Privacy notice
Privacy
This page has two parts, because we handle two different kinds of data: that of people who write to us from the form on this site, and that of people who stay in one of our houses. If you're looking for cookies: this site doesn't use any.
Part one
If you wrote to us from the form on this site
This covers anyone who fills in the form on the page for owners.
The data controller is BruGal S.r.l., Via Martin Luther King 9/b, 80137 Naples (NA), Italy, VAT IT10724721211, team@brugalsrl.com.
What you type into the form (name, email, phone, where the flat is and whatever you write in the message) is used only to reply to you and to look at the property with you, on the basis of your consent. We pass it to nobody and we don't use it for advertising. The form sends its email through Resend, the service that carries mail for the brugalsrl.com domain. We keep the enquiry as long as it takes to deal with it, and no longer than twenty-four months.
You can ask to see, correct or delete your data at any time by writing to privacy@brugalsrl.com. This site sets no cookies, has no analytics and loads nothing from third parties.
Part two
If you are staying with us
Notice on the processing of personal data · last updated: 4 October 2026
Who handles your data
The data controller is BruGal S.r.l., which runs the Yes I Know My Room guest houses (Foria, Storico and Magica Napoli in Naples, Cla & Lory in Seregno, La Rua in Castel di Sangro).
For any question about this notice, or to exercise your rights, write to privacy@brugalsrl.com.
What data we handle, and where it comes from
Data you give us, by writing to us on WhatsApp or talking to us on the phone: your phone number, the content of your messages, the voice notes and the photos you send us.
Data that reaches us from others, not from you: first and last name, email, dates of stay, room, number of people, amounts. It comes from our booking system and, through it, from the portals you booked on (Booking.com or Airbnb, for example) or from a direct booking.
Data the law obliges us to collect in order to register guests: identity document, tax code where required, date and place of birth, nationality.
Why we handle it, and on what legal basis
| Why | Legal basis |
|---|---|
| Running your booking and your stay: giving you the instructions to get in, answering your questions, arranging arrival and departure | Performance of the contract (art. 6.1.b GDPR) |
| Reporting guests' details to the public security authority, and the obligations on tourist tax and statistical returns | Legal obligation (art. 6.1.c GDPR) |
| Answering your WhatsApp messages, including through an automated assistant | Performance of the contract and our legitimate interest in giving you quick support (art. 6.1.b and 6.1.f GDPR) |
| Keeping a record of conversations so we can reconstruct what was said if there is a dispute | Our legitimate interest (art. 6.1.f GDPR) |
We don't use your data for advertising and we don't sell it to anyone.
An automated assistant answers you
On WhatsApp you are answered by Pino, an assistant based on artificial intelligence. It tells you so itself the first time it writes to you, and it is written under its first reply.
There is always a person behind it: our team reads the conversations and steps in when needed. The decisions that matter — prices, refunds, exceptions to the house rules — are always taken by a person, never by the machine.
If you would rather speak to a human being, just ask in the chat.
The voice notes and photos you send us are sent to Google, which transcribes and describes them so the assistant can understand them and answer you. If you prefer, write to us in text.
Who we give your data to
To make the service work we rely on suppliers who process the data on our behalf, under a contract that binds them (art. 28 GDPR):
| Who | What they do | Where they process the data |
|---|---|---|
| Twilio | Delivers the WhatsApp messages and the phone calls | United States and European Union |
| Meta (WhatsApp) | Is the channel you write to us on | United States and European Union |
| The artificial intelligence that composes the replies, transcribes the voice notes and describes the photos | United States | |
| Cloudflare | Hosts the system and the database of conversations | United Kingdom |
| Our booking system | Holds the bookings and sends the confirmation emails | European Union |
We also report guest registration data to the public security authority and, where required, to the Comune for the tourist tax and to the Region for statistical returns, because the law requires it of us.
Transfers outside the European Union. Some of these suppliers process data in the United States and in the United Kingdom. The transfers take place on the basis of the European Commission's adequacy decisions and, where those are not enough, of the standard contractual clauses under art. 46 GDPR.
How long we keep it
| What | How long |
|---|---|
| Bookings and stay data | 10 years — civil and tax obligations (art. 2220 of the Italian Civil Code) |
| WhatsApp conversations, voice notes and photos | 24 months from the end of the stay |
| Technical log of the calls to the artificial intelligence | 30 days |
| Registration data reported to the public security authority | For as long as the law provides |
Once these periods are over the data is deleted.
Your rights
You can ask us at any time to give you access to your data, to correct it, to delete it, to restrict its use, to let you object to processing based on our legitimate interest, and to receive it in a machine-readable format (portability).
Write to privacy@brugalsrl.com: we answer within a month.
If you think we are handling your data wrongly you can turn to the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or to the authority of the country where you live.
If you don't give us your data
The booking data and the guest registration data are required of us by law and by the contract: without them we cannot host you. Everything else — writing to us on WhatsApp, sending us a voice note or a photo — is up to you: if you prefer, you can talk to us on the phone or by email.