Privacy policy
Last updated: November 10, 2026
This explains which personal data we process, why, and what your rights are. We never process hotel guests' data or reservations.
Controller
Alessandro Dal Gobbo, Via Luigi Negrelli 122, 39055 Laives (BZ), Italy. Email office@onessa.tech.
Agent Check of public hotel websites
Our checking bot reads public pages of hotel websites, at most 30 per check, and obeys robots.txt. These may include the hotel's business contact details. For visitors who start a check we store no IP address, only a salted hash to limit abuse. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Reports are deleted after 12 months.
Enquiries
If you write to us through the form or by email, we process the hotel name and email address to reply (Art. 6(1)(b) GDPR). Enquiries that do not lead to a contract are deleted after 24 months.
Customers and pilot hotels
For hotels we work with, we store the contact email, the confirmed hotel facts, the name of the person who confirms them, and visit statistics for the Agent Pack. The legal basis is the contract (Art. 6(1)(b) GDPR). Billing records are kept for 10 years as the law requires (Art. 2220 Italian Civil Code); everything else is deleted 3 months after the contract ends.
Payments
Payments are handled by Stripe Payments Europe, Ltd. (Dublin, Ireland). We never see card details. We receive the billing name, address, VAT number and SDI code or PEC for the electronic invoice. Stripe may transfer data to Stripe, Inc. in the USA under the EU Standard Contractual Clauses.
AI processing
To read hotel facts from websites, run agent tests and monitor AI answers, we send public website text and confirmed hotel facts to Anthropic PBC (USA). Guest data is never sent. The transfer is based on the EU Standard Contractual Clauses; under its contract Anthropic does not train on this data.
Other service providers
Hosting: netcup GmbH, Karlsruhe, Germany (servers in Nuremberg). Email delivery: Brevo, Paris, France. We have data processing agreements (Art. 28 GDPR) with all providers.
Cookies and tracking
We use no analytics or advertising cookies and no tracking. At most, one technically necessary cookie stores your chosen language.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection (Art. 15 to 21 GDPR). Write to office@onessa.tech. You can also complain to the Italian data protection authority, the Garante per la protezione dei dati personali (garanteprivacy.it).