Legal notice

Privacy & Cookie Policy

How we process your personal data when you visit this site, contact us or book a stay, under Regulation (EU) 2016/679 (GDPR) and the Italian Privacy Code.

1. Data controller

The data controller is Hotel Firenze 2000, Viale Raffaello Sanzio, 16, 50124 Firenze (Italia). For any question about your data you can write to infofirenze2000@gmail.com or call +39 055 290 756.

2. What data we process and why

Browsing data. Our hosting provider’s systems automatically log IP address, date and time of the request, page visited, browser and operating system. This is needed to run the site, keep it secure and prevent abuse (legitimate interest, Art. 6(1)(f) GDPR) and is kept only for as long as strictly necessary.

Contact form. When you write to us we collect your name, email, optional phone number and the content of your message, solely to reply to you (pre-contractual steps at your request, Art. 6(1)(b) GDPR). Messages are kept for as long as needed to handle the enquiry and in any case no longer than 12 months.

Bookings. Online bookings are made through the Cloudbeds booking engine, which collects the data needed for the reservation (name, contact details, dates, payment guarantee) under its own privacy policy. The hotel receives this data to perform the accommodation contract (Art. 6(1)(b) GDPR).

Check-in. A valid ID document and a credit card are required on arrival: Italian law (Art. 109 TULPS) obliges accommodation providers to report guests’ identity details to the police via the Alloggiati Web portal (legal obligation, Art. 6(1)(c) GDPR). These data are retained for the periods required by law, including tax law.

Statistics and advertising (only with your consent). If you accept statistics and marketing cookies, we use Google Analytics 4 to understand how the site is used and Google Ads to measure conversions from our campaigns and show relevant ads (consent, Art. 6(1)(a) GDPR). You can withdraw consent at any time via the “Cookie preferences” link in the footer.

Web fonts. The site loads its typefaces from Google Fonts: while loading, your browser sends your IP address to Google’s servers (legitimate interest in displaying the site correctly).

3. Recipients

Data may be processed on our behalf, as processors, by: Hostinger (website hosting, servers in the European Union); Cloudbeds (booking engine and property management system); Google Ireland Ltd (web fonts and, only with consent, Google Analytics and Google Ads). Data may also be disclosed to public authorities where the law requires it. We never sell or pass on your data to third parties for marketing purposes.

4. Transfers outside the European Union

Some providers (Cloudbeds, Google) may process data in the United States. Transfers rely on the EU-US adequacy decision (Data Privacy Framework) and/or the Standard Contractual Clauses approved by the European Commission.

5. Retention

We keep data only for as long as needed for the purposes described: technical logs for a few months; contact enquiries for up to 12 months; booking and stay data for the statutory periods (generally 10 years for tax obligations); statistics and advertising data for the cookie lifetimes listed in the Cookies section.

6. Your rights

Under Articles 15–22 GDPR you have the right to access your data, to have it rectified or erased, to restrict processing, to data portability and to object to processing, as well as to withdraw consent at any time without affecting the lawfulness of prior processing. To exercise your rights write to infofirenze2000@gmail.com. You also have the right to lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it).

7. Cookies and similar technologies

This site uses the following categories of cookies and similar technologies:

  • Necessary — your cookie choice is stored in your browser (key hf2000-consent, 12 months). No consent required.
  • Statistics (Google Analytics 4: cookies _ga, _ga_*, up to 2 years) — measure visits and site usage in aggregate form. Active only with your consent.
  • Marketing (Google Ads: cookies _gcl_au, _gcl_aw and google.com/doubleclick.net cookies, up to 90 days or 13 months) — measure advertising conversions and enable remarketing. Active only with your consent.

On your first visit the banner lets you accept, reject or customise the categories. Closing the banner without choosing counts as rejecting non-necessary cookies. You can change your choice at any time via the “Cookie preferences” link in the footer or by deleting cookies in your browser settings. For Google you can also use the Google Analytics opt-out add-on and your ads settings.

8. Updates

This notice may be updated; the version published on this page is the one in force. Last updated: 5 September 2026.