Information on the use of cookies and similar tracking technologies
Last revised: October 13, 2025

1. Introduction and regulatory references
This policy outlines the key information regarding the processing of personal data and the use of cookies on this site.
This notice is intended for anyone who accesses or uses this site. It describes how we collect, use, and protect your personal data, which may be collected through cookies and similar technologies, as well as your legal rights.
These provisions do not apply to other sites, pages, or online services accessible through external links that may be present on the site. Please consult the relevant privacy policies for these sites.
This information is provided in compliance with the main national and international regulations regarding the protection of personal data, including:

• Regulation (EU) 2016/679 (GDPR)
• UK General Data Protection Regulation (UK GDPR) and Data Protection Act (UK)
• Swiss Federal Act on Data Protection (nFADP / LPD)
• Brazilian Personal Data Protection Law (LGPD)
• Other regulations that may apply.

2. Who manages your data and how can you contact us?
Your personal data is processed by:
Atlantic SRL
Via Nazionale, 10 - 50123 Florence (FI) - ITALY
info@hotelmachiavelli.it
VAT NUMBER: IT 03438580486

For any information regarding the processing of personal data or to exercise their rights under the law, interested parties can contact the Data Controller.

3. What data do we collect when you visit the site?
When you browse this site, we automatically collect certain information through cookies, similar tools, and tracking technologies. The main types of data that may be recorded include:

• Technical and navigation information: IP address, device identifiers, information about the browser and operating system, date and time of access, pages visited, technical commands necessary for the correct display of content, system errors.
• User Preferences: choices made in relation to cookies and privacy settings, collected through panels, banners, or similar tools.
• Aggregated data and anonymous statistics: Information used to evaluate and improve the functioning of the site, such as frequency of visits or most consulted areas.
• Interactions with external services or social networks: Technical data shared when you interact with social plugins, external services, or third-party tools that may be integrated into the site, always in accordance with the rules of the managers involved.

For details on how we process data provided via contact forms, service requests, or other features, please consult our Privacy Policy.

4. What types of cookies (and similar) are there?
To provide you with a better browsing experience, we may use different categories of cookies and similar technologies (web beacons, local storage, and similar technologies):

• Strictly necessary cookies: essential for the technical functioning of the site, for example, they allow access to protected areas, manage the session or remember essential preferences.
• Cookies for preferences and personalization: They are used to store your display choices, such as language, text size, or browsing mode, to offer you an interaction that is more tailored to your tastes.
• Analytical and performance cookies: They help us better understand how people use the site by collecting anonymous and aggregate data on traffic, most visited pages, visit times, and most popular features.
• Cookies for promotional or advertising activities: used to offer personalized commercial content and monitor the effectiveness of advertising campaigns.
• External components and services: By interacting with social plugins, analytics tools, or third-party platforms, cookies or similar systems managed directly by third parties may be installed.

5. How can you give or deny consent to the use of cookies?
A. Jurisdictions EU/United Kingdom/Swiss/Brazil/& GDPR-like countries:

• The use of cookies and similar technologies that are not strictly necessary requires the prior consent, free and user-specific, which is collected through a specific cookie banner.
• The user can manage and modify their preferences at any time, revoke the consent given, and access the "Manage cookie preferences" function.

• You have the right to opt out of the collection, sale, and sharing of your personal data with third parties for marketing, behavioral advertising, and profiling purposes.

C. Operational details:
When you first access the site, a banner appears that allows you to manage your preferences regarding cookies and tracking tools.
Through the banner, the user can choose whether to:

• Accept all cookies: By clicking on the appropriate button, all non-essential cookies will be activated.
• Customize settings: You can select in detail which cookies to allow and which to keep disabled.
• Refuse optional cookies: By pressing the decline button or closing the banner without providing consent, only the technical cookies necessary for the site's operation will be activated.

The preferences expressed via the banner are stored for 180 days via a technical cookie. If you access the site from a different device or browser, you will need to reconfigure your preferences.
The user can, however, change their choices at any time by accessing the appropriate functionality, identifiable by the icon or link dedicated to consent management.

6. On what legal basis do we process the data collected through cookies and similar technologies?
The processing of data collected through cookies and tracking tools is based on various legal bases, which vary depending on the type of tool and the applicable legislation:

1. Performance of a pre-contractual service or activity requested by the user via the contact forms provided
2. Compliance with legal obligations, regulations or standards

A further legal basis, the legitimate interest of the Data Controller, can be used for specific purposes (e.g. ensuring IT security, preventing fraud, protecting the Data Controller's rights in court).

