Your privacy is important to us. Therefore, Lungarno Alberghi S.r.l. has adopted a Privacy Policy governing how we collect, use, transfer, and store your personal data. We invite you to read this document to learn more about our privacy practices.
Through this document, Lungarno Alberghi provides you, pursuant to Articles 13 and 14 of European Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter, the “GDPR”), with information concerning the use of the website www.lungarnocollection.com (hereinafter, the “Website”) and any related processing of personal data.
Lungarno Alberghi hosts the Palazzo Ottaviani pages and provides marketing and administrative services on its behalf. If you decide to book an apartment at Palazzo Ottaviani, we invite you to consult the Privacy Policy available at the bottom of this page.
In any event, if you choose to consent to receiving promotional communications by ticking the box “I agree to receive communications from the hotel”, your personal data will be processed by Lungarno Alberghi S.r.l. in accordance with the procedures set out in the Privacy Policy below.
Should you have any questions or require further clarification, please contact us using the details provided below.
Privacy Policy Lungarno Alberghi S.r.l.
1. DATA PROCESSED AND NATURE OF THE PROVISION
1.1 Data collected while using the website
Personal data may be used to identify or contact users, as well as to provide better services to all our guests.
Automatically collected data
The IT systems and software procedures used to operate the website and all applications collect, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected for the purpose of associating it with identified individuals; however, by its very nature, it could, through processing and association with data held by third parties, make it possible to identify users. This category of data includes the IP address or domain name of the device being used, the operating system, the device model and brand, the telecommunications operator, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the server's response (successful, error, etc.), and other parameters relating to the operating system and the IT environment of your device. This data is used to compile anonymous statistics on website usage and to monitor its proper functioning.
Data voluntarily provided by the user
By submitting such information, you declare that you are responsible for the accuracy of the personal data provided to Lungarno Alberghi S.r.l.
Data relating to interactions with electronic communications
If you choose to subscribe to our newsletter, information relating to the opening of communications sent by Lungarno Alberghi may be processed. Such information is collected through a tracking pixel embedded in the communications and may include e-mail opens, clicks on links contained in messages, and interest shown in specific content or initiatives. Please note that consent to tracking may be withdrawn separately from consent to receive the newsletter, without resulting in the discontinuation of newsletter communications.
1.2 Provision of Data
Except for browsing data, users are free to provide their personal data. However, failure to provide such data may make it impossible to obtain the requested services or information.
2. PURPOSES OF PROCESSING AND LEGAL BASES
2.1 Your personal data will be processed:
a) To enable you to use the features available on the website, including booking management, the purchase and use of gift vouchers and additional services (tours/experiences, SPA services and dining services), as well as event registration;
b) To respond to any requests you may submit by e-mail;
c) For administrative, accounting and tax purposes;
d) For the technical management of the website services;
e) To exercise the Data Controller’s rights;
f) To send promotional and informational communications regarding the services and offers of Lungarno Alberghi, by e-mail (newsletter);
g) To measure the effectiveness of marketing campaigns and improve the relevance of the content offered.
Other purposes may be specified in the privacy notices relating to the use of specific services.
2.2 Legal Bases for Processing
With regard to the purposes set out in Sections 2.1(a) and 2.1(b), the legal basis for processing is the performance of a contract to which the data subject is a party and/or the implementation of pre-contractual measures taken at the data subject’s request. With regard to the personal data of the recipient of a gift voucher, the legal basis is also the Data Controller’s legitimate interest in ensuring the proper delivery and management of the gift voucher service, as well as the purchaser’s legitimate interest in having the voucher delivered to the designated recipient.
For the purposes set out in Section 2.1(c), the legal basis is the performance of a contract and compliance with legal obligations relating to tax and fiscal matters.
For the purposes set out in Sections 2.1(d) and 2.1(e), the legal basis for processing is the Data Controller’s legitimate interest in ensuring the proper administration of its systems and in exercising and defending its rights.
For the purposes set out in Sections 2.1(f) and 2.1(g), the legal basis for processing is your consent. Please note that you may withdraw your consent at any time and as easily as it was given. In particular, you may choose to withdraw your consent to receiving our newsletter or to tracking communications only, while continuing to receive them. To exercise these rights, you may use the relevant function available in the footer of our emails or contact us at: privacy@lungarnocollection.com.
3. DATA RETENTION PERIOD
Your personal data will be processed for as long as necessary to fulfil your requests and, where applicable, for the period required by law.
With regard to the sending of our newsletter, your data will be retained for a maximum period of 4 years from your last interaction with the newsletter, unless you withdraw your consent earlier. If you decide to withdraw your consent to the tracking pixel while continuing to receive the newsletter, your personal data will be processed until you request to be removed from our mailing lists.
Once the above retention periods have expired, your personal data will be destroyed, deleted or anonymised, in accordance with the technical procedures for data deletion and backup.
