Notice provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) to users of the website www.romastayhome.it and guests of the B&B Roma Stay Home.

Data Controller

Michele Pisano – Roma Stay Home, Via Acaia 61, 00183 Rome (Italy). Email: uniqueluxurystay@gmail.com – Phone: +39 339 295 6972.

What data we process and why

  • Information requests (contact form, email, phone): name, email address and message content, to respond to the request. Legal basis: pre-contractual measures requested by the data subject (Art. 6.1.b GDPR). Retention: for the time necessary to handle the request and in any case no longer than 12 months.
  • Offers and news by email: email address provided through the newsletter form. Legal basis: consent (Art. 6.1.a GDPR), which can be withdrawn at any time by writing to the Data Controller. Retention: until consent is withdrawn.
  • Booking and stay: identification and contact details, identity document data, payment data. Legal basis: performance of the contract (Art. 6.1.b GDPR) and legal obligations (Art. 6.1.c GDPR), including the communication of guests’ details to the public security authority (Art. 109 TULPS), tourist tax, and tax and accounting requirements. Retention: for the periods required by law (generally 10 years for tax documents).
  • Browsing data and cookies: technical data necessary for the website to function, and cookies. For details and to manage your preferences, see the Cookie Policy.

Third-party services on the site

  • Google Maps (interactive map): loaded only after consent.
  • Google reCAPTCHA: protects forms from spam.
  • Google Fonts: website typefaces.
  • Booking.com: the booking buttons link to the Booking.com website, which processes data as an independent controller under its own privacy policy.

Who we share data with

Data is processed by the Data Controller and by providers who support site and business management (website hosting with Aruba S.p.A., email services, tax and accounting consultants), and is disclosed to the competent authorities when required by law. Data is not disseminated or sold to third parties for marketing purposes.

Transfer of data outside the European Union

Some providers (for example Google) may process data outside the European Economic Area; in these cases the transfer takes place on the basis of the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

Your rights

You may at any time request access to your data, rectification, erasure, restriction of processing, portability, object to processing, and withdraw any consent given, by writing to uniqueluxurystay@gmail.com. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali, www.garanteprivacy.it).

Last updated: October 2026.