Information

Privacy Policy

Last updated: 22 July 2026

This policy explains how the personal data of users who browse this website and submit requests through its forms is processed, pursuant to Regulation (EU) 2016/679 (“GDPR”).

1. Data Controller

The Data Controller is Christian Marrocco (sole proprietorship) — VAT no. 17397651005, registered office at Via Angelo Emo 144, 00136 Rome (RM), Italy.
Contact email: info@chromastays.com.

2. Personal data processed

Data you provide through the forms: for booking requests (name, phone, email, stay details and the selected property, any message) and for owner requests (name, phone, email, area and type of property, any listing link, message).
Browsing data: technical data collected automatically by the systems (e.g. IP addresses, server logs) for the operation and security of the site.
Cookies and similar technologies: as described in the Cookie Policy.

3. Purposes and legal bases

To respond to requests sent through the forms and provide the requested information — legal basis: response to your request and pre-contractual measures (Art. 6.1.b GDPR) and/or consent (Art. 6.1.a).
To manage any resulting contractual relationship (bookings, property management) — legal basis: performance of a contract (Art. 6.1.b).
To comply with legal, tax and administrative obligations — legal basis: legal obligation (Art. 6.1.c).
To ensure the security and proper functioning of the site — legal basis: legitimate interest (Art. 6.1.f).

4. Methods and place of processing

Data is processed with electronic tools, applying measures adequate to ensure its security and confidentiality. The site is hosted and the forms are handled through Netlify; some providers may have servers outside the European Union (e.g. the United States). In such cases the transfer takes place on the basis of adequate safeguards provided for by the GDPR (standard contractual clauses and/or adherence to recognised frameworks).

5. Recipients of the data

Data may be processed, as data processors or independent controllers, by providers that support the business, including:

Netlify, Inc. — website hosting and form management (Netlify Forms).
Email provider Google Workspace (Google Ireland Ltd.) — management of email communications.
Airbnb — property images are pulled from the listings on the platform; links point to Airbnb, which processes data under its own policy.
Any statistics/analytics tools, if enabled, as indicated in the Cookie Policy.

Data is neither disclosed nor sold to third parties for their own marketing purposes.

6. Retention period

Data is kept for the time needed to handle the request and any relationship arising from it, and afterwards for the time required by legal obligations (e.g. tax). Once these periods expire, data is deleted or anonymised.

7. Data subject rights

You have the right, at any time, to request access to your data, its rectification, erasure, restriction and to object to processing, as well as data portability. Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise your rights write to info@chromastays.com +39 393 982 7257.

You also have the right to lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).

8. Cookies

For information about cookies and how to manage your preferences, see the Cookie Policy.

This text is a base draft prepared for the site. Complete the bracketed fields and have the document reviewed by a professional, especially since you process data of guests and owners as part of a hospitality business.