Privacy & Cookie Policy
Last updated: July 27, 2026
1. Data Controller
The Data Controller for the personal data collected through the Holidogs.it website (hereinafter, the "Site") is: Lucia Gagliardi, a sole proprietorship operating under the commercial name "Holidogs" Registered office: Corso Magenta 33/2, 16125 Genoa (GE), Italy VAT Number: IT03080860996 PEC (Certified Email): [email protected] Email: [email protected]
For any requests regarding the processing of personal data, you may contact the Data Controller at the addresses indicated above.
Role of Lucia Gagliardi (Holidogs) with respect to Property Owners. The Site operates as an intermediation platform for booking pet-friendly holiday homes owned by third parties (the "Owners"). The tourist lease contract is concluded directly and exclusively between the Owner and the Guest. Lucia Gagliardi handles, upon mandate from the Owners, the promotion of the properties, the collection of requests, the collection of deposits and balances, and, where agreed, guest reception and the management of the security deposit. For the purposes of this privacy policy, Lucia Gagliardi is the Data Controller for the data collected through the Site and for the activities described above; the data necessary for the conclusion and execution of the lease contract are communicated to the Owner of the chosen property, who processes such data as an autonomous Data Controller, according to their own methods.
2. Types of Data Collected
The Site is managed through the Lodgify platform, which provides the booking engine and listing management. The following categories of personal data are collected through the Site:
a) Data voluntarily provided by the user
- Identification and contact data (name, surname, email address, phone number, residential address) provided when requesting a quote, booking, or filling out a contact form.
- Data relating to the stay (dates, number of guests, any special requests, information about the accompanying animal such as breed/size, if requested for the purpose of organizing the pet-friendly stay).
- Payment data necessary to complete the booking, processed directly through the Stripe payment gateway (which supports credit/debit cards, bank transfers, digital wallets, and PayPal) — the Data Controller does not retain nor have access to the complete credit card data.
b) Data automatically collected during navigation
- Navigation data (IP address, browser type, operating system, pages visited, date and time of access), collected also through cookies and similar technologies installed by the Lodgify platform and by statistical analysis (Google Analytics) and marketing/remarketing tools (Meta/Facebook Pixel) active on the Site — see the "Cookies" section.
c) Data required for legal obligations and for stay management
- Personal data and identification documents of all guests, transmitted within seven days of arrival (or immediately for last-minute bookings) for the mandatory communication to the Public Security Authorities (so-called "schedine alloggiati" / lodger forms, Legislative Decree 59/1978 and subsequent amendments, via the Alloggiati Web portal) and for identification at check-in.
- Signature for the execution, at the time of handing over the keys, of the tourist lease contract in paper format.
- Any bank details, should the refund of the security deposit or of amounts paid occur via bank transfer.
- Data contained in the damage assessment form, should damages attributable to the Guest occur during the stay.
3. Purposes and Legal Basis of Processing
| Purposes | Legal Basis |
|---|---|
| Management of quote/information requests and bookings | Pre-contractual measures/execution of a contract (Art. 6.1.b GDPR) |
| Provision of the tourist lease service and stay management | Execution of a contract (Art. 6.1.b GDPR) |
| Tax, accounting fulfillments, Alloggiati Web communication, and potential tourist tax | Legal obligation (Art. 6.1.c GDPR) |
| Payment management via the Stripe gateway | Execution of a contract (Art. 6.1.b GDPR) |
| Collection of deposits and balances on behalf of the Owners, upon their mandate | Execution of the intermediation mandate (Art. 6.1.b GDPR) |
| Communication of the Guest's data to the Property Owner, for the conclusion and execution of the lease contract | Execution of a contract (Art. 6.1.b GDPR) |
| Statistical analysis of Site traffic (Google Analytics) | Consent via cookie banner (Art. 6.1.a GDPR) |
| Marketing, remarketing, and advertising profiling activities (Meta/Facebook Pixel) | Consent via cookie banner (Art. 6.1.a GDPR) |
| Defense of a legal claim in court | Legitimate interest of the Controller (Art. 6.1.f GDPR) |
The provision of data for contractual and legal purposes is mandatory: refusal makes it impossible to process the booking request. The provision of data for marketing purposes is instead optional.
4. Methods of Processing
Processing is carried out using IT and telematic tools, with organizational methods and logic strictly related to the stated purposes, ensuring the security and confidentiality of the data in compliance with the technical and organizational measures provided for by Arts. 25 and 32 of the GDPR.
