Easy Housing Immobiliare S.R.L.

Privacy Policy

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree 196/2003, as amended by Legislative Decree 101/2018

This privacy policy explains how Easy Housing Immobiliare S.r.l. processes the personal data of users of the website https://ehisrlitalia.com and of guests who book a stay in our holiday homes in Monza, Milan, Como and Bormio.

1. Data controller and contact details

The data controller is Easy Housing Immobiliare S.r.l., with registered office at Via Luini 255, 20099 Sesto San Giovanni (MI), Italy – Tax code and VAT number 13543650967 – REA Milano 2730204.

For any request concerning your personal data, you can contact us:
email: [email protected]
phone: +39 338 115 4108

2. Data we process

  • Browsing data: during normal operation, the IT systems running the website collect certain technical data (for example IP address, browser and device type, pages visited, date and time of the request), as well as the language and currency preferences you select.
  • Cookies: see section 9.
  • Contact form: name, email address, phone number and the content of the message you send us through the “Contact” form.
  • Booking: the data needed to handle your booking request or booking (for example first and last name, contact details, dates of stay, number of guests, chosen accommodation and any special requests).
  • Online check-in and identity documents: before arrival, in order to receive the access instructions, you are required to complete online check-in with the details of the people staying and the particulars of an identity document for all guests. The tourist tax is also paid at this stage. Where the details of other guests are provided by the person making the booking, that person is responsible for informing them of this privacy policy.
  • Payment: transaction data (amounts, outcome, payment references). Payment card details are processed directly by the payment service providers.

If you book through third-party platforms such as Airbnb or Booking.com, those platforms process your data as independent controllers in accordance with their own privacy policies; we receive and process the data needed to manage your stay as described in this privacy policy.

3. Purposes and legal bases

  • Operation and security of the website, storage of language and currency preferences: legitimate interest of the controller (Art. 6(1)(f) GDPR).
  • Responding to requests sent via the contact form, email or phone: taking steps prior to entering into a contract at the request of the data subject (Art. 6(1)(b) GDPR).
  • Management of requests, bookings, stays and payments; sending the access instructions: performance of a contract (Art. 6(1)(b) GDPR).
  • Reporting guests’ personal details to the Public Security Authority (Questura) via the Alloggiati Web portal, pursuant to Art. 109 of the TULPS (Italian Consolidated Law on Public Security): legal obligation (Art. 6(1)(c) GDPR).
  • Reporting tourist flow data for statistical purposes (ISTAT and the competent regional bodies): legal obligation (Art. 6(1)(c) GDPR).
  • Collection and payment of the tourist tax to the Municipality: legal obligation (Art. 6(1)(c) GDPR).
  • Tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).
  • Establishment, exercise or defence of legal claims: legitimate interest of the controller (Art. 6(1)(f) GDPR).
  • Aggregated statistics on the use of the website via Google Analytics 4: consent of the data subject (Art. 6(1)(a) GDPR), which may be withdrawn at any time.
  • Sending commercial and promotional communications by email: explicit consent of the data subject (Art. 6(1)(a) GDPR), which may be withdrawn at any time.

4. Whether providing data is mandatory

Providing the data required to respond to requests, manage bookings and payments and carry out check-in is necessary: without it, we cannot follow up on your request or booking. Guest and identity document data are required by law, and without them the stay cannot take place. Consent to receive marketing communications is optional: not giving it has no effect on your booking.

5. Recipients of the data

To the extent necessary for the purposes stated above, data may be disclosed to:

  • Lodgify, the platform that hosts the website and runs the booking engine, acting as data processor;
  • Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), provider of the Google Analytics 4 service, acting as data processor, only if you have consented to analytics cookies (see section 9);
  • payment and online check-in service providers, appointed as data processors;
  • consultants and professionals who assist the controller with tax, accounting and legal obligations;
  • public authorities, where required by law (Questura, Municipality, statistical bodies, tax and judicial authorities).

Data are also processed by the controller’s authorised staff. Data are not disseminated.

6. Transfers of data outside the European Union

Where, as a result of using the providers listed above, data are transferred to countries outside the European Economic Area, such transfers take place only where the appropriate safeguards provided for in Chapter V of the GDPR are in place.

7. Data retention

Data are kept for as long as necessary for the stated purposes and for the periods required by law (for example for tax and accounting obligations) or, where necessary, for as long as needed to establish, exercise or defend legal claims. Data processed for marketing purposes are kept until consent is withdrawn. After that, data are deleted or anonymised.

8. Your rights

Under Articles 15–22 of the GDPR, you may at any time ask the controller for access to your data, rectification, erasure, restriction of processing and data portability, and you may object to processing based on legitimate interest. You may withdraw any consent you have given at any time, without affecting the lawfulness of processing carried out before its withdrawal. To exercise your rights, write to [email protected].

You also have the right to lodge a complaint with the Garante per la protezione dei dati personali (Italian Data Protection Authority) (www.garanteprivacy.it).

The website uses technical (functional) cookies that are necessary for it to work, for example to remember the selected currency and the choice you made in the cookie banner, and for security purposes. These cookies do not require your consent.

Only if you give your consent through the cookie banner (“Analytics” category), the website uses Google Analytics 4, a service provided by Google Ireland Limited, to obtain anonymous, aggregated statistics on how the website is used (for example pages visited, length of visits, type of device). In this case the cookies _ga and _ga_730FFRWF5W are set. Without your consent, Google Analytics is not activated.

Legal basis: consent (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code, Legislative Decree 196/2003). You can refuse consent with “Reject all” or choose categories with “Customize”. You can withdraw your consent at any time by deleting this website’s cookies and site data in your browser: on your next visit the banner will be shown again and you can make a new choice. Withdrawal does not affect the lawfulness of processing carried out before it.

Data collected by Google Analytics may be transferred to Google LLC in the United States, which is certified under the EU-U.S. Data Privacy Framework, on the basis of the European Commission’s adequacy decision of 10 July 2023.

The data are retained for 14 months, the period defined in the data retention settings of our Google Analytics account. More information: Google Privacy Policy and Google Analytics and data protection.

10. Changes to this privacy policy

The controller may amend or update this privacy policy, including following changes in the law or in the services offered. The updated version is always published on this page.

Last updated: 11 October 2026