Within the meaning of EU Regulation 2016/679 (hereinafter “the Regulation”), this page describes the processing of personal data of users who consult
This information does not relate to other sites, pages or online services accessible via hypertext links published on the website but related to resources outside the domain

After visiting the websites listed above, data relating to identified or identifiable physical persons may be processed.
The Data Controller is Compagnia Italiana Alberghi C.I.A. S.p.a. with registered office in Piazza dell’Unità Italiana 6, Florence.
Data Controller’s contact email:

The Compagnia Italiana Alberghi C.I.A. S.p.a. does not require the Data Protection Manager within the meaning of Article 37 of EU Regulation 679/2016.

a. Purposes related to the execution of a contract to which the data subject is party (e.g. purchase of services), or to the implementation of pre-contractual measures adopted at the request of the data subject (e.g.: Contact Request via messages sent to the contact addresses referred to on this website, etc.);
b. purpose of statistical analyses on anonymous data, therefore with no possibility of identifying the user, aimed at measuring the functioning of the Website, to measure traffic and evaluate usability and interest;
c. purposes relating to the fulfilment of a legal obligation to which the Compagnia Italiana Alberghi C.I.A. S.p.a. is subject;
d. purposes necessary to ascertain, exercise or defend a right in judicial proceedings or whenever the judicial authorities exercise their judicial functions;
e. subscription to the newsletter service;
f. sending of commercial communications.

The legal basis of the processing of personal data for the purposes referred to in point a) is the service supply contract or the execution of pre-contractual measures. The processing of personal data by the data controller for the purposes referred to in point a) does not require the consent of the data subject within the meaning of the applicable legislation.
The purpose referred to in point b) does not involve the processing of personal data.
The data processing aimed at the achievement of the purposes referred to in points c) and d) represent a legitimate activity insofar as is necessary to fulfil the legal obligations to which the data controller is subject or to exercise the right of defence in court.
To achieve the purposes referred to in point e) the data controller bases the data processing on the consent of the data subject.
To achieve the purposes referred to in point f) the data controller bases the data processing on the consent of the data subject.

With the exception of the browsing data necessary for carrying out IT and electronic protocols, the provision of personal data by the users through the various methods made available is free and optional.
In particular with regard to the purposes referred to in point a) the provision of personal data is optional, but failure to do so could make it impossible to supply the service and/or to respond to the requests received.
With regard to the purposes referred to in point e) the provision of personal data is optional, however, in the absence of the requested data and/or of the consent of the interested party, the same may not receive our newsletter.
With regard to the purposes referred to in point f) the provision of personal data is optional, however, failure by the data subject to provide the requested data and/or their consent may result in not receiving our newsletter.


Web browsing data
In normal operation, the computer systems and software procedures involved in the operation of this website acquire some personal data which is implicitly transmitted when using Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users, addresses in URI/URL (Uniform Resource Identifier/Locator) notation of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (completed, error, etc.) and other parameters related to the user’s operating system and computer environment.
This data is necessary for the use of the web services, they are also processed to:

  • obtain statistical information on the use of the services (most visited pages, number of visitors by time or by day, geographical areas of origin, etc.);
  • check the correct operation of the services offered.

Browsing data is not kept for more than seven days and is immediately deleted after aggregation (subject to any requirement to investigate offences by the judicial authority).

Data communicated by the user
The optional, explicit and voluntary sending of messages to contact addresses of Compagnia Italiana Alberghi C.I.A. S.p.A., as well as filling out and submitting the forms on the website, involve the acquisition of personal data of the data subject (required to deliver the service of selling products, responding to the requests of the data subjects, etc.) as well as all the personal data included in the communications.
Specific information will be published on the website prepared for the provision of certain services.

Cookies and other tracking systems
Compagnia Italiana Alberghi C.I.A. S.p.a. collects personal data through cookies. More information about the use of cookies and related technologies is available via the link at the bottom of this website (“Cookie Policy”).

The data collected is processed with IT tools and only residually on paper.
The Data Controller uses servers located within Europe and IT systems located at the Data Controller’s headquarters to process the data related to the services of the website. The transfer of data abroad is not envisaged.
Appropriate technical and organisational measures have been adopted to guarantee an appropriate level of security and to prevent the loss of data, illicit or incorrect use and unauthorised access.
The data provided directly by the data subject is kept for the time strictly necessary to process the data subject’s requests and then deleted, except in the cases of the purchase of products (for which the data will be kept for the duration of the relationship and according to the requirements of the law), subscribing to the newsletter service (for which the data will be kept until consent is withdrawn) and for defensive needs (which could make further preservation necessary).
Browsing data is not kept for more than seven days and is immediately deleted after aggregation (subject to any requirement to investigate offences by the judicial authority).

The data subject’s data may be communicated or may become known to the employees or collaborators of our company, expressly designated by us as “authorised to process data” and/or appointed “external processing manager”. The provider of web platform development and maintenance services appointed by the Compagnia Italiana Alberghi C.I.A. S.p.a. is, by way of non-limiting example, the recipient of the data collected following consultation of the website within the meaning of Article 28 of the Regulation, as external processing manager.

Data subjects have the right to obtain from the Compagnia Italiana Alberghi C.I.A. S.p.a., in the cases provided for, access to personal data and the correction or cancellation of such data or restrict any processing that concerns them or oppose the processing and the portability of data (Articles 15 et seq. of the Regulation).
Requests should be sent to

Data subjects who believe that the processing of the personal data related to them carried out via this website takes place in breach of the requirements of the Regulation have the right to submit a complaint to the Data Protection Authority, as laid down in Article 77 of the same Regulation, or to complain to the appropriate courts (Article 79 of Regulation).



