Necessary Cookies
Essential for the website to function.
Always active
📊
Analytics Cookies
Help us understand how you use the site.
📢
Marketing Cookies
Used to show you relevant advertisements.
⚙️
Preference Cookies
Allow us to save your preferences.
Privacy Policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
(Article 13 of EU Regulation 2016/679 - GDPR)
For: Visitors to the public portal and guests who send availability requests
Dear Visitor, this information describes how i-roomy processes the personal data of visitors to the public portal https://i-roomy.com and guests who send an availability request to a registered accommodation.
Data Controller
The Data Controller is I-Roomy di Salvatore Marrocu, with registered office at Via Della Conciliazione 12, 09170 Oristano (OR), VAT No. 01293880959, Tax Code MRRSVT49S11E270I. Privacy Contact: iroomyservice@gmail.com
Nature of the Portal and Role of i-roomy
The public portal i-roomy is a showcase and contact service between visitors and registered accommodation managers. i-roomy is not a party to the accommodation contract, does not mediate payments, does not set prices (which are entered independently by the managers for purely indicative and non-binding purposes), and does not guarantee the availability or accuracy of the information published by the property managers. Registered managers are solely responsible for the content of their listings.
What data do we collect and why (Purpose and Legal Basis)
Browsing data (all visitors): Technical system logs, public IP address, browser type, visit timestamp. Purpose: IT security, abuse prevention, and technical debugging. Legal basis: legitimate interest of the Data Controller (Art. 6.1.f GDPR). Retention: maximum 12 months.
Availability request data (guests requesting): First name and last name, telephone number, email address. This data is required to submit the request. Purpose: To transmit the request to the operator of the selected accommodation and establish direct contact between the guest and the operator. Legal basis: To execute pre-contractual measures at the request of the data subject (Art. 6.1.b GDPR).
Maps and Third-Party Services (Google Maps): The geographical location of the accommodation can be displayed within the accommodation listings via the Google Maps service (Embed/Iframe). By default, no visitor data is transmitted to Google when the page is opened, as the map is blocked. Only if the visitor voluntarily clicks on the "Show Google Map" button, the widget will activate and connect to the third-party servers.
Data involved upon click: IP address, browser technical data, navigation logs, and any Google cookies or tracking identifiers.
Purpose: To allow interactive viewing of the accommodation's location.
Legal basis: Consent of the data subject, expressed by clicking the map activation button (Art. 6.1.a GDPR).
Independent data controller: Google Ireland Limited (for users within the EEA) or Google LLC (USA). For details on the processing and duration of data by third parties, please refer to Google's Privacy Policy (https://policies.google.com/privacy).
Disclosure of Data to the Property Manager
The data provided in the availability request (name, telephone number, email address) is transmitted to the manager of the accommodation for which the request was sent, via email notification and private dashboard. From that moment, the manager acts as the independent data controller for that data and is solely responsible for it. i-roomy retains the data on its servers until the manager deletes it from its dashboard. By submitting the availability request, the guest expressly authorizes this communication to the manager. The data is not transferred to other managers, third parties, or used for marketing purposes by i-roomy.
Data Storage and Transfer Location
The data directly managed by i-roomy is stored on proprietary servers physically located in Italy (Oristano, OR) and is not transferred outside the European Economic Area (EEA).
Regarding the optional and voluntary interaction with the Google Maps service (activated only by user click), please note that Google may transfer and process certain technical data (e.g., IP address) to servers located in the United States, basing such transfer on the international "Data Privacy Framework" (DPF) or the Standard Contractual Clauses approved by the European Commission.
Data Subject Rights
At any time, pursuant to Articles 15-22 of the GDPR, the visitor/guest has the right to request from the Data Controller access to their data, rectification, erasure, or restriction of processing, as well as to object to such processing. To exercise these rights with i-roomy: iroomyservice@gmail.com. For data already transmitted to the property manager, you will need to contact the manager directly as the Data Controller.
COOKIE POLICY (Extended Cookie Policy)
Last updated: May 2026
What are Cookies?
Cookies are small text files that websites visited by users send and store on their computer or mobile device, before being retransmitted to the same websites on their next visit. Cookies allow websites to remember user actions and preferences (such as login information, preferred language, font size, other display settings, etc.) so that they do not need to be re-entered when the user returns to the website or navigates from one page to another.
Scope of Application
This Cookie Policy applies to the entire domain https://i-roomy.com, including the public portal (homepage and ad pages) and the management area reserved for authenticated customers.
Types of Cookies used by i-roomy
This application natively uses only first-party technical cookies. No cookies are used directly to profile users, nor are proprietary tracking methods or third-party cookies used for marketing or advertising purposes when pages are first loaded. The use of i-roomy technical cookies is strictly limited to the transmission of session identifiers and security features, which are necessary to enable safe and efficient browsing of the site and to maintain authentication.
List of Technical Cookies Installed
Below is a list of the strictly necessary technical cookies used by the site:
PHPSESSID
Purpose: This cookie is essential. It is used to identify the logged-in user's session. Without this cookie, the management system cannot function, and the user would be logged out at every click or page change.
Expiration: Session (automatically deleted when the browser is closed).
Type: Technical (First Party).
csrf_token
Purpose: Security. Protects the site and your data from CSRF (Cross-Site Request Forgery) attacks when submitting forms and saving data.
Expiration: Session.
Type: Technical (Security).
cookie_consent
Purpose: Preferences. Stores your acknowledgement of the cookie banner so it is not shown again each time you visit.
Expiration: 1 Year.
Type: Technical.
Progressive Web App (PWA) and Service Worker
i-roomy is available as a Progressive Web App (PWA), which can be installed on your device via a browser. Installing the PWA involves registering a Service Worker, a software component that runs in the background of the browser to improve the platform's performance (e.g., faster loading). The Service Worker does not collect, transmit, or store personal data. It can only store static technical resources of the platform (HTML, CSS, JavaScript files) locally on the user's device for performance optimization purposes. Installing the PWA is optional and can be activated voluntarily by the user via their browser.
Sharing Buttons
The public portal includes sharing buttons for property listings. These buttons do not load third-party scripts or install third-party cookies: the function simply copies or shares the URL of the listing page, without communicating any data to social media platforms or other external services.
Activation of Third-Party Features and Cookies (Google Maps)
The public portal allows property owners to include an interactive street map provided by Google Maps within their listings. By default, and to ensure maximum protection of visitor privacy, the map is completely blocked and does not release any tracking technology when the page is first loaded.
On-demand operation: Only if the visitor voluntarily and consciously decides to click the "Show Google Map" button, the browser will load the widget by connecting to Google's servers.
Cookies installed by third parties: After clicking the button, Google Ireland Limited (or Google LLC) may install third-party technical, preference, or tracking cookies on the user's device (such as NID, CONSENT, AEC, 1P_JAR, or equivalent identifiers) necessary for the map to function and to store settings (e.g., zoom level).
Exclusion from the main banner: Since this feature is activated exclusively on a voluntary and one-time basis by the visitor on a single ad, the installation of the relevant cookies is not linked to the categories of the site's main banner cookie (e.g., the "Accept all" or "Reject" buttons). Consent is given directly by clicking the map button.
How to refuse or manage them: The visitor can refuse these cookies simply by not clicking the map button. If the map has already been activated
