Privacy Policy

The data controller for personal data collected through stayitalish.com is:

Punto Nero Studio di Carlo Simone
Via Sarnano 7, 61122 Pesaro (PU)
Italia
Email: privacy@italish.it

Data provided voluntarily by users

Accommodation providers (hosts):

• Name and surname or business name
• Email address
• Telephone number (optional)
• Address of the accommodation
• Descriptions, photographs and content of the accommodation page
• Links to social media profiles and external websites (optional)

Guests (tourists):

• Name and surname
• Email address
• Content of messages sent via the contact form

Newsletter subscribers:

• Email address

Data collected automatically

• IP address
• Browser type and operating system
• Pages visited and time spent
• Browser language
• Browsing data collected through cookies (see Cookie section)

The processing of data for marketing and newsletter purposes is kept strictly separate from the processing necessary to provide the basic Italish service, and is based exclusively on the free, specific, informed and revocable consent of the data subject.

Legal basis

Consent of the data subject pursuant to Article 6.1.a of Regulation EU 2016/679 (GDPR). Consent is requested explicitly, in a dedicated step separate from account creation, and may be given or refused without affecting the ability to use Italish.

Purposes

• To communicate new platform features relevant to hosts (for example: new supported languages, new tools).
• To send operational advice for hosts (for example: how to respond to enquiries, how to improve the page, industry best practices).
• To share editorial news and trends in independent tourism in Italy.

Frequency

Occasional frequency, normally not exceeding two mailings per month. Italish does not use automated aggressive marketing sequences, nor does it transfer the contact list to third parties for promotional purposes.

Withdrawal of consent

The data subject may withdraw consent at any time, free of charge and without having to provide reasons, through two equivalent channels:

• by clicking on the unsubscribe link at the bottom of each email communication;
• by writing to privacy@italish.it.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal, and does not entail any consequence on the usability of the Italish service.

Separation from consent for the basic service

Consent to the newsletter is entirely optional and is in no way a condition for accessing the Italish service, creating a property page, receiving availability enquiries or using any other platform feature.

Italish allows users to access or register using Google and Facebook authentication services as an alternative to email registration. These methods are optional: users who prefer may continue to use email only with a verification code.

Legal basis

Performance of contract pursuant to Article 6.1.b GDPR: the processing is necessary to provide the user with access to the requested service, namely the creation and management of their Italish account.

Data received from providers

When the user chooses to access with Google or Facebook, the provider transmits to Italish, following explicit authorisation by the data subject on the provider's own consent screen, a limited set of data:

• Email address associated with the account held with the provider
• First name and surname (or public name) present on the account
• URL of the public profile picture (used exclusively as a default avatar, never distributed to third parties)
• Unique provider identifier (necessary to link subsequent access to the same Italish account)

Italish does not receive and does not request access to other user data on the provider (posts, contacts, private photos, calendar, etc.). Consent requests are limited to email and public profile scopes.

Acceptance of provider policies

By choosing to authenticate with Google or Facebook, the user also accepts the terms and privacy policy of the selected provider. Italish is not responsible for the processing of data carried out by providers on their own platform and invites users to consult:

• Google Privacy Policy: policies.google.com/privacy
• Meta (Facebook) Privacy Policy: facebook.com/privacy/policy/

Revocation of access and account unlinking

The data subject may at any time revoke the access granted to Italish from the settings of their Google account (Security, Third-party apps) or Facebook account (Settings, Apps and websites). Revocation prevents future access via that provider, but does not delete the existing Italish account: for complete deletion of data on Italish, the rights described in Section 6 apply.

Personal data are processed using electronic means and stored on secure servers provided by Supabase Inc. (USA, with adequate safeguards pursuant to the GDPR through standard contractual clauses).

Retention periods:

• Property account data: for the entire duration of the relationship, plus 2 years from deletion
• Contact form messages: 12 months
• Newsletter data: until consent is withdrawn
• Analytics data: 26 months (Google Analytics setting)
• System logs: 90 days

Personal data are not sold or transferred to third parties for commercial purposes. They are shared exclusively with the following technical service providers:

Messages sent via the contact form are delivered directly to the private email address of the recipient accommodation facility.

Pursuant to Articles 15-22 of the GDPR, every data subject has the right to:

• Access: obtain confirmation that data concerning him or her are being processed and receive a copy thereof
• Rectification: correct inaccurate or incomplete data
• Erasure: request the erasure of his or her own data ("right to be forgotten")
• Restriction: request the restriction of processing in certain cases
• Portability: receive his or her own data in a structured and readable format
• Objection: object to processing based on legitimate interest
• Withdrawal of consent: withdraw at any time the consent given

To exercise these rights, please write to: privacy@italish.it

It is also possible to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

Technical cookies (always active)

Necessary for the functioning of the site. They do not require consent.

• Session cookies for host authentication
• Language preference cookies

Analytical cookies (subject to consent)

Google Analytics 4: collects aggregated data on user behaviour to improve the service. The IP address is anonymised. It may be disabled via the cookie banner or by installing the Google Analytics opt-out browser add-on.

Third-party cookies (subject to consent)

Mapbox: may set cookies for the proper functioning of interactive maps.

Cookie management

Upon first access, a banner is displayed which allows you to accept, refuse or customise cookie preferences. Preferences may be modified at any time via the 'Manage cookies' link in the footer.

Italish is not intended for minors under 16 years of age. We do not knowingly collect personal data from minors. If you believe that a minor has provided personal data, please contact us at privacy@italish.it.

We reserve the right to update this privacy policy. Substantial changes will be communicated via email to registered users. The date of the last update is indicated at the top of the document.