Privacy Policy

Who we are

Staylia is an online travel agency for stays in Italy. It is a brand operated by Lodge Easy S.r.l., with registered office at Via Cipro 1, 5th floor, INT. 250/A, Brescia (BS), Italy, VAT 04723920981 ("Staylia", "we", "us").

For the purposes of the EU General Data Protection Regulation (GDPR) and the Italian Data Protection Code, Lodge Easy S.r.l. is the data controller for the personal data processed through staylia.it. You can contact us for any privacy matter at [email protected].

What data we collect

We collect only the data we need to search, book and support your stay:

• Booking details: first and last name, email address, telephone number, special requests, property, room, rate, check-in and check-out dates, number of guests, booking code and booking status.
• Payment information: card data is entered directly in the payment form of our booking and payment partner. Staylia does not receive or store your full card number. We receive the payment status, amount, currency and the booking confirmation.
• Booking lookup data: your booking code, email address, the one-time code we send you and the access token stored in your browser session.
• Technical data: IP address, browser and device information, pages requested, timestamps and error logs, as needed to operate and secure the service.
• Preferences: the stays you save are stored only in your browser's local storage. They are not sent to us.
• Analytics data: aggregated page views and events collected with Plausible Analytics, as described in our Cookie Policy. Plausible does not use cookies or persistent identifiers.
• Communications: the content of messages you send to our support.

We do not ask for special categories of personal data (for example health, religious or political information). Please do not include them in the special requests field or in messages to support.

Why we process your data and on what legal basis

We process your data for the following purposes and on the following legal bases:

• To create, manage and confirm your booking, send the voucher and provide customer support: performance of a contract with you (Art. 6(1)(b) GDPR).
• To comply with tax, accounting, consumer and anti-fraud obligations: compliance with a legal obligation (Art. 6(1)(c) GDPR).
• To keep the service secure, prevent fraud and abuse, and improve our website through aggregated statistics: our legitimate interests (Art. 6(1)(f) GDPR), balanced against your rights.
• To send you optional marketing communications, if you ask for them: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not use your data for automated decisions that produce legal effects or similarly significantly affect you, and we do not build advertising profiles.

Who we share it with

We share personal data only with the parties needed to provide the service:

• Our booking and payment partner, which acts as merchant of record and processes the payment, receives the guest and booking data needed to complete the reservation.
• The accommodation provider, which receives the guest name, contact details, stay details and special requests needed to perform the booking.
• Our service providers, such as hosting, transactional email, image delivery, mapping and IT support providers, acting as processors under our instructions.
• Plausible Analytics, which receives aggregated, cookieless analytics data as described in our Cookie Policy.
• Public authorities, courts or regulators, when we are required by law or need to protect our rights.

We do not sell your personal data and we do not share it for third-party advertising.

International transfers

Some of our providers, including our booking and payment partner and some accommodation providers, may process data outside the European Economic Area. Where required, we rely on an adequacy decision of the European Commission or on Standard Contractual Clauses with supplementary measures. You can ask us for a copy of the safeguards at [email protected].

How long we keep it

• Booking and transaction data: for the duration of the booking and afterwards for the period required by Italian tax and accounting law (generally 10 years), and for as long as needed to handle disputes.
• Support messages: up to 24 months after the request is resolved.
• Technical logs: up to 12 months, unless a longer period is needed to investigate a security incident.
• Booking lookup tokens: for the duration of your browser session or until they expire.
• Saved stays: only in your browser, until you clear your site data.
• Plausible analytics: aggregate records only. Raw IP addresses and user agents are not stored, and the daily salt is deleted after 24 hours.

Your rights

Under the GDPR you have the right to access your data, correct inaccurate data, request erasure, restrict or object to processing, receive your data in a portable format and withdraw any consent you have given.

To exercise your rights, write to [email protected]. We may ask for information to verify your identity before acting on the request. You also have the right to lodge a complaint with the Italian Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it) or with the supervisory authority of your country.

How we protect it

We use HTTPS, access controls, least-privilege permissions and contractual safeguards with our providers. Card data is handled by our booking and payment partner and is not stored by Staylia. No system is completely secure: if you believe your data has been compromised, contact us immediately at [email protected].

Minors

The service is intended for people aged 18 or over. A minor may be included in a booking made by an adult who is responsible for them. We do not knowingly collect personal data directly from minors.

Changes and contact

We may update this policy when the service or the law changes. The new version is published on this page with the date of the last update. If the changes are material, we will inform you where required.

For any question about this policy or your data, contact Lodge Easy S.r.l., Via Cipro 1, 5th floor, INT. 250/A, Brescia (BS), Italy, or write to [email protected].