4. METHODS OF PROCESSING AND USE OF DATA
Your data will be collected and recorded for specific, explicit and legitimate purposes, with due regard for the necessary standards of security and confidentiality.
All data processing activities shall comply with the principles of fairness, lawfulness and transparency. Processing may be carried out manually or by automated means and shall be performed using appropriate technical and organisational measures to prevent the risk of loss, destruction, unauthorised access or disclosure, or any other unlawful use of data. Reasonable measures shall also be taken to promptly delete or rectify any inaccurate data.
5. DATA RECIPIENTS
The personal data provided will be processed by authorised personnel who have received appropriate training and operate under the authority and responsibility of the Data Controller. Personal data may also be processed by third parties providing supporting services, including communication services, email services, website hosting and maintenance, and other service providers involved in the purposes outlined above.
Only the data strictly necessary to perform the relevant functions will be disclosed to the parties mentioned above.
The up-to-date list of all data recipients is available at the registered office of the Data Controller and may be provided upon request by contacting the following e-mail address: privacy@lungarnocollection.com
6. YOUR RIGHTS
With regard to your personal data, you may exercise at any time the rights provided for under Chapter III of the GDPR. In particular, you have the right to request from the Data Controller access to your personal data, their rectification or erasure, the completion of incomplete data, and the restriction of processing. You also have the right to receive your data in a structured, commonly used and machine-readable format; to withdraw any consent previously given; to object, in whole or in part, to the processing of your data; and to exercise any other rights recognised under applicable law.
You may exercise your rights by writing to the following e-mail address: privacy@lungarnocollection.com.
Furthermore, pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the Supervisory Authority if you believe that the processing of your personal data infringes the aforementioned Regulation.
7. USE OF COOKIES AND COOKIE POLICY
Information regarding the cookies installed through this website, as well as instructions on how to manage your cookie preferences, can be found at the following link.
8. CHANGES TO THIS PRIVACY POLICY
Lungarno Alberghi S.r.l., as the Data Controller, reserves the right to amend this Privacy Policy at any time by informing users through this page. Users are therefore invited to consult this page regularly, referring to the date of the last update indicated at the bottom.
9. CONTACT DETAILS OF THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER
Data Controller: Lungarno Alberghi S.r.l., with legal office in VIA TORNABUONI 2 - 50123 – (FI)
E-mail address: privacy@lungarnocollection.com
The Data Protection Officer (DPO) can be contacted at the following email address: dpo@lungarnocollection.com
Last updated: October 2026
Privacy Policy Palazzo Ottaviani S.r.l.
Pursuant to Article 13 of EU Regulation 2016/679 on the protection of personal data (GDPR), PALAZZO OTTAVIANI S.r.l., the company receiving your booking, hereby informs you, in its capacity as Data Controller, that the personal data you provide will be processed as follows:
1. Categories of personal data processed
The personal data processed may include identification data, contact details, payment information and other administrative data necessary for the purposes set out below.
2. Purposes of processing
Your personal data will be processed to manage your apartment booking and to respond to any requests you may submit.
3. Legal basis for processing and nature of data provision
The legal basis for processing is the performance of a contract to which you are a party or the implementation of pre-contractual measures taken at your request. Providing your personal data is necessary to process your request. Failure to provide such data will make it impossible for our staff to complete the booking process.
4. Data retention period
Your personal data will be collected and sored for as long as necessary to fulfil the purposes outlined above and, in any event, no longer than the retention periods prescribed by law.
5. Recipients of Personal Data
Your personal data will be processed by authorised personnel who have received appropriate training and operate under the authority and responsibility of the Data Controller. Certain information may also be disclosed to the following parties: Lungarno Alberghi S.r.l., for the provision of marketing and administrative services; law firms and consultancy firms engaged by the Data Controller under specific mandates; companies providing IT system support and maintenance services; and other entities or companies providing services necessary for the purposes outlined above. Only the data strictly necessary to perform the relevant functions will be disclosed to the parties mentioned above.
The up-to-date list of all data recipients is available at the registered office of the Data Controller and may be provided upon request by contacting the following e-mail address: privacy@palazzottaviani.com.
6. Data Subject rights
With regard to your personal data, you may exercise at any time the rights provided for under Chapter III of the GDPR. In particular, you have the right to request from the Data Controller access to your personal data, their rectification or erasure, the completion of incomplete data, and the restriction of processing. You also have the right to receive your data in a structured, commonly used and machine-readable format, as well as to exercise any other rights recognised under applicable law. You may exercise your rights by writing to the following e-mail address: privacy@palazzottaviani.com.
Furthermore, pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the Supervisory Authority if you believe that the processing of your personal data infringes the aforementioned Regulation.
7. Contact details of the Data Controller
The Data Controller is Palazzo Ottaviani S.r.l. with legal office in Piazza degli Ottaviani n. 4r (50122) Firenze. E-mail address: reservations@palazzottaviani.com
Last updated: December 2025
