Privacy Policy.
Last updated: 31 May 2026
1. Data Controller
The data controller is Staykeasy SRL, operator of the service The Access Key.
Contact: support@staykeasy.com
2. Data we collect
- Contact information you voluntarily provide (name, email) when you submit a form or contact us.
- Accessibility information about places you choose to share (location name, city, address, category, accessibility ratings, photos, personal notes).
- Technical data when you browse the site (pages visited, referrer, user agent, anonymous session identifier) — only if you accept analytics cookies.
- Communications you exchange with our concierge team.
We ask you not to include unnecessary medical information in your submissions — share only practical accessibility details about the place.
3. Purpose of processing
- Verify, organize and improve accessibility information shared with us.
- Provide concierge and verification services you request.
- Improve the website and our recommendations (only with analytics consent).
- Respond to your messages and requests.
- Comply with legal obligations.
4. Legal basis (GDPR Art. 6)
- Consent — for accessibility submissions, optional anonymized reuse, analytics cookies and marketing.
- Contract — to deliver concierge, verification or transfer services you book.
- Legitimate interest — to keep the service secure and prevent abuse.
- Legal obligation — accounting, tax and any applicable laws.
5. Data retention
Personal data is kept only as long as necessary for the purposes above:
- Accessibility submissions: kept while relevant for the database; anonymized after verification if you have not chosen otherwise.
- Service-related data: for the legally required period (typically up to 10 years for accounting).
- Analytics data: up to 14 months, then aggregated.
- Contact and concierge messages: up to 24 months after the last interaction.
6. Your rights
Under the GDPR you can at any time:
- Access your data and obtain a copy.
- Request correction or update.
- Request deletion ("right to be forgotten").
- Restrict or object to processing.
- Withdraw consent at any time (without affecting prior lawful processing).
- Request portability of your data.
- Lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
7. How to request deletion
Write to support@staykeasy.com with the subject "GDPR deletion request". We will reply within 30 days.
8. Cookies
We use only strictly necessary cookies by default. Analytics cookies are activated only after explicit consent through our cookie banner. You can change your choice at any time by clearing your browser storage for this site or contacting us. Read the full Cookie Policy.
9. Data sharing
We do not sell personal data. We share data only with trusted processors (hosting, analytics, payment processors) under data processing agreements and only as needed to operate the service.
10. Changes to this policy
We may update this Privacy Policy. Material changes will be announced on this page with a new "last updated" date.