Privacy
and cookies.

1. Data controller

The data controller is the operator of the Casa Pasquini accommodation, at Via Pasquini 2, 50127 Florence (FI), Italy.

You can contact the controller about anything concerning your personal data on WhatsApp at +39 339 493 9849, or by post at the address above.

National Identification Code (CIN) of the property:

No Data Protection Officer has been appointed, as the legal conditions requiring one do not apply.

2. What data we collect

2.1 Data you give us

When you fill in the “Check availability” form we collect your name, email address, arrival and departure dates, number of guests and any message you write.

When you book through the booking engine, this data is passed to Smoobu, which handles the booking on our behalf. Payment is taken by Stripe: your card details are collected directly by them and never pass through our site.

If the engine is unavailable, a request form appears in its place which sends nothing to a server of ours: on submission it opens WhatsApp on your device with the message already composed, and you decide whether to send it.

2.2 Data collected automatically

For technical and security reasons, the provider hosting the site records ordinary connection data: IP address, date and time of the request, the page requested, browser type and operating system. These are technical logs, not used to profile you.

2.3 Data we do not collect

The site uses no profiling cookies, runs no behavioural advertising, installs no analytics tools and does not sell data to anyone.

3. Why we process data, and on what legal basis

Providing the form data is optional, but without it we cannot reply to you. Ticking the box to confirm you have read this notice is required in order to send the request.

4. Who the data is shared with

Your data may be processed by the following parties, each for its own part:

• The site’s hosting provider, which keeps the technical connection logs as a data processor.
• WhatsApp Ireland Limited (Meta group), if you choose to contact us on WhatsApp. The conversation is then also subject to WhatsApp’s own privacy policy, over which we have no control.
• Google Ireland Limited, for the Google Fonts typefaces and — only if you allow it with a click — for the Google Maps map. See the next section.
• Smoobu GmbH (Berlin, Germany), which provides the site's booking engine: booking data is also processed through its platform, as a data processor.
• Stripe Payments Europe, Ltd. (Dublin, Ireland), which handles card payments. Card details are collected directly by Stripe: they never pass through our systems and we do not store them in any form.
• Public authorities, in the cases required by law (the Questura through Alloggiati Web, the City of Florence for the tourist tax, ISTAT).
• Tax and accounting advisers, for mandatory filings.

Your data is neither published nor passed to third parties for commercial purposes. Some of the providers listed belong to groups based in the United States: any transfers outside the EU rely on the Standard Contractual Clauses approved by the European Commission or on the EU–US adequacy decision (Data Privacy Framework).

5. Cookies and similar technologies

This site sets no profiling cookies and no third-party cookies when the page loads. That is why you see no consent banner: there is nothing to consent to.

5.1 Technical browser storage

We use a single sessionStorage entry called map-consent to remember, during your visit, that you have already chosen to load the map, so we do not ask again on every page. It clears itself when you close the browser tab. It is a technical tool and as such needs no prior consent.

5.2 Google Maps — only with your consent

The map in the “Getting here” section does not load automatically. Until you press “Load the map”, your browser never contacts Google’s servers and no cookie is set. Once you load it, Google receives your IP address and device information, and may set its own cookies.

To withdraw consent, simply close the browser tab: the map will be blocked again when you return. You can still find us through the “Open directions in Google Maps” button, which takes you to Google’s site only if you want to go.

5.3 Google Fonts

The site’s typefaces are served by Google Fonts. Loading them means a request to Google’s servers, which receive your IP address. Google states that it does not use this data for profiling and sets no cookies through the Fonts service.

If you would rather avoid that exchange entirely, the fonts can be hosted on our own server: it is a planned technical change, and this notice will be updated accordingly.

5.4 Managing cookies in your browser

You can block or delete cookies from your browser settings. Instructions are in the guides for Chrome, Firefox, Safari and Edge. Blocking cookies entirely may limit how the map works.

6. Your rights

You can exercise the rights granted by Articles 15–22 GDPR at any time:

• Access — find out what data of yours we process, and get a copy.
• Rectification — correct inaccurate data or complete it.
• Erasure — have your data deleted, except what we must keep by law.
• Restriction — ask that data be kept but not used further.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdrawal of consent — at any time, without affecting the lawfulness of processing already carried out.

To exercise them, write to us using the contacts in section 1. We will reply without undue delay, and in any case within one month of the request.

If you believe the processing breaches the law, you have the right to lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome) or to bring the matter before a court.

7. Security and automated processing

We take appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure. The site is served over an encrypted HTTPS connection.

We carry out no profiling and no automated decision-making that produces legal effects concerning you.

8. Changes to this notice

This notice may be updated to reflect changes in the law or new features on the site — for example when the booking engine goes live. The version in force is always the one published at this address, with the update date shown at the top of the page.