Additional legal bases for Brazil (LGPD):
When the processing falls under the jurisdiction of the LGPD, the following specific legal bases provided for by Brazilian law are added:

• Credit protection: data may be processed for credit management and protection purposes, such as assessing solvency, preventing financial fraud, or granting financing.
• Implementation of public policies: in the cases provided for, the Public Administration may process personal data for the implementation of initiatives envisaged by laws, public programs, or agreements.
• Study by research institutions: the data may be used by scientific research or statistical institutions, preferably in anonymous form, for study or analysis purposes.

Refusing or withdrawing consent to the use of certain cookies may limit access to some personalized features of the site.

7. How is your data protected?
The personal data collected through this site are processed primarily using electronic and digital tools according to the principles of lawfulness, fairness, data minimization, integrity, and confidentiality.

Appropriate technical and organizational measures are adopted to prevent unauthorized access, loss, alteration, or unauthorized disclosure of data, including:

• Communication encryption (https): Communications between your browser and the site are protected by HTTPS encryption, which prevents the interception or manipulation of data exchanged during navigation;

8. Where can your data be transferred?
Personal data collected through this site may be processed and transferred — for the purposes indicated — to the following countries:

• to countries belonging to the European Economic Area (EEA), Switzerland or other countries recognised by the competent authorities as “adequate” to the level of protection provided by law;

Updated list of "reliable" countries:

• UE
• Switzerland

9. Who can receive your data?
The following can access personal data collected through cookies, tracking tools, and similar technologies:

• personnel expressly authorized by the owner and specifically trained;
• companies or consultants who provide us with technical support, security, maintenance or analysis services, designated as Data Processors;
• providers of external platforms, software, or third-party services, always and only within the limits of the declared purposes and any consent provided.

A detailed and updated list of our service providers is available upon request.

10. Detailed list of cookies

Google Tag Manager

Google Tag Manager is a tag management service provided by Google Ireland Limited. The data sent is collected for the purposes of customizing the experience and statistical tracking. Find more information on the page "Learn more about how Google processes personal information".

Place of processing: Ireland - Privacy Policy

Google Analytics

Google Analytics is a web analysis service provided by Google Ireland Limited (“Google”). Google uses the personal data collected to track and examine the use of this website, compile reports on its activities and share them with other services developed by Google. Google may use your personal data to contextualize and personalize the advertisements of its own advertising network. This integration of Google Analytics makes your IP address anonymous. The data sent are collected for the purposes of customizing the experience and statistical tracking. Find more information on the page "Learn more about how Google processes personal information".

Place of processing: Ireland - Privacy Policy

Google Fonts

Google Fonts is a service for viewing the styles of writing fonts managed by Google Ireland Limited and is used to integrate such contents within its pages.

Place of processing: Ireland - Privacy Policy

Google Maps widget

Google Maps is a map viewing service operated by Google Ireland Limited. This service is used to integrate such contents within its pages.

Place of processing: Ireland - Privacy Policy

Gravatar

Gravatar is an image visualization service managed by Automattic Inc. that allows Automattic Inc. to integrate such contents within its pages.

Place of processing: United States - Privacy Policy

Google Ads conversion tracking

Google Ads conversion tracking is a statistics service provided by Google Inc. which is used to send data on actions performed on this website.

Place of processing: Ireland - Privacy Policy

11. How long do we keep your data and preferences?

The preferences expressed regarding the use of cookies and tracking technologies via the banner or consent management platform are retained for a period of 180 days.

For the storage, duration and deletion methods of data other than those mentioned, you can consult the specific provisions set out in the Personal Data Policy on this site.

12. What are your rights regarding the data collected?
The user, in accordance with applicable law, has the right to:

• Request the rectification, updating, or deletion of inaccurate or no longer necessary data (right to rectification and deletion).
• Obtain confirmation as to whether or not personal data concerning you are being processed and, if so, obtain access to such data and related information (right of access).
• Request data portability in a structured and interoperable format (where technically possible).
• Request limitation or object to data processing, including for promotional/profiling purposes, where applicable.
• Revoke your consent to the use of non-technical cookies and the processing of data collected through tracking tools.
• Report any irregularities or abuses to the competent supervisory authorities.

To exercise these rights, simply send a request to the Data Controller, who will respond within the timeframes set by applicable local regulations.

Delete cookies

Each browser offers different procedures for preventing or removing cookies. You can block and/or delete them through your browser settings. Below are links to the official guides for the main browsers on how to manage and delete cookies:

• instructions for Google Chrome
• instructions for Safari
• instructions for Mozilla Firefox
• instructions for Internet Explorer

If you use a browser other than those listed, consult the support section of the manufacturer's official website.

How do we notify you about changes to this policy?
This policy is subject to periodic review to reflect regulatory changes or changes to the services offered through the site. Any significant changes will be communicated on this page.
Last revised: October 13, 2025