5. Communication and Transfer of Data to Third Parties
To provide the service, data may be communicated to third parties acting as data processors or autonomous data controllers, including:
- Property Owners of the booked properties, to whom the data necessary for the conclusion and execution of the lease contract are communicated (identification, contact, stay data, and ID documents); Owners process such data as autonomous Data Controllers.
- Lodgify, provider of the Site and booking management platform (property management system and booking engine) — Lodgify Privacy Policy
- Stripe, payment gateway used for the collection of deposits, balances, and online payments — Stripe Privacy Policy
- Any distribution portals (channel managers), among the channels supported by the Lodgify integration, if the listing is also distributed on such platforms:
- Airbnb — Airbnb Privacy Policy
- Booking.com — Booking.com Privacy Policy
- Vrbo — Vrbo Privacy Policy
- Expedia — Expedia Group Privacy Policy
- Tax consultant/accountant, for accounting and tax obligations.
- Public Security Authorities, for obligations regarding the communication of accommodated guests.
- Google LLC, for the Google Analytics statistical analysis service — Google Privacy Policy
- Meta Platforms, Inc., for the Meta/Facebook Pixel tracking and marketing service — Meta Privacy Policy
- Hosting and email providers
These entities process data as data processors pursuant to Art. 28 GDPR, based on specific agreements, or as autonomous data controllers when they act for their own purposes (e.g., payment institutions, OTA portals).
6. Extra-EU Data Transfer
Some of the providers mentioned above (e.g., Lodgify, Google, Meta, Stripe, OTA portals) may process data outside the European Economic Area. In such cases, the transfer takes place based on adequate safeguards required by the GDPR (Standard Contractual Clauses, adequacy decisions), as indicated in the respective privacy policies of the providers.
7. Retention Period
- Data relating to bookings and contractual relationships: for the duration of the relationship and, subsequently, for the period required by tax and civil law (usually 10 years).
- Data collected for Alloggiati Web communication: according to the terms set by public security regulations.
- Data processed on the basis of consent (statistical analysis and marketing cookies): until consent is revoked.
- Navigation data and cookies: according to the terms indicated in the Cookie Policy.
8. Rights of the Data Subject
As a data subject, you have the right to:
- Access your personal data (Art. 15 GDPR)
- Obtain the rectification of inaccurate data or the integration of incomplete data (Art. 16 GDPR)
- Obtain the erasure of data in provided cases (Art. 17 GDPR)
- Obtain the restriction of processing (Art. 18 GDPR)
- Obtain data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Revoke consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal
- Lodge a complaint with the Data Protection Authority (Garante per la protezione dei dati personali - www.garanteprivacy.it)
To exercise these rights, contact the Data Controller at the addresses indicated in point 1.
9. Cookies
The Site uses the following categories of cookies. The information provided in this section also constitutes the Cookie Policy of the Site.
- Technical cookies, necessary for the proper functioning of the Lodgify booking platform (do not require consent).
- Statistical analysis cookies (Google Analytics), used to monitor traffic and user behavior on the Site in an aggregated form.
- Marketing and tracking cookies (Meta/Facebook Pixel), used for advertising retargeting and to measure the effectiveness of promotional campaigns on Facebook and Instagram.
List of installed cookies:
| Cookie Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google Analytics | Distinguishes individual Site users | 2 years |
_ga_<container-id> | Google Analytics | Maintains the user's session state | 2 years |
_gid | Google Analytics | Distinguishes individual Site users | 24 hours |
_gat | Google Analytics | Limits the request rate to the server (rate limiting) | a few minutes |
_fbp | Meta/Facebook Pixel | Delivers ads and measures campaign conversions on Facebook and Instagram | 3 months |
_fbc | Meta/Facebook Pixel | Records the click identifier (fbclid) to attribute conversions to advertising campaigns | 3 months |
The installation of analysis and marketing cookies occurs only with the user's explicit consent via the dedicated banner, which can be revoked at any time from the banner's settings or the browser. For more information on third-party cookies, consult the Google Privacy Policy and the Meta Privacy Policy.
10. Changes to this Policy
The Data Controller reserves the right to modify or update this policy, in whole or in part. Changes will be published on this page and, if significant, communicated to users. It is recommended to consult this page periodically.
11. Contacts
For any information or request regarding the processing of your personal data: Lucia - 3475382506