Book now

Privacy Policy

Last updated: 20 October 2026

This policy explains how we process the personal data of people who visit myguestinflorence.it, contact us or stay with us, in accordance with Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.

1. Data controller

Cugi Group S.r.l., operator of the guest house My Guest in Florence
Registered office: Via San Gregorio 55, 20124 Milan, Italy
VAT no. 14020000965
Operating address: Via Santa Reparata 105, 50129 Florence, Italy
Email: info@myguestinflorence.it · Phone and WhatsApp: +39 375 673 4589

2. What data we process

  • Browsing data: IP address, browser type, pages visited and technical data collected automatically by the systems that run the website.
  • Data you give us: name, email, phone number and the content of your messages when you write to us by email, phone or WhatsApp.
  • Booking data: name, contact details, dates of stay, number of guests, any requests (for example a cot or a pet) and payment details, collected by the booking system.
  • Data required by law for your stay: personal details and identity document details of every guest, collected through online check-in.
  • Cookies and similar tools: as described in our Cookie Policy.

3. Why we process it and on what legal basis

  • To answer your enquiries before you book: pre-contractual steps taken at your request (Art. 6.1.b GDPR).
  • To manage your booking and stay (confirmation, pre-arrival messages, sending access codes, assistance during your stay, extra services): performance of a contract (Art. 6.1.b).
  • To meet legal obligations: reporting guest details to the police (Art. 109 TULPS, Alloggiati Web portal), the City of Florence tourist tax, statistical surveys and tax and accounting obligations (Art. 6.1.c).
  • To keep the website running securely and prevent misuse: legitimate interest (Art. 6.1.f).
  • To show third-party content such as the Google map: only with your consent via the cookie banner (Art. 6.1.a), which you can withdraw at any time.

We do not use your data for profiling or automated decision-making. We do not send newsletters or promotional messages without your consent.

4. Is providing data mandatory?

Booking data and data required by law are necessary: without them we cannot confirm your booking or host you. Information in your messages is optional, but we need it to reply.

5. Who we share data with

Your data is processed by us and by suppliers acting on our behalf as data processors, only as far as necessary to provide the service:

  • Aruba S.p.A.: website hosting (servers in Italy).
  • Kross Booking: booking engine and reservation management.
  • Payment providers used during booking: card details are processed directly by them and are not stored by us.
  • Booking platforms (for example Booking.com or Airbnb), if you book through them: their own privacy policies also apply.
  • WhatsApp (Meta Platforms Ireland Ltd.): if you choose to contact us via WhatsApp.
  • Google Ireland Ltd.: for the interactive map, only if you accept the related cookies.
  • Advisers, such as our accountant, for tax and accounting obligations.

Data is also disclosed to the authorities where required by law (police, City of Florence, Italian Revenue Agency, statistics bodies). We never sell or pass on your data to third parties for commercial purposes.

6. Transfers outside the European Union

Some suppliers, such as Google and Meta, may also process data outside the EU. In these cases transfers are based on the EU-US Data Privacy Framework or on Standard Contractual Clauses approved by the European Commission.

7. How long we keep data

  • Messages and enquiries not followed by a booking: up to 12 months.
  • Booking data and tax documents: 10 years, as required by tax law.
  • Identity document details: sent to the police and kept only for as long as strictly necessary to meet legal obligations.
  • Cookies: for the periods stated in the Cookie Policy.

8. Your rights

You can ask us at any time to access, correct or delete your data, restrict its processing, object to processing based on legitimate interest, receive your data in a portable format and withdraw any consent given, without affecting processing already carried out. Just write to info@myguestinflorence.it: we will reply within 30 days.

If you believe your data is not being processed lawfully, you can lodge a complaint with the Italian Data Protection Authority, the Garante per la protezione dei dati personali.

9. Changes to this policy

We may update this policy when our services or the law change. The version in force is always the one published on this page, with the date of the last update.