Data controller

The data controller is LE II COLONNE S.R.L., Viale Alessandro Guidoni 20, 50127 Firenze, P.IVA / C.F. IT07445810489. For any request about your data, you can write to the registered office above.

Data we collect

We only collect the data you choose to enter in our contact forms: first and last name, email, phone and details about your stay (home of interest, dates, number of guests) or your property (city, neighbourhood, type, size, bedrooms, current status, any online listing) plus your message.

The website uses no analytics tools, advertising pixels or profiling.

Purpose and legal basis

Your data is processed only to answer your request and, if you wish, to prepare a proposal for a stay or for property management. The legal basis is pre-contractual steps taken at your request (Art. 6.1.b GDPR) and the consent you give in the form (Art. 6.1.a GDPR).

Retention

We keep requests for as long as needed to handle the contact and in any case no longer than 24 months after the last exchange, unless a contract follows, in which case statutory retention periods apply.

Recipients and transfers

Data is stored on cloud infrastructure provided by processors acting on our behalf. Requests sent through the forms are also delivered to us by email via Formspree (Formspree, Inc., United States). We do not sell or share data with third parties for marketing. Any transfer outside the European Economic Area relies on the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

Your rights

You may at any time request access to, correction, erasure, restriction or portability of your data, object to processing and withdraw consent, without affecting the lawfulness of prior processing. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Cookies

The public website sets no profiling or third-party cookies. Fonts are served from our own domain.

The administrators' private area uses technical browser storage that is strictly necessary to keep the sign-in session, so no consent is required.