This notice explains which personal data we process when you visit lovelytrastevere.com or beyondstay.it, when you write to us to ask about availability, and when you stay in one of our houses. It is given under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Version of 30 September 2026.
The data controller is Beyond Stay srl, registered office at Via Caterina Troiani 232, 00144 Rome, Italy, entered in the Rome Companies Register under REA number RM-1777303. It runs both Lovely Trastevere and Lovely Sirente, and therefore both websites.
For any question about this notice, or to exercise your rights, write to info@beyondstay.it.
The site uses no cookies and loads no content from other providers: fonts, photographs and maps are all served by the site itself. The one exception is the visit statistics script described below, which is Cloudflare’s. There is nothing to sign up for and no form to fill in.
Like any website, though, the server has to receive your device’s IP address and some technical information about your browser in order to show you a page. The site is hosted by Cloudflare, which processes this data on our behalf, as a processor, solely to deliver the pages and protect the site from abuse. The legal basis is our legitimate interest in running the site securely. We do not use this data to identify or profile you.
Cloudflare is a group based in the United States. Data is transferred outside the European Union under the EU-US Data Privacy Framework, in which Cloudflare participates, and the standard contractual clauses approved by the European Commission.
To know how many people visit the site and which pages they read, we use Cloudflare Web Analytics, from the same provider that hosts the site. The script measures the visit without cookies, without storing anything on your device and without recognising you from one visit to the next. We only see aggregate figures: pages viewed, the site you came from, country, device type and loading times. The legal basis is our legitimate interest in understanding how the site is used. Cloudflare processes this data as a processor, on the terms described above.
The site’s buttons open a WhatsApp chat or your email program. The site itself collects nothing: data reaches us only if you choose to send the message. If you do, we process what you write (usually your name, phone number or email address, dates and number of guests) to answer you and, if you ask, to prepare a booking. The legal basis is taking steps you have requested before entering into a contract.
The prefilled message contains a tag such as [lovely-trastevere/listing]: it only tells us which page the enquiry came from.
WhatsApp is a service of WhatsApp Ireland Limited, which processes data as an independent controller under its own privacy policy. Email for info@beyondstay.it is provided by Aruba S.p.A.
If an enquiry does not turn into a booking, we keep the conversation for as long as it takes to handle it, and in any case no longer than twelve months.
If you book, we process the data needed for the accommodation contract and for the legal obligations that follow from it. In particular, Italian law requires us to report every guest’s identity to the police through the Alloggiati Web portal, and to keep tax and accounting records for ten years. The legal bases are the performance of the contract and compliance with legal obligations. The data is disclosed only to the competent authorities and to the professionals who assist us with our accounts.
Security cameras are installed outside Lovely Sirente to protect the house and the people in it. They cover outdoor areas only, never the interior. The cameras are also disclosed in the house’s listing. The legal basis is our legitimate interest in security.
You may at any time ask us for access to your data, to correct it, to erase it, to restrict its processing, or to receive it in a structured format, and you may object to processing based on legitimate interest. Just write to info@beyondstay.it.
If you believe the processing breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).
We make no automated decisions about you and do not use your data to send you marketing. If we ever do, it will only be with separate, specific consent.