Privacy Policy

 

Last updated: January 1, 2026


This Privacy Policy describes how we collect, use, and protect personal data of users who interact with this website and its services.

We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).


For any questions regarding this Privacy Policy or the processing of your data, you can contact us at: privacy@agilyrent.com.

​

​You can click on the following links to go directly to the corresponding sections of this privacy policy.

​

​

1. What Our Privacy Policy Covers

2. Scope and roles

3. Categories of Personal Data We Collect

4. Purposes of Processing and Data Sources

5. Purposes of Processing and Legal Bases

6. Disclosure of Personal Data

7. Recipients of Personal Data

8. International Data Transfers

9. Data Retention

10. Data Subject Rights

11. Data Processing Methods and Security

12. Updates and Final Provisions

​

 

1. What Our Privacy Policy Covers

​​

This privacy notice describes what data we collect, how we use it, and in which contexts it is processed as part of our services.

Data may be collected through our digital platforms during booking, check-in, communication, and payment processes, as well as through direct interactions with our service.

​

To deliver our services, we also use tools and third-party providers (for example, for payments, communications, or operational management), which may process data on our behalf where necessary.

​

Additional or specific privacy notices may be provided in connection with certain services or features.

2. Scope and roles

2.1 Scope

This privacy notice applies to the processing of personal data carried out by AgilyRent in connection with the management of bookings and stays in residential properties.

2.2 AgilyRent and controller role

When this privacy notice refers to “AgilyRent”, “we” or “our”, it means the brand used by Benjamin Genah, P.I. 13415010969, Via Panzeri 15, 20123 Milano, acting as the data controller.

AgilyRent determines the purposes and means of the processing of personal data in connection with its services.

2.3 Other parties involved

In providing our services, other parties may be involved, including:

 

• technical and digital service providers, who process data on behalf of AgilyRent;

• booking and intermediary platforms, which may act as independent controllers or, where applicable, joint controllers;

• property owners or managers, where different from AgilyRent, who process data in the context of their own activities.

​

2.4 Definitions

Personal data: any information relating to an identified or identifiable natural person.
User / Data subject: the natural person to whom the personal data relates.

 

​3. Categories of Personal Data We Collect

We collect and process only the personal data necessary to provide and improve our services.
We group the data we collect into the following categories:

3.1 Data you provide directly

This includes personal data you provide when using our services, such as:

​

• identification and contact details (e.g. name, surname, email address, phone number);

• booking and stay information (e.g. reservation details, arrival and departure dates, communications with us, and operational preferences);

• identity verification data (e.g. information contained in identity documents where required by law or for security purposes, including digital check-in processes);

• payment-related information, where necessary to process transactions through third-party providers;

• any other information you choose to provide when contacting us or using our services.

3.2 Data necessary to use our services

In some cases, we may require additional information to provide specific services or comply with legal obligations, such as:

​

• information required for regulatory, administrative, or public safety purposes;

• property-related or operational information linked to your stay;

• any data necessary to ensure the proper functioning of our services.

3.3 Data we collect automatically

When you use our services or platforms, we may automatically collect certain technical and usage data, including:

​

• device and log data (e.g. IP address, browser type, device information, access times);

• service usage information (e.g. pages viewed, interactions with the platform, booking activity);

• technical cookies necessary for the operation of the website and services.

3.4 Data we receive from third parties

​

We may receive personal data from third-party sources involved in the provision of our services.

​​

​

4. Source of Personal Data

​

Personal data processed by AgilyRent is primarily collected directly from the data subject, through:

​

• completion of online or offline forms;

• registration to our platform or services;

• communications during booking or stay processes;

• use of our digital systems and related services.

​

In some cases, personal data may be provided by third parties involved in the booking or stay process, including booking platforms or reservation systems.

In all cases, personal data is processed exclusively for the purposes set out in this privacy notice.

​

​

5. Purposes of Processing and Legal Bases

​

Personal data is processed for the following purposes:

​

1. Booking and stay management

To manage accommodation requests, reservations, and related services.
Legal basis: performance of a contract

​

2. Account registration and service access

To create and manage user accounts and enable access to our services.
Legal basis: performance of a contract

​

3. Check-in and identity verification

To verify guest identity and manage access to the property, including where required by law or operational necessity.
Legal basis: performance of a contract and legal obligation

​

4. Payments and administrative management

To process payments and manage related accounting and administrative activities.
Legal basis: performance of a contract and legal obligation

​

5. Customer support and service communications

To provide assistance and communicate with users before, during, and after their stay.
Legal basis: performance of a contract

​

6. Service improvement

To improve the functionality, reliability, and performance of our services, including through aggregated or operational data analysis.
Legal basis: legitimate interest

​

7. Security and fraud prevention

To ensure the security of users, properties, and services, and to prevent fraud or misuse.
Legal basis: legitimate interest and legal obligation

​

8. Legal and regulatory compliance

To comply with applicable legal, tax, and administrative obligations.
Legal basis: legal obligation

​

9. User-initiated requests

To manage and respond to requests voluntarily submitted by users.
Legal basis: performance of a contract and, where necessary, consent

​

10. Service communications

We may send communications strictly related to the use of our services, such as booking confirmations, operational updates, and stay-related information.
Legal basis: performance of a contract

​

Data necessity

Data required for purposes 1 to 4 is necessary for the provision of our services. Without such data, we may not be able to provide the requested services.

