Privacy Policy
Because your privacy is important, Lungarno Alberghi S.r.l. has adopted a Privacy Policy regarding how it collects, uses, shares and stores your data. Please take a moment to familiarise yourself with our privacy practices.
Pursuant to articles 13 and 14 of EU Regulation no. 2016/679 on the protection of individuals with regard to the processing of personal data (hereinafter « GDPR »), Lungarno Alberghi hereby provides you with certain information relating to the use of the website www.lungarnocollection.com (hereinafter simply « Website ») and any processing of personal data connected to it.
Lungarno Alberghi hosts the web pages of Palazzo Ottaviani and performs marketing and administrative services on its behalf. If you decide to book an apartment at Palazzo Ottaviani, please read the privacy policy below.
In any case, if you decide to provide consent for promotional communications, ticking the box « I agree to receive communications from the hotel », your data will be processed by Lungarno Alberghi S.r.l. in the manner indicated in the privacy policy below.
If you have any questions or require further clarification, please write to us using the contact details below.
Lungarno Alberghi S.r.l. Privacy Policy
- DATA PROCESSED AND NATURE OF ITS PROVISION
1.1 Data collected while using the website
Personal data may be used to identify or contact users, as well as to provide better services to all our guests.
Data collected automatically
During normal operations, IT systems and software procedures used to operate the website will acquire personal data, transferred implicitly when using Internet communication protocols. This information is not collected in order to be associated with identified data subjects, but due to its nature it could – through processing and association with data held by third parties – allow users to be identified. This category of data includes the IP address or domain name of the device used, the operating system, the model and brand of the device, the phone service provider, the URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.), and other parameters related to the operating system and IT environment of your device. This data is used to compile anonymous statistics about how the website is used and to check that it is functioning correctly.
Data provided voluntarily by users
If you decide to use the forms on the website or contact us by email, you may have to send and/or provide some personal information. The information we may collect, by way of example, includes: personal details, contact details (home address, telephone number, email address), payment details, data relating to your stay, and your tastes and preferences.
By sending this information, you declare that you are responsible for the accuracy of the personal data provided to Lungarno Alberghi S.r.l.
- Provision of data
Apart from the information specified for browsing data, the provision of personal data is voluntary. Failure to provide such data may make it impossible to obtain what is requested.
- PURPOSES OF THE PROCESSING AND LEGAL BASIS
2.1 Your data will be processed:
a. to allow you to use the functions offered by the website, including managing reservations, purchasing gift vouchers and additional services (tours/experiences, spa services, food and drink), and registering for events;
b. to respond to any requests you have sent by email;
c. for the technical management of website services;
d. to send promotional communications and information about services and offers regarding Lungarno Collection’s activities by email;
e. to exercise the rights of the Data Controller;
Other purposes may be indicated in the policy statements relating to the use of specific services.
2.2 The legal basis for processing
In relation to purposes 2.1.a, 2.1.b, the legal basis for the processing is the performance of a contract to which the data subject is a party and/or the implementation of pre-contractual measures taken at the request of the data subject.
For purposes 2.1.c and 2.1.e, the legal basis for the processing is the legitimate interest of the Data Controller in ensuring that systems are administered correctly, as well as in exercising and defending its rights.
For purposes 2.1.d, the legal basis for the processing is your consent. We remind you that you can withdraw your consent at any time as easily as you gave it, by writing to: privacy@lungarnocollection.com or by using the « unsubscribe » function in all our newsletters.
- STORAGE PERIOD
Your data will be processed for the time necessary to fulfil your requests, as well as – where necessary – for the period established by law.
With regard to sending you our newsletter, your data will be stored, unless you withdraw your consent in advance, for a maximum of 4 years from your last interaction with our newsletter.
Once the above storage periods have expired, your personal data will be destroyed, deleted or made anonymous, in accordance with technical cancellation and backup procedures.
- PROCESSING METHODS AND THEIR USE
The data will be processed, in compliance with the appropriate security and confidentiality, collected and recorded for specified, explicit and legitimate purposes.
All data processing is based on the principles of fairness, lawfulness and transparency and may be carried out both manually and using automated means, and will take place implementing appropriate technical and organisational measures, avoiding the risk of loss, destruction, unauthorised access or disclosure or, in any case, unlawful use, as well as via reasonable measures to promptly delete or rectify any inaccurate data.
