Privacy Policy
Last updated: 16 January 2026
1. Data Controller
The Data Controller is The Next Stay, managed by the property owner. Contact email: info@thenextstay.xyz
2. Types of Data Collected
Depending on how you interact with the website, we may collect the following personal data:
- Identification data (full name)
- Contact details (email address, phone number)
- Booking details (dates of stay, number of guests, selected apartment)
- Communication content (messages sent via contact form)
- Mandatory guest data required by Italian law (Alloggiati Web) No sensitive data is collected.
3. Purpose of Processing
Your personal data is processed exclusively for the following purposes:
- Managing booking inquiries and reservations
- Responding to contact requests sent through the website
- Fulfilling legal obligations related to tourist rentals
- Sending marketing communications only if you explicitly consent
- Ensuring property security and proper guest identification
4. Legal Basis for Processing
Data processing is based on one or more of the following legal grounds:
- Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures
- Art. 6(1)(c) GDPR – compliance with legal obligations
- Art. 6(1)(f) GDPR – legitimate interest (replying to requests)
- Art. 6(1)(a) GDPR – explicit consent (marketing communications only)
5. Booking and Legal Obligations
For bookings, personal data is processed to:
- Manage the rental agreement
- Issue invoices or payment requests
- Register guests with Italian authorities (Art. 109 T.U.L.P.S. – Alloggiati Web) This data is mandatory and required by law.
6. Contact Forms
When you contact us via the website:
- Your email and message are used only to reply
- Data is not stored in a database
- Data is transmitted securely via automated notification systems
- No marketing use is made of this data
7. Marketing Communications
If you subscribe to receive offers or newsletters:
- Your email is used exclusively for marketing communications
- Consent is optional and can be withdrawn at any time
- Each email includes an unsubscribe option
8. Data Retention
- Booking data: retained as required by tax and legal regulations
- Contact requests: retained only as long as necessary to respond
- Marketing data: until consent is withdrawn
9. Data Recipients
Your data may be shared only with:
- Email service providers
- Booking and hosting infrastructure providers
- Legal authorities when required by law No data is sold or shared for profiling.
10. Cookies and Tracking
This website does not use tracking cookies or analytics tools. Only technical cookies strictly necessary for website functionality may be used.
11. Data Subject Rights
You have the right to:
- Access your personal data
- Request correction or deletion
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with the Italian Data Protection Authority (Garante) Requests can be sent to: info@thenextstay.xyz
12. Data Security
Appropriate technical and organizational measures are implemented to protect personal data from unauthorized access, loss, or misuse.