Information notice pursuant to Articles 13 and 14 of Regulation (EU) 2016/679

Data Controller / Operator	LocalHouse s.r.l.s.
Last updated	16 September 2026

This Privacy Policy explains how LocalHouse processes the personal data of users who visit localhouse.it, use the booking website, submit enquiries or make reservations for properties intended for tourist rentals.

Data Controller contact details

LocalHouse s.r.l.s.

c.da Piana snc – 98072 Caronia (ME), Italy

VAT No. 03790440832

Email: info@localhouse.it

Website: https://localhouse.it

1. Categories of personal data processed

identification and contact data, such as first name, surname, email address, telephone number, postal address and any other information voluntarily provided;
booking and stay data, such as the selected property, dates, number of guests, special requests, additional services, amounts and payment status;
data required to comply with hospitality-related legal obligations, including information needed to identify guests and make the required notifications to the competent authorities;
technical and usage data, including IP address, online identifiers, device, browser, operating system, pages viewed, access times and interaction data;
cookie data, preferences and consent records;
data and content submitted through forms, email, telephone, messaging tools, comments or support requests.

2. Purposes and legal bases

Enquiries and booking management. to provide information, availability, quotations, pre-contractual assistance and to manage the booking and the stay. Legal basis: performance of pre-contractual measures and of the contract.

Tourist rental management. to organise check-in, check-out, included and optional services, security deposits, operational communications and the relationship with the guest. Legal basis: performance of the contract.

Legal and administrative obligations. to comply with tax, accounting, administrative, public security and other obligations applicable to tourist rentals. Legal basis: compliance with a legal obligation.

Payments. to manage payments, refunds, pre-authorisations or deposits through the payment providers made available on the website. Legal basis: performance of the contract and compliance with legal obligations.

Security and abuse prevention. to protect the website, forms, systems and bookings from spam, automated access, fraud and unlawful conduct. Legal basis: legitimate interest and, for any non-essential tools, consent where required.

Analytics and measurement. to analyse traffic and website usage and measure online performance. Legal basis: consent where required by applicable law.

Marketing and advertising. to perform advertising measurement, remarketing and campaign personalisation through active website tools. Legal basis: consent where required.

Protection of rights. to establish, exercise or defend legal claims in court or out of court. Legal basis: legitimate interest and compliance with legal obligations.

3. Processing methods and security

Processing is carried out using IT, telematic and, where necessary, manual tools in accordance with the principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity and confidentiality. LocalHouse adopts technical and organisational measures appropriate to the risk in order to prevent unauthorised access, loss, unlawful use, alteration or disclosure of personal data.

4. Recipients and service providers

Personal data may be processed by authorised personnel and by external parties required for the operation of the business, including property owners or property managers where relevant, booking platform providers, payment service providers, hosting and infrastructure providers, consultants, IT suppliers, communication, marketing, analytics, advertising, security and embedded-content providers.

The services identified in the website configurations and notices include Aruba for hosting/infrastructure, Kross for booking management, Google reCAPTCHA, Google Analytics, Google Maps, YouTube, Meta/Facebook services, X, ShareThis and TripAdvisor, according to the features actually enabled.

Where the relevant requirements are met, parties processing personal data on behalf of the Controller are appointed as processors pursuant to Article 28 GDPR. An up-to-date list may be requested from the Controller.

5. Booking platform

Bookings may be managed through localhouse.kross.travel and the related technical services. The data necessary to complete and manage a booking may therefore be processed by the platform and connected providers in accordance with their respective privacy roles, the Controller’s instructions and the applicable privacy notices.

6. International data transfers

Certain providers may process personal data, or allow access to personal data, from countries outside the European Economic Area. Where this occurs, the transfer is managed, depending on the role of the parties involved and the country of destination, through the mechanisms provided for by Articles 44 et seq. GDPR, including adequacy decisions, Standard Contractual Clauses, Binding Corporate Rules or other safeguards recognised by applicable law.

For transfers to the United States, the EU-U.S. Data Privacy Framework may apply where the recipient is validly certified; otherwise, other appropriate GDPR safeguards must be used.

7. Data retention

booking, contract, payment and tax or administrative documentation: for the period required to perform the relationship and thereafter for the statutory retention periods, generally up to 10 years where applicable;
data required for public-security and administrative obligations: for the periods required by applicable law;
enquiries not followed by a booking: for the time necessary to manage the enquiry and for a subsequent period proportionate to the need to protect legal rights;
data processed on the basis of consent: until consent is withdrawn or an objection is made, without prejudice to any additional retention necessary to document the consent or its withdrawal;
cookies and other tracking technologies: for the periods stated in the Cookie Policy or by the relevant provider.

8. Provision of data

Providing the data necessary for the booking, correct identification of guests, performance of the stay, payments and legal obligations is necessary in order to provide the relevant services. Failure to provide such data may prevent the booking from being concluded or performed. Data requested for optional purposes may be withheld without affecting the core services.

9. Cookies and tracking technologies

The website uses cookies and similar technologies for technical functions, external content, analytics and, where required and subject to consent, marketing and advertising. Full details are provided in the Cookie Policy.

10. Data subject rights

Where the requirements of Articles 15-22 GDPR are met, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Data subjects also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) or another competent supervisory authority.

Requests may be sent to info@localhouse.it. The Controller will respond within the time limits set out in Article 12 GDPR.

11. Artificial intelligence and automated processing

LocalHouse may use artificial-intelligence tools to support editorial, creative, organisational, customer-support, analytical or process-optimisation activities. These tools are used under human supervision and, unless a specific notice states otherwise for a particular service, they are not used to make decisions based solely on automated processing that produce legal effects concerning the data subject or similarly significantly affect them within the meaning of Article 22 GDPR.

Further information is provided in the separate Transparency Notice on the Use of Artificial Intelligence.

12. Third-party data

Where the Customer provides personal data relating to other guests, the Customer declares that they are entitled to do so and undertakes, where necessary, to inform those individuals about the processing described in this Privacy Policy.

13. Changes to this Privacy Policy

LocalHouse may update this Privacy Policy in order to reflect legal, technical, organisational or service-related changes. The applicable version is the version published on the website together with its last-updated date.