Privacy Policy

1. Who controls your data

Bocconi Rentals (“we”) is the data controller for the personal data described here. We are based in Milan, Italy. Legal entity name, registered address, and (where required) the data-protection contact are [PLACEHOLDER — pending counsel.] You can reach us about privacy at privacy@bocconirentals.com.

2. What we collect

• Inquiry detailsyou give us through the booking form: your name, email, phone number, budget, arrival and departure dates, housing preferences, and the neighbourhoods you're considering.
• Service and order data: the modules you select, and your consent records (acceptance of these terms, immediate-start consent, auto-renewal acknowledgement) together with the time they were given.
• Payment data: card payments are processed by Stripe. We do not store your full card details; we receive a payment confirmation and limited transaction metadata.
• Technical data: basic information your browser sends when you use the site, used to keep it secure and working.

3. Why we use it, and our legal basis

• To provide the services you ask for and respond to your inquiry — performance of a contract (GDPR Art. 6(1)(b)).
• To take payment and keep records of your consents — contract and legal obligation (Art. 6(1)(b) and (c)).
• To keep the site secure and improve it — legitimate interests (Art. 6(1)(f)).
• For any optional marketing — your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Who processes it for us

We use trusted processors under data-processing agreements: Stripe (payment processing) and Supabase (database hosting; your inquiry, service, and consent records are stored in our Supabase bocconi schema). Where a processor stores or transfers data outside the EU/EEA, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses). [PLACEHOLDER — confirm processor regions and transfer safeguards with counsel.]

5. How long we keep it

We keep your data only as long as needed for the purposes above — to deliver your services, meet legal and accounting obligations, and resolve any disputes — after which we delete or anonymise it. Specific retention periods are [PLACEHOLDER — pending counsel.]

6. Your rights

Under the GDPR you can ask to access, correct, delete, or limit use of your data; object to certain processing; ask for a portable copy; and withdraw any consent at any time. To exercise these, email privacy@bocconirentals.com. You also have the right to complain to your local supervisory authority — in Italy, the Garante per la protezione dei dati personali.

7. Contact

Questions about this policy or your data? Email privacy@bocconirentals.com.