Privacy and external services

BeHappy — Last updated: 1 November 2026

1. Who processes your data and how to get in touch

The BeHappy website presents two holiday apartments in Bologna, BeHappyS (San Mamolo) and BeHappyM (Fossolo), which have different owners.

Controller for the website and direct enquiries: Francesco Celentano. Francesco independently manages the website, enquiries and quotations received through its published contact channels. For these activities, he determines the purposes and essential means of personal data processing.

Privacy contact: sanmamolobehappy@gmail.com

Managing enquiries through the website is separate from entering into and performing rental agreements, which are concluded with the respective property owners, and from the legal requirements associated with each stay. Francesco Celentano also carries out these activities in the name and on behalf of the owners under the relevant management arrangements. Information about the contractual party is provided as part of the booking and stay documentation.

2. Personal data processed

When you use the website or communicate with BeHappy, the following information may be processed:

• Technical browsing data: IP address and other technical information needed to deliver website pages and maintain service availability and security.
• Enquiry details: preferred apartment, stay dates, number and composition of guests, pets and related details, preferences and optional messages.
• Contact and communication data: name, email address, telephone number and the content of emails or WhatsApp messages.
• Booking and stay information: details required to manage rental arrangements, guest communications and applicable legal obligations.

The website enquiry form does not provide a document-upload function.

Please do not include health information, identity document images or unnecessary personal information in free-text fields.

3. Purposes and legal bases

Personal data is processed for the following purposes:

a) Responding to enquiries and preparing quotations. The legal basis is taking steps at the data subject's request before entering into a contract, under Article 6(1)(b) GDPR.

b) Managing bookings and stays. Information necessary for the rental relationship is processed for the relevant contractual purposes, according to the roles of the parties involved.

c) Meeting legal obligations. Information required for public-security reporting, administrative requirements and tax obligations is processed to the extent required by applicable law, under Article 6(1)(c) GDPR.

d) Maintaining website functionality and security. Technical information strictly necessary to provide and protect the service may be processed, including on the basis of legitimate interests in security and abuse prevention, where applicable.

The website is not used to send newsletters or advertising messages, or to conduct commercial profiling.

4. How enquiries are sent

The website allows visitors to prepare an enquiry about one or both apartments.

Preparing an enquiry requires an accommodation choice, arrival and departure dates, and the number of adults. Other information is optional unless needed to assess a specific requirement indicated by the visitor.

The website does not automatically send enquiries to BeHappy and does not maintain an application database of enquiries.

The enquiry summary is prepared in the browser and can be transferred by the visitor to an email application or WhatsApp. The selected service may receive the prepared content when the relevant link is opened, even before the message is finally sent.

Sending the message requires an action by the visitor. An availability enquiry is not a confirmed booking.

5. Temporary browser storage

To retain information when visitors move between website pages, the website uses the browser's session storage (sessionStorage).

This function temporarily stores the enquiry details on the visitor's device. It does not create a BeHappy enquiry database.

The “Clear data” function deletes the draft stored in the website session. It does not delete messages already sent, drafts held by external applications or information copied to the clipboard.

Session storage normally ends when the browser tab is closed, although some browser session-restore functions may recover it.

6. Recipients and external services

Personal data is managed directly by Francesco Celentano, who is the only person with ordinary access to the email account and WhatsApp used for BeHappy enquiries.

Depending on the purpose, information may be processed by or disclosed to the following categories of recipients:

• OpenAI (ChatGPT Sites): for hosting, content delivery, maintenance and security, under the applicable terms and data processing addendum.
• Google (Gmail): for email communications.
• WhatsApp: for communications through the messaging service.
• Competent public authorities: where required by law, including Alloggiati Web reporting and tourist-tax administration.
• Property owners: for information needed to manage their respective rental arrangements. The financial summaries normally provided by the manager contain dates and amounts, without guests' names.

Both apartments are also listed on Airbnb. Bookings made through that platform are additionally subject to the privacy information provided by Airbnb.

PriceLabs is used to determine and update prices and is connected to the Airbnb listings. It is not integrated into the BeHappy website or enquiry form. Its privacy notice states that integrations with booking platforms may involve incidental, transient processing of guests’ personal data. Any data processing associated with the Airbnb–PriceLabs connection is separate from browsing the BeHappy website or sending a direct enquiry.

