Privacy
Privacy policy
Last updated: 2026-01-15
This policy describes how we collect, use, and protect your personal data when you use our booking platform. Drafted in compliance with EU Regulation 2016/679 (GDPR) and Italian Legislative Decree 196/2003 as amended.
1. Data controller
The data controller is Pegasus Way — No Effort Rentals Ltd, Via del Corso 12, Rome, Italy. DPO: [email protected].
2. Data we collect
We collect: identity data (first name, last name, email, phone if provided); credentials (email + argon2id password hash, never in cleartext); booking data (dates, guests, amount, notes); payment data (processed by Stripe — we only store the transaction ID, NEVER the card number); technical logs (IP, user-agent, timestamp) for security and antifraud; chat communications with the host related to the booking.
3. Purposes
We process your data to: manage bookings and payments; enable communication with the host; comply with accounting and tax obligations; prevent fraud and ensure platform security; send you transactional emails (confirmations, reminders); (with explicit consent) send promotional communications.
4. Legal bases
The legal bases are: contract performance (Art. 6.1.b GDPR) for bookings and payments; legal obligation (Art. 6.1.c) for accounting and antifraud; legitimate interest (Art. 6.1.f) for technical security and logs; explicit consent (Art. 6.1.a) for marketing communications.
5. Retention periods
Account data: until deletion + 30 days grace period. Booking and billing data: 10 years (Italian Civil Code Art. 2220). Technical logs: 12 months. Messages with host: up to 24 months from the end of the stay.
8. Your rights
Under GDPR you have the right to: access your data (Art. 15); request rectification (Art. 16); request erasure (Art. 17); restrict processing (Art. 18); obtain data portability (Art. 20); object to processing (Art. 21); lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it). To exercise your rights write to [email protected] — we'll respond within 30 days.
9. Changes to this policy
We may update this policy for regulatory or operational reasons. In case of substantial changes we'll notify you by email and with a prominent banner. The last update date is shown at the top of the page.