Privacy Policy

1. Data controller

GoHostDirect S.r.l., registered office at Via Roma 1, 00100 Rome, Italy. Email: privacy@gohostdirect.com | DPO: dpo@gohostdirect.com

2. Data we collect

We collect the following categories of data:

• Registration data: first name, last name, email, phone
• Property data: address, description, photos, rates
• Guest data: name, email, identity document, booking details
• Payment data: handled by Stripe (we never store card details)
• Usage data: access logs, pages visited, actions performed

3. Legal basis

Processing is based on: performance of the contract (Art. 6.1.b GDPR), legal obligation (Art. 6.1.c), legitimate interest (Art. 6.1.f) and consent (Art. 6.1.a).

4. Purposes of processing

• Delivering the booking service
• Managing the user account
• Processing payments
• Service and marketing communications (with consent)
• Security and fraud prevention
• Tax and legal compliance

5. Data recipients

Data may be shared with:

• Stripe (payments)
• Hosting providers (AWS/GCP)
• Email provider (SendGrid)
• Analytics tools (Google Analytics)

6. Transfers outside the EU

Some sub-processors are based in the USA. Transfers are protected by Standard Contractual Clauses (SCC) and/or the Data Privacy Framework.

7. Retention

Personal data is retained for the duration of the contract and for 10 years after termination, to meet tax obligations. Guest data is retained for 5 years from the last stay.

8. Your rights

Under Articles 15-22 GDPR you have the right of access, rectification, erasure, restriction, portability and objection. To exercise your rights, write to dpo@gohostdirect.com.

9. Cookies

For information about cookies, see our Cookie Policy.