Stayinto (hereinafter "we", "us" or "the Platform") is an online accommodation booking platform (OTA - Online Travel Agency) accessible at https://stayinto.com. We place fundamental importance on protecting your personal data and complying with the General Data Protection Regulation (GDPR - EU Regulation 2016/679).
This privacy policy describes how we collect, use, store and protect your personal data when you use our platform.
The data controller is:
Stayinto Contact email: [email protected] Website: https://stayinto.com
For any questions relating to the protection of your data, you can contact us at: [email protected]
We collect the following categories of data:
Purposes and legal basis of the processing
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creation and management of your account | Contract performance | Account duration + 3 years |
| Processing your reservations | Contract fulfillment | 5 years after reservation |
| Processing payments | Contract fulfillment / Legal obligation | 10 years (accounting obligation) |
| Communication regarding your reservations | Contract fulfillment | 3 years after last contact |
| Sending newsletters and promotional offers | Consent | Until withdrawal of consent |
| Improving our services and personalization | Legitimate interest | 3 years |
| Statistical analysis and audience measurement | Legitimate interest | 13 months (cookies) |
| Fraud prevention and security | Legitimate interest / Legal obligation | 5 years |
| Customer review management | Legitimate interest | 5 years after publication |
| Responding to your support requests | Contract performance | 3 years after last contact |
Your personal data may be shared with:
If you choose to log in via a third-party service:
These services do not receive any data from us. They only send us the information needed to create your account, with your explicit consent.
Our data is mainly hosted in the European Union (AWS eu-west-3, Paris). However, some of our subcontractors may process data outside the EU:
In all cases, we ensure that appropriate safeguards are in place in accordance with Articles 46 and 49 of the RGPD.
We implement appropriate technical and organizational measures to protect your data :
In accordance with the GDPR, you have the following rights:
You can obtain confirmation that your data is being processed and receive a copy.
You may request the correction of inaccurate or incomplete data.
You may request the deletion of your personal data, subject to our legal retention obligations.
You may request the limitation of processing in certain circumstances.
You can receive your data in a structured, commonly used and machine-readable format.
You may object to the processing of your data for legitimate reasons, including commercial prospecting.
When processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of the previous processing.
You can exercise your rights:
We will respond to your request within a maximum of 30 days.
If you feel that the processing of your data constitutes a violation of your rights, you can lodge a complaint with the Commission Nationale de l'Informatique et des Libertés (CNIL):
We use cookies and similar technologies for the operation of the platform, audience measurement and personalization of your experience. For more information, see our Cookie Policy.
You can manage your cookie preferences at any time via the "Cookie Settings" link at the bottom of every page.
Our platform is not intended for persons under the age of 18. We do not knowingly collect data from minors. If we discover that a minor has provided us with personal data, we will delete it as soon as possible.
We reserve the right to change this privacy policy at any time. In the event of substantial modification, we will inform you by email or by notification on the platform.
The date of last update is indicated at the top of this page.
For any questions regarding this privacy policy or the processing of your personal data:
