tax and accommodation laws require. Technical logs are kept by our hosting provider only for the short time needed for security.
Who receives them
Only our staff and the providers who work for us as processors, on our instructions (art. 28 GDPR): Hostinger, which hosts this website; and, once you book, our property management and booking system (Amenitiz). We do not sell or share your data for marketing. Our mailbox is a Gmail account: Google receives the emails we exchange with you and handles them under its own terms. Google, which also provides the map only if you accept it, acts as an independent controller and may transfer data to the United States under the EU-U.S. Data Privacy Framework.
WhatsApp: if you write to us on WhatsApp, we receive your phone number, your profile name and your messages, and use them only to reply to you (pre-contractual measures or our legitimate interest in answering, art. 6(1)(b) and (f) GDPR). We delete the chats on the same schedule as requests, after 24 months at the latest, unless they are needed for a booking. WhatsApp is a service of WhatsApp Ireland Limited (Meta): the messages are end-to-end encrypted, and WhatsApp processes your number and the related data (such as when messages are sent) as an independent controller under its own privacy policy, and may transfer data outside the EU. The WhatsApp button on this website is a plain link: nothing is loaded from WhatsApp until you use it.
When you stay with us
Italian law requires every hotel to send its guests’ identity details to the police (Alloggiati Web, art. 109 of the Consolidated Law on Public Security), to report anonymous figures to the national statistics office (ISTAT), and to collect the Florence tourist tax. These data are processed to meet legal obligations (art. 6(1)(c) GDPR) and kept for as long as the law requires; we give you the details at check-in.
Cookies and statistics
This website uses no profiling or statistics cookies. When you first visit, a banner asks whether you accept Google Maps; the map is loaded only if you accept, and Google then receives your IP address and may set its own cookies. Details are in the cookie information.
Your rights
You can ask to access, correct or delete your data, to restrict or object to their processing, and to receive them in a portable format (arts. 15–21 GDPR), by writing to the address above. You can also lodge a complaint with the Italian data protection authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).
Last updated: 25 October 2026.