Cloud storage and synchronisation services, including iCloud, may be used in connection with information stored on devices involved in managing stays. This does not mean that identity documents are uploaded directly through the BeHappy website.

7. Guest identification and identity documents

The BeHappy website does not collect identity documents.

Following a booking, information may be requested to identify guests and meet public-security reporting obligations.

Any identity document images received through WhatsApp are used solely for the relevant purposes and must be deleted once the required information has been submitted through Alloggiati Web and the corresponding receipt has been generated.

Deletion also concerns any copies held in the device's photo gallery, recently deleted folders and synchronisation services used.

Identity document images are not retained for five years. The receipt generated by Alloggiati Web confirming successful reporting is instead retained for five years, in accordance with applicable requirements.

Collecting guest information or receiving document images in advance does not replace the identification procedures required by applicable law.

8. Retention periods

Personal data is retained for periods proportionate to the relevant purposes:

• Enquiries not resulting in a booking: deleted within 12 months of the last communication, unless specific justified needs or applicable obligations require otherwise.
• Confirmed bookings: for as long as necessary to manage the relationship and meet any subsequent applicable obligations.
• Contractual, administrative and tax records: for the retention periods required by applicable law.
• Alloggiati Web receipts: five years.
• Identity document images: deleted after the completion of the reporting purposes for which they may have been obtained.
• Browser drafts: for the duration of the browser session, as described in section 5.
• Hosting technical data: under the applicable hosting terms and data processing addendum, considering the service duration and subsequent obligations; no uniform verified period is available for every category of log.

Retaining information for one purpose does not automatically justify retaining all other information relating to the same guest.

9. External links and Google Maps

The website contains links to external services, including Airbnb, Instagram, transport services, travel guides and Google Maps.

Opening these links takes visitors to the selected external service, which may process technical browsing information under its own privacy notice.

Apartment pages also offer an embedded Google map. The map loads only when the visitor selects the relevant button. At that point, the browser connects to Google and technical information may be processed under the applicable service terms.

Visitors can access the website's main information without opening the map.

10. Cookies, similar technologies and international transfers

The website's application code does not contain advertising profiling tools, marketing pixels or visitor-behaviour analytics.

The browser session storage used to retain enquiry drafts serves a technical purpose.

The hosting infrastructure may process technical information necessary to deliver and protect website pages. Any cookies or logs managed at infrastructure level depend on the services actually used.

Some services may process personal data outside the European Economic Area. For data hosted through ChatGPT Sites, OpenAI’s contractual documentation provides for adequacy decisions or standard contractual clauses where applicable. Google documents the use of adequacy decisions, the EU–US Data Privacy Framework and standard contractual clauses depending on the circumstances. WhatsApp and Apple describe international transfers and safeguards in their respective privacy notices. Applicable safeguards depend on the specific service and processing activity.

For information about safeguards applicable to processing managed directly by BeHappy, visitors may use the privacy contact provided in section 1. The privacy notices of external services also apply to processing independently carried out by those providers.

11. Your rights

Where provided for by the GDPR, data subjects may exercise the rights to:

• access their personal data;
• rectify inaccurate data;
• request erasure;
• restrict processing;
• data portability;
• object to processing based on legitimate interests.

These rights are subject to the conditions and limitations established by applicable law. In particular, a request for erasure does not override legal retention obligations.

Requests may be sent to sanmamolobehappy@gmail.com.

A response will normally be provided within one month of receipt, subject to any extensions permitted by the GDPR.

Data subjects may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).

12. Camera at the entrance to BeHappyS

Francesco Celentano manages an exterior camera directed exclusively at the entrance to BeHappyS, for entrance security. Viewing is live only via the Virtavo app; the microphone is disabled and images are neither recorded nor stored.

The legal basis is the legitimate interest in entrance security under Article 6(1)(f) GDPR, subject to necessity and proportionality and respect for individuals’ rights. For information or to exercise the rights described in section 11, contact Francesco Celentano at sanmamolobehappy@gmail.com.

13. Updates to this notice

This privacy notice may be updated if the website's features, external services or personal data processing practices change.

The date of the latest update is shown at the beginning of this document.