Gizlilik bildirimi

1. Controller and contacts

Easylife S.p.A., Via Giovanni Battista Pergolesi 26, 20124 Milano, VAT and tax code 09640480969, share capital € 116.270,00 i.v.. For anything about your data: booking@easylife.house or info@easylife.house, telephone +39 02 8995 4495. No data protection officer has been appointed, as the law does not require one for this activity.

2. What data we process

• Identification and contact details: name, surname, email, telephone, language.
• Booking details: dates, accommodation, guests and children, notes, arrival time, rate, amounts, invoicing details when an invoice is requested.
• Payment: the payment is made on Stripe's pages; we receive only the outcome, the amount and the transaction identifier, never the card details.
• Guest registration: the identity documents of every guest, collected at the online check-in because the law requires the host to report guests to the public security authority and for statistics.
• Stay and support: messages exchanged by email or WhatsApp, requests for extra services, the reservation as recorded in the property management system (Krossbooking), including its status and the tourist tax due.
• Use of the Portal: IP address, browser, pages visited, server logs; with your consent, aggregate first-party analytics events on the path from search to booking. Cookies are described in the cookie policy.
• The AI concierge asks for no personal data: only the preferences you type (days, company, tastes), kept in application logs for at most ninety days.

3. Why, and on what basis

• To conclude and perform the booking contract: confirmation, payment, private area, access codes, support, extra services (performance of a contract, article 6.1.b).
• To comply with the law: reporting of guests to the public security authority, statistics, tax and accounting obligations, anti-fraud rules (legal obligation, article 6.1.c).
• To keep the Portal safe and improve it: security logs, rate limits, prevention of abuse and fraud (legitimate interest, article 6.1.f).
• To measure how the Portal is used and, if we ever run campaigns, to attribute them: only with your consent, given from the cookie banner and withdrawable at any time (consent, article 6.1.a).
• To send you communications about our offers, only if you agree (consent, article 6.1.a); you can object at any time. Communications about your own booking are part of the service and need no consent.

Providing the data marked as required at booking and at check-in is necessary: without them the booking cannot be concluded or the accommodation accessed. Everything else is optional.

4. Alerts on your phone or computer

If you switch alerts on in your private area, the browser hands us a technical address for that device, which we keep with the language and with the booking or account it was switched on from. We use it only for messages about your stay (payment recorded, arrival instructions, a reminder on check-in day) and, only if you choose it with its own switch, for promotions. You can switch alerts off from the same switch or from the browser's settings: the address is then deleted. Messages travel encrypted through the push service of the browser's maker (Apple, Google, Mozilla), which cannot read them.

5. Who receives the data

• Krossbooking, the property management system in which the reservation is recorded, as processor.
• Stripe Payments Europe Ltd, for the payment; Stripe is an independent controller for the payment data.
• Microsoft Ireland Operations Ltd (Microsoft 365), which carries the emails we send and receive, as processor.
• The providers hosting the Portal and its database, as processors; the map tiles come from OpenFreeMap, which sees the IP address of the browser that loads them.
• Cleaning, maintenance and check-in staff, and partners of the extra services you request, to the extent needed to provide them.
• Public security authorities, statistical offices, tax authorities and, where required, courts and professionals assisting the Controller.

Data is never sold. Some providers (Stripe, Microsoft) may process data outside the European Economic Area under the safeguards of chapter V of the GDPR: adequacy decisions, including the EU-US Data Privacy Framework, or standard contractual clauses.

6. How long we keep it

• Booking, payment and invoicing data: ten years from the end of the stay, as tax and accounting law requires.
• Identity documents collected at check-in: for the time the public security and statistics rules require, then deleted.
• Support messages: up to two years after the last exchange.
• Server logs and concierge logs: ninety days.
• Consent choices: twelve months, then asked again.

7. Your rights

You may ask at any time for access to your data, its correction or deletion, the restriction of processing, its portability, and object to processing based on legitimate interest; where processing is based on consent, you may withdraw it without affecting what was done before. Write to booking@easylife.house: we answer within one month. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

8. Minors and security

The Portal is for adults; the data of minors is processed only as guests declared by an adult, for the legal registration. Data is protected by technical and organisational measures: encrypted connections, access limited to authorised staff, one-time codes for the private area, no card details stored.

9. Changes

This notice may be updated; the date at the top says when. Substantial changes are announced on the Portal.