Privacy Policy

Data Controller

Information we collect

When you make a reservation through our website, we collect the information necessary to manage your booking, including your first and last name, email address, telephone number, country of residence, dates of stay, number of guests, selected room or rooms, and any optional message or special request you provide.

We also process technical information necessary to operate and secure the website and booking system, such as IP addresses, browser and device information, request logs and technical identifiers.

Why we process your information

We process your personal data primarily to take steps at your request and perform our contract with you, including checking availability, creating and managing your reservation, communicating with you about your stay and guaranteeing the reservation.

We may also process information where necessary to comply with legal obligations and for legitimate interests relating to the security, reliability and prevention of misuse or fraud in connection with our website and booking system.

We do not use the information collected through the booking system for advertising or profiling.

Payments and card details

We use Stripe to securely collect and store a payment method as a guarantee for your reservation.

Your card number, expiry date and security code are entered directly into Stripe's secure payment interface. Soumeià does not receive or store your full card details.

Stripe may process transaction and device information and use cookies or similar technologies for purposes including payment security, authentication and fraud prevention. Stripe may also process certain information for the operation and improvement of its services. Stripe

Stripe Privacy Policy

Service providers

We use trusted service providers to operate the website and manage reservations. These currently include:

• Smoobu, for availability and reservation management;
• Stripe, for secure payment-method handling and reservation guarantees;
• Resend, for transactional reservation emails;
• Upstash, for temporary and technical booking records and protection against duplicate reservations; and
• Vercel, for website hosting and infrastructure.

These providers receive only the information necessary for the relevant service.

Some providers may process data outside the European Economic Area. Where required, such transfers are subject to the safeguards provided for under applicable data-protection law.

Data retention

We retain personal information only for as long as necessary for the purposes for which it was collected and to meet applicable legal, accounting and administrative requirements.

Technical booking records stored in our Redis database are automatically deleted after 365 days. Temporary processing records normally expire after approximately two minutes.

Reservation information held in our property-management and other service systems may be retained for longer where necessary to administer your stay, maintain appropriate business and accounting records, resolve disputes or comply with legal obligations.

Emails

When your reservation is confirmed, we use Resend to send your booking confirmation and other transactional information relating to your reservation.

We do not use this booking information to subscribe you to marketing emails.

Cookies and local storage

Soumeià does not currently use advertising cookies, profiling cookies or website analytics.

The website stores your selected language (EN or IT) in your browser's local storage so that it can remember your preference.

When you proceed to the payment stage of a reservation, Stripe may use cookies and similar technologies necessary for its payment, authentication, security and fraud-prevention services. Stripe confirms that Stripe.js uses technologies including cookies to collect signals used for fraud prevention. Stripe

Your rights

Subject to the conditions provided by applicable law, you may have the right to request access to your personal data, correction of inaccurate information, deletion, restriction of processing, data portability and to object to certain processing.

To exercise your rights or ask a question about your personal data, contact us at info@soumeia.com.

You also have the right to lodge a complaint with the competent data-protection supervisory authority. In Italy, this is the Garante per la protezione dei dati personali. Garante per la protezione dei dati personali