​

​

6. Disclosure of Personal Data

​

We may disclose personal data only in the following circumstances:

​

6.1 Compliance with legal obligations

​

We may disclose personal data where required to comply with applicable laws, regulations, tax obligations, or valid legal requests from competent authorities.

​

6.2 Service providers and third parties

​

We may share personal data with third-party service providers involved in the delivery of our services, including booking platforms, payment processors, identity verification providers, and technical service providers. These parties process data on our behalf or as independent controllers where applicable.

​

6.3 Protection of rights and security

​

We may disclose personal data where necessary to protect the rights, property, or safety of AgilyRent, our users, or third parties, including in cases of fraud prevention, misuse, or security incidents.

​

​

7. Recipients of Personal Data

​

Personal data may be disclosed, to the extent strictly necessary for the purposes described in this Privacy Policy, to the following categories of recipients:

​

• authorised personnel of AgilyRent;

• property owners or managers, where necessary for the provision of the service;

• booking and intermediation platforms;

• payment service providers and communication providers;

• technical, IT, and infrastructure service providers supporting the operation of our services.

​

Service providers

​

AgilyRent uses third-party service providers to support the delivery of its services, including, for example, tools for website management, data processing, communication, booking management, check-in procedures, payment processing, messaging, and cloud storage.

​

Depending on the case, these providers act either as data processors under Article 28 GDPR or as independent controllers.

​

AgilyRent selects its service providers based on criteria of security, reliability, and GDPR compliance.

​

Data minimisation principle

​

Personal data is shared only to the extent strictly necessary for the provision of the services.

No irrelevant or excessive data is disclosed beyond what is required for the purposes described in this Privacy Policy.

​

​

8. International Data Transfers

​

AgilyRent may transfer personal data to countries outside the European Economic Area (EEA) in the context of using technical and infrastructure service providers.

Where such transfers occur, they are carried out in compliance with the GDPR and are based, where applicable, on:

​

• adequacy decisions of the European Commission; or

• Standard Contractual Clauses approved by the European Commission.

​

AgilyRent implements appropriate technical and organisational measures to ensure an adequate level of protection for personal data in line with applicable data protection requirements.

​

​

9. Data Retention

​

In accordance with the principle of storage limitation under the GDPR, personal data is retained only for as long as necessary to fulfil the purposes for which it was collected.

In particular:

​

• Booking and stay data: retained for the duration of the contractual relationship and for the time required to comply with legal, tax, and accounting obligations.

• Check-in and identity verification data: retained only for the period strictly necessary for operational purposes and legal obligations, and subsequently deleted or anonymised.

• Technical and usage data: retained for as long as necessary to ensure system security and improve our services, where possible in aggregated form.

• Voluntarily provided data: retained only for the time necessary to respond to the request or provide the related service.

​

Data is reviewed periodically to avoid unnecessary retention.

​

​

10. Data Subject Rights

​

The data subject may exercise, within the limits provided by the GDPR, the following rights:

​

• right of access to personal data;

• right to rectification;

• right to erasure (“right to be forgotten”);

• right to restriction of processing;

• right to object to processing;

• right to data portability;

• right to withdraw consent, where previously given.

​

These rights may be exercised by contacting the Data Controller using the contact details provided in this Privacy Policy.

The data subject also has the right to lodge a complaint with the competent Data Protection Authority.

 

 

11. Data Processing Methods and Security

 

Personal data is processed using electronic tools and, where necessary, also in paper-based form.

​

AgilyRent implements appropriate technical and organizational measures to ensure the security of personal data, in particular to prevent:

​

• unauthorized access;

• loss or alteration of data;

• unauthorized disclosure;

• improper use of information.

​

Access to personal data is strictly limited to authorized personnel and service providers, in accordance with the principle of necessity.

​

​

12. Updates and Final Provisions

​

This Privacy Policy applies exclusively to the services provided by AgilyRent and does not cover any third-party websites or services that may be accessed through external links.

​

AgilyRent reserves the right to update or modify this Privacy Policy at any time, including to reflect changes in applicable laws or in the services provided.

Where material changes are made, users will be informed through the platform or by other appropriate means.

​

Users are encouraged to review this Privacy Policy periodically to stay informed about how their personal data is processed.​