This Cookie Policy is an integral part of the Privacy Policy of the Compagnia Italiana Alberghi C.I.A. S.p.a., available via the link at the bottom of this website (“Privacy Policy”).
This document provides users who browse the website with information relating to the cookies used.

A “cookie” is a small text file created on the user’s computer when accessing a particular site, with the purpose of storing and transporting information. Cookies are sent by a web server (which is the computer that is running the website visited) to the user’s browser (Internet Explorer, Mozilla Firefox, Google Chrome, etc.) and stored on the user’s computer; they are then sent to the website at the time of subsequent visits. When browsing the user may receive cookies on their terminal that are sent from different websites or web servers (called “third-party” cookies), set directly by the operators of said websites and used for the purposes and according to the methods laid down therein.
In line with the applicable legislation, the prior consent of the user for the use of cookies is not always required. In particular, such consent is not required for “technical cookies”, e.g. those used only for the purpose of transporting a communication through an electronic communications network or strictly necessary to provide a service expressly requested by the user. In other words, cookies that are essential to the operation of a website. Furthermore, according to the applicable legislation, the prior consent of the user for the use of cookies is not required when cookies are of analytical third-party cookies and tools were adopted that reduce the identifying power of the cookies themselves and the third-party has undertaken not to cross-check the information collected with others which is already in its possession.

The website uses cookies only to ensure and facilitate browsing and use of the website and to collect information in an anonymous form, on visits to the site.

First-party cookies
The website uses technical cookies, with respect to which, according to the applicable law, no consent is needed on the part of the user. The website uses technical cookies necessary for browsing by the user in the absence of which the website may not work correctly.

Third-party cookies
Some third-party cookies are installed through the website. This is an anonymised analytical cookie (having activated the arrangements laid down by the Guarantor Authority), which does not require any consent.
The website uses Google Analytics for statistical purposes only. This is a web analysis service provided by the American company Google LLC (“Google”), which adheres to the Privacy Shield and, for this service operates as data controller.
(“Google”) which uses cookies that are stored on the user’s computer to allow anonymous statistical analysis of the use of the website visited; it is also specified that besides the cookies, a pixel tag is also used by Google (
The data generated by Google Analytics is stored by Google as indicated in the Information policy available here
The retention time was set at 14 months.
To consult Google’s privacy policy, please refer to the website

As expressly indicated by the Italian Personal Data Protection Authority with the “Clarifications on the implementation of the regulation on cookies” of the 5th June 2015, the websites that use, for statistical purposes only, analytical cookies created and made available by third parties are not subject to the obligations and requirements prescribed by law (including consent) if appropriate tools are adopted to reduce the identifying power of analytical cookies used (e.g. by masking significant portions of the IP address) and provided that the use of these cookies is subject to contractual obligations between websites and third parties, in which express reference is made to the commitment of the third-party or to use them exclusively for the provision of the service, to keep them separately and not “enrich them” or not “cross-reference them” with other information held by them.

The data controller of the website has decided to use the user IP anonymity function provided by Google (described in the following link: and has accepted the Amendment on data processing made available by Google Analytics with which Google undertakes to process the data according to the requests of the website Customer-Data Controller and to not share it with other additional services if not requested by the Customer itself, through the service settings. On this point, the user is hereby informed that the Data Controller of this website has not linked Google Analytics to any additional service and that no advertising or data sharing option has been activated with Google. In light of the measures adopted, the Google Analytics services, used by this website for statistical purposes only, is activated upon landing, not requiring the user to consent to the use of the related cookies.
The following link contains the browser’s add-on for disabling Google Analytics.

Cookies for the integration of third-party features
Cookies of this type are used to integrate third-party features on the website (e.g., the insertion of social network icons, the so-called social button, that allow visitors to share the contents of the site, the insertion of special links, links to platforms for the purchase of services and/or booking, etc.). Cookies in this category can be sent from the domains of third-party websites or which in any case offer features that are present on the website. For third-party cookies consent may be expressed by the user in accordance with the regulations in force, by means of specific browser settings and computer programs or devices to prevent the installation of third-party cookies. The user can view third-party information via the links below. The Data Controller reminds the user that it is possible to change the cookie preference at any time. It is also possible to disable cookies from your browser at any time. Both of these solutions may prevent the user from using or viewing parts of the website.

Services Used:
• Facebook policy:
• Facebook (settings): access to your account. Privacy section.
• Instagram policy:
• Instagram (settings): accessible from “Assistance”, “Tools” or “Edit”
• Twitter policy:
• Twitter (settings):
• Youtube policy:
• Youtube (settings):
• Google Maps: these are profiling cookies used by Google Maps to store user preferences during the display of maps (PREF) and to keep track of the visitor’s behaviour (other cookies).
To consult Google’s privacy policy, please refer to the website

The user may authorise, block or delete (in whole or in part) cookies through the specific functions of your browser or through additional third-party components. However, disabling technical cookies on the website may mean that some services or features of the website will not be available or may not function properly and the user might be forced to change or enter some information manually or on every visit.
For more information on how to set preferences on the use of cookies through your browser, please refer to the following instructions:
Internet Explorer