Privacy policy

Hotel Ester, Largo Fratelli Alinari, 15, 50123 Firenze (FI), Italia. Contact: info@hotelester.it · +39 055 280952.

• Identification and contact data: name, surname, email, phone number, country.
• Stay data: dates, number of guests, children’s ages, extras and special requests.
• Payment data: handled directly by Nexi on its secure pages. The hotel never receives or stores your full card details.
• Identity document data, collected at arrival as required by Italian law (Art. 109 TULPS).
• Messages sent with the contact form.
• Technical browsing data (IP address, browser, pages visited) needed to run and protect the website.

• Managing your booking and your stay: performance of a contract (Art. 6(1)(b)).
• Legal obligations: registering guests with the Police (Alloggiati Web), the official tourism statistics (ISTAT, through the Tuscany Region), the city tax, tax and accounting duties (Art. 6(1)(c)).
• Answering requests sent with the contact form: pre-contractual measures (Art. 6(1)(b)).
• Website security and fraud prevention: legitimate interest (Art. 6(1)(f)).
• Website usage statistics: only with your consent (Art. 6(1)(a)), which you can withdraw at any time.

Providing the data marked as required is necessary to book: without it we cannot confirm the reservation.

Data is processed by authorised hotel staff and by providers acting on our behalf: the payment provider (Nexi), the website hosting provider and the email delivery service. Data is disclosed to public authorities (Police, Tuscany Region for ISTAT, Municipality of Florence, Revenue Agency) only where the law requires it.

Some providers (for example the email delivery service) may process data in the United States: the transfer is based on the EU-U.S. Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

• Booking, invoicing and accounting data: 10 years, as required by tax law.
• Contact form messages: up to 24 months after the last exchange.
• Technical logs: up to 6 months, unless needed to investigate abuse.
• Cookie choices: 6 months, after which we ask again.

You may ask for access to your data, its rectification or erasure, restriction of processing, data portability, and object to processing; you may withdraw consent at any time without affecting earlier processing. Write to info@hotelester.it.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

The website uses encrypted connections (HTTPS). Payments take place on Nexi’s certified pages with 3D Secure authentication. Links to manage a booking are personal and signed, and expire automatically.