- DATA RECIPIENTS
The personal data provided will be processed by staff, duly instructed and operating under the authority and responsibility of the Data Controller. Personal data may also be processed by third parties that provide instrumental services, including communication, email, hosting and website maintenance services; other providers of services relating to the aforementioned purposes.
Only data strictly necessary for the performance of the relevant functions will be disclosed to the aforementioned parties.
An updated list of all the recipients is available at the head office of the Data Controller and will be provided upon request of the data subject by writing to this email address: privacy@lungarnocollection.com
- YOUR RIGHTS
With regard to your data, you may exercise your rights under CHAPTER III of the GDPR at any time.
In particular, you have the right to request from the Data Controller access to data concerning you, its rectification or erasure, the completion of incomplete data, and the restriction of processing; to receive data in a structured, commonly used and machine-readable format; to withdraw any consent given and to object to the use of the data in whole or in part, as well as to exercise other rights recognised by applicable regulations.
You may exercise your rights by writing to this email address: privacy@lungarnocollection.com.
Pursuant to art. 77 of the GDPR, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.
- USE OF COOKIES AND COOKIE POLICY
At this link (https://www.lungarnocollection.com/cookie-policy/ ) you will find all the information about the cookies installed through this website, as well as the information you need to manage your cookie preferences.
- AMENDMENTS TO THIS PRIVACY POLICY
In its capacity as Data Controller, Lungarno Alberghi S.r.l. reserves the right to make amendments to this Privacy Policy at any time by informing the Users on this page. You are therefore requested to consult this page, checking the date of the last update indicated at the bottom.
- CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER
The Data Controller is: Lungarno Alberghi S.r.l., with registered office in VIA TORNABUONI 2 – 50123 – (FI)
E-mail: privacy@lungarnocollection.com
The Data Protection Officer (DPO) can be contacted at the email address: dpo@lungarnocollection.com
Last update: December 2025
Palazzo Ottaviani S.r.l. Privacy Policy
Pursuant to art. 13 of EU Regulation 2016/679 on the protection of personal data, in its capacity as data controller, the company PALAZZO OTTAVIANI Srl, which receives your reservation, informs you that the personal data you provide will be processed as follows:
- Type of personal data processed
Personal details, contact details, payment details and other administrative data necessary for the purposes indicated below may be processed.
- Purposes of the processing
The data will be processed to manage your reservation at the apartments and to respond to your requests.
- Legal basis and nature of data provision
The legal basis for the processing is the performance of a contract to which you are a party or the implementation of pre-contractual measures taken at your request. The provision of personal data is necessary to manage your request; failure to provide it will make it impossible for our staff to complete the reservation procedure.
- Storage period
The data will be collected and stored for the period of time necessary for the pursuit of the purposes indicated above and in any case not beyond the storage period established by law.
- Recipients of personal data
The data will be processed by staff, duly instructed and operating under the authority and responsibility of the Data Controller. Some of the information may also be disclosed to the following parties: Lungarno Alberghi Srl for the provision of marketing and administrative services; legal or consulting firms to which the Data Controller has given specific instructions; IT system support and maintenance companies; other parties or companies that perform activities instrumental to the purposes indicated above.
Only data strictly necessary for the performance of the relevant functions will be disclosed to the aforementioned parties. An updated list of all the recipients is available at the head office of the Data Controller and will be provided upon request of the data subject by writing to this email address: privacy@palazzottaviani.com.
- Data subject rights
With regard to your data, you may exercise your rights under CHAPTER III of the GDPR at any time.
In particular, you have the right to request from the Data Controller access to data concerning you, its rectification or erasure, the completion of incomplete data, and the restriction of processing; to receive data in a structured, commonly used and machine-readable format, as well as to exercise other rights recognised by applicable regulations. You may exercise your rights by writing to this email address: privacy@palazzottaviani.com.
Pursuant to art. 77 of the GDPR, you also have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.
- Contact details of the Data Controller
The Data Controller is Palazzo Ottaviani S.r.l. with registered office in Piazza degli Ottaviani no. 4r (50122), Firenze. E-mail: reservations@palazzottaviani.com.
Last update: December 2025