Privacy Policy

By /

Last updated: 04/03/2026

1. Data Controller

The Data Controller of the personal data is:

mòsì – Bed and Breakfast
via Fortini 7/9, Florence
Email: info@mosifirenze.com
VAT No. / Tax Code: VAT 06678140481

2. Categories of data processed and purposes

The Controller processes users’ personal data for the following purposes, in compliance with the legal bases indicated:

PurposeData processedLegal basis
Service provision and technical operation of the websiteBrowsing data (IP, browser, pages visited, timestamps)Art. 6(1)(b)/(f) GDPR – Performance of a contract / Legitimate interest
IT security and prevention of fraud and abuseBrowsing data, access logsArt. 6(1)(f) GDPR – Legitimate interest
Statistical analysis of visits to improve the websiteAnonymized browsing data, usage statisticsArt. 6(1)(a) GDPR – Data subject’s consent
Marketing, personalized advertising and remarketingBrowser identifiers, ad interactionsArt. 6(1)(a) GDPR – Data subject’s consent
Compliance with legal, tax and accounting obligationsPersonal and tax data required by lawArt. 6(1)(c) GDPR – Legal obligation

3. Transfer of data to third countries

Some of the service providers used may process data outside the European Economic Area (EEA). In such cases, the transfer takes place in compliance with the safeguards provided for by the GDPR (Chapter V), in particular on the basis of adequacy decisions of the European Commission, Standard Contractual Clauses (SCCs) or the EU-U.S. Data Privacy Framework.

4. Service providers and data processors

The Controller uses third parties that process data on its behalf as Data Processors (art. 28 GDPR) or, in some cases, as independent controllers:

ProviderServiceLocationPrivacy Policy
Google LLCGoogle Analytics 4USA / Outside the EEAPrivacy Policy
Google LLCGoogle Tag ManagerUSA / Outside the EEAPrivacy Policy
Hotjar LtdHotjarUSA / Outside the EEAPrivacy Policy
Microsoft CorporationMicrosoft ClarityEEAPrivacy Policy
Google LLCYouTube (video embed)USA / Outside the EEAPrivacy Policy
Vimeo, LLCVimeo (video embed)USA / Outside the EEAPrivacy Policy
Google LLCGoogle MapsUSA / Outside the EEAPrivacy Policy
Meta Platforms, Inc.Facebook Social PluginUSA / Outside the EEAPrivacy Policy
Meta Platforms, Inc.Instagram EmbedUSA / Outside the EEAPrivacy Policy
Google LLCGoogle reCAPTCHAUSA / Outside the EEAPrivacy Policy
Cloudflare, Inc.CloudflareUSA / Outside the EEAPrivacy Policy
Google LLCGoogle FontsUSA / Outside the EEAPrivacy Policy
Automattic Inc.WordPress (technical)USA / Outside the EEAPrivacy Policy

5. Data retention

Personal data are stored for the time strictly necessary for the purposes for which they were collected:

  • Browsing data: up to 12 months;
  • Analytics data: according to the tool settings (generally 14 months);
  • Accounting and tax data: 10 years from registration (legal obligation);
  • Consent cookies: 365 days.

6. Data subject rights

Pursuant to Articles 15–22 of the GDPR, the data subject has the right to:

  • Access (Art. 15): obtain confirmation and a copy of the processed data;
  • Rectification (Art. 16): update or correct inaccurate or incomplete data;
  • Erasure (Art. 17): request deletion of data (“right to be forgotten”);
  • Restriction (Art. 18): request restriction of processing;
  • Data portability (Art. 20): receive the data in a structured, commonly used and machine-readable format;
  • Objection (Art. 21): object to processing for direct marketing purposes or on the basis of legitimate interest;
  • Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise these rights, the data subject may write to: info@mosifirenze.com.

The data subject also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

7. Cookies and tracking technologies

The website uses cookies and tracking technologies. For detailed information on types, purposes and consent management, please refer to our Cookie Policy.

8. Changes to this notice

The Controller reserves the right to make changes to this notice at any time. In the event of substantial changes, users will be informed through a notice on the website. Users are advised to periodically review this page, checking the last updated date shown at the top.