Informative note according to the EU regulation 2016/679 and to the Dlgs 196/2003 (Personal Data Protection Code) and subsequent modifications.

Last update: September 2018.

In application of the European Regulation N. 679 of 2016 de D. Lgs. N. 196 of 2003 concerning the protection of personal data it is communicated that the owner of the data processing is Ms. Paola Calanni Runzo, manager of the Bed and Breakfast La Terrazza di Paola, via de ‘ Vanni 3, 50142 Firenze, fiscal code: CLNPLA85H64F656V.

The personal data are treated in full compliance with the EU regulation 679/2016 and D. Lgs 196/2003 and subsequent modifications.

The data provided by you (hereinafter referred to as “the person concerned”) will be used only in order to comply with your requests and may be communicated to third parties only if this is necessary for that purpose, or after your express consent.

The processing of the data will be done by staff commissioned by the owner with procedures, technical and computer tools to protect the confidentiality and security of the data of the person concerned and consists in their collection, registration, organization, Storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation, destruction thereof including the combination of two or more of the activities Above.

The data will be stored on a computer support and on the fiscal paper documentation for a minimum time of five years in compliance with the retention obligations provided by law. The data of the person concerned will not be widespread, with the exception of the administration of the structure, on which the same obligations comply with the rules stated above.

The data may be communicated to all those persons authorized by law to their collection (e.g. Provincial companies for health services, financial administration, etc.)

The person concerned may request a complete and updated list of the persons appointed responsible for the treatment by contacting the contact below.

Rights of the person concerned

Right of access (art. 15 GDPR). The right of the person concerned to obtain access to his data and to complain to the supervisory authority.

Right of grinding (art. 16 GDPR). Right of the person concerned to obtain from the holder of the treatment the correction of the inaccurate personal data concerning him.

Right to cancellation (right to oblivion) (art. 17 GDPR). The person concerned has the right to obtain from the holder of the treatment the cancellation of personal data concerning him without undue delay.

Right to limitation of treatment (art. 18 GDPR). The right of the person concerned to obtain a limitation of the treatment of data.

Obligation to notify (art. 19 GDPR). The holder of the treatment shall communicate to each of the recipients to whom the personal data have been transmitted any corrections or cancellations or limitations of the treatment carried out pursuant to the Artt. 16 17 18.

Right to data portability (art. 20 GDPR). The person concerned has the right to receive the personal data concerning him provided to the holder and has the right to transmit such data to another holder of treatment without hindrance from the holder.

Right to the opposition (art. 21 GDPR). The right of the person concerned to oppose the processing of his personal data.

Profiling (art. 22 GDPR). The person concerned has the right not to be subjected to a decision based solely on automated treatment, including profiling or which significantly affects his or her individual.

Art. 7-Right of access to personal data and other rights

1. The person concerned has the right to obtain confirmation of the existence or otherwise of personal data concerning him, even if not yet registered, and their communication in intelligible form.

2. The person concerned has the right to obtain the indication:
A) of the origin of the personal data;
b) of the purposes and modalities of treatment;
c) of the logic applied in the case of treatment carried out with the aid of electronic instruments;
(d) The identifying particulars of the holder, the persons responsible and the designated representative within the meaning of article 5 (2);
e) of the subjects or categories of persons to whom personal data may be communicated or which may be known to them as a designated representative in the territory of the State, of persons responsible or appointees.

3. The person concerned has the right to obtain:
A) The updating, rectification or, when interested, the integration of data;
(b) The cancellation, the processing anonymously or the blocking of the data processed in violation of the law, including those whose preservation is not necessary in relation to the purposes for which the data has been collected or subsequently processed;
(c) The attestation that the transactions referred to in (a) and (b)) have been brought to the attention, including with regard to their content, of those to whom the data have been communicated or disseminated, except where such fulfilment proves to be impossible or entails A use of means manifestly disproportionate in relation to the protected law.

4. The person concerned has the right to oppose, in whole or in part:
A) for legitimate reasons for the processing of personal data concerning it, although relevant to the purpose of the collection;
b) The processing of personal data concerning him for the purposes of sending advertising or direct sales material or for the completion of market research or commercial communication.

The sites we redirect to, including (but not limited to) secondary sites and third-party service providers, may have a different privacy policy than the one displayed here. We assume no responsibility for the privacy policies of linked sites and therefore we encourage you to become acquainted with them.


We do not intend to collect personal information from any person under 16 years of age. If you are under 16 years old, you should not make an online reservation or any inquiries, but ask a parent to do so in your place.

Questions or concerns

At any time believe that the owner has not followed the above mentioned policy, we invite you to notify us by sending an email to and we will try to do our best to identify and solve any problem. You can also write to Paola Calanni Runzo, via de ‘ Vanni 3, 50142 Firenze,

Changes in this online privacy policy

We may vary this privacy statement from time to time to cope with changes in regulations, business needs or to meet the requirements of our visitors, guests, market partners and service providers. Updated versions will be published on our website, together with the update dates, to inform you of the last update of the privacy policy.

Comments are closed.