Privacy & Cookie Policy

1. Introduction and Who We Are

DèsVu S.àr.l. (operating under the brand "StaysCo") is the data controller for the personal data collected through our website (https://www.staysco.com/) and your StaysCo Dashboard. Our legal seat is at 9, rue du laboratoire, L-1911 Luxembourg, Luxembourg.

This policy explains how we collect, use, disclose, and protect your personal data when you use our services, which involve Temporary Reservations and Long- Term Connections via our matchmaking platform. We are committed to complying with the EU General Data Protection Regulation (GDPR).

2. The Data We Collect About You

We collect different kinds of personal data depending on the services you seek and the information you provide through our two-stage form process (initial registration and Dashboard forms).

Categories of Data We Collect:

• Identity Data: Includes your name, family name, and photographic identification (e.g., passport or ID copy).
• Contact Data: Includes billing address, physical address for your intended stay, email address, and telephone numbers.
• Financial & Profile Data: This sensitive data is required for pre-selection, especially for Long-Term Connections. It includes information related to your employment, income, financial documents, and detailed housing preferences.
• Transaction Data: Details about payments made to us (e.g., credit card payment) and apartment charges.
• Technical Data: Includes your IP address, login data, browser details, time zone, operating system, and platform, collected automatically through cookies.
• Usage Data: Information about how you use our website and Dashboard, including your search criteria and viewing history.

Where you are a professional contact at a company we believe may benefit from our corporate housing and relocation services, we may process business contact data relating to your professional role. This includes your name, business email address, job title, employer, professional profile information (for example a LinkedIn profile), and business-relevant engagement signals. We do not seek or process special categories of personal data for this purpose, and we contact you only in your professional capacity.
 
3. How and Why We Use Your Personal Data

We will only use your personal data when we have a valid legal basis to do so. We rely on three main grounds: Performance of a Contract, Legitimate Interests, and Explicit Consent.

A. Performance of a Contract with You

We process your personal data to fulfill our obligations to you as part of our matchmaking and reservation service. This includes:

• Service Provision & Verification: To manage your account, provide access to the Dashboard, and verify your identity and documents for pre-selection purposes.
• Finalizing Reservations: To process payments, confirm the booking, and manage the reservation for Temporary Reservations.
• Facilitating Connections: To complete the Long-Term Connection by transferring your profile to the matched Real Estate Agency.

B. Based on Our Legitimate Interests

We rely on our legitimate interests to secure and improve our platform, provided your rights are not overridden. This includes:

• Security and Fraud Prevention: To protect your account, our platform, and our clients from fraudulent use.
• Platform Improvement: To analyze usage data and conduct internal surveys to optimize the quality and features of our service.
• Customer Support: To respond efficiently to your requests via email or phone.

C. Based on Your Explicit Consent

We rely on your explicit consent for the following activities, which you may withdraw at any time:

• AI Profiling and Suggestions: Processing your submitted data and preferences via AI to create a personalized profile and generate relevant AI- Suggested Options for you.
• Marketing Communications: Sending you offers related to similar products or services, separate from essential service communications.

We use the business contact data above to send relevant, role-specific communications about our corporate housing and relocation services to organisations in Portugal and Luxembourg. The lawful basis for this processing is our legitimate interests (Article 6(1)(f) GDPR) in promoting our services to relevant businesses, balanced against your rights as described in Section 7. We have carried out a Legitimate Interest Assessment for this activity. You have an absolute right to object to this processing at any time (see Section 7), and every message we send includes a one-click way to opt out.

Where we contact you as a professional prospect, we did not collect your data directly from you. We obtain it from the following sources:
- professional networking platforms, in particular LinkedIn Sales Navigator, used for manual list building;
- business data enrichment providers (for example Clay and its connected data sources) used to confirm business contact details and company information;
- our own website analytics (PostHog), where a business visitor's activity indicates relevant interest.
We process only business contact data from these sources, and only to the extent necessary for relevant B2B outreach as described above.

4. Disclosure and Sharing of Your Personal Data

We share your personal data only as necessary for the purposes outlined in Section 3:

• Apartment Providers: We share your data to finalize Temporary Reservations, provide check-in details, and process security deposits.
• Traditional Real Estate Agencies: For Long-Term Connections, we share your full profile and submitted documents to enable their final review and initiate a lease agreement.
• Guests (Third Parties): If you provide information about a Guest, you confirm that you have their permission to share their data with us.
• Service Providers: We share necessary Transaction Data with payment processors and other essential IT service providers who help us maintain our platform.

5. AI Profiling and Automated Decision-Making

We use your profile data to personalize your experience, but we do not use your
data for decisions that are purely automated and have a significant legal effect on you.

• Use of Profiling: We use your preferences, budget, and submitted documents to better understand your needs through our automated system, allowing us to generate tailored AI-Suggested Options.
• Human Intervention: StaysCo confirms that no automated decisions are made for rejection or approval that would have a legal or significant effect on you. All final decisions related to approving a Reservation or rejecting a Long-Term Connection request include human intervention from the Apartment Provider or Real Estate Agency.
• Right to Object: You have the right to object at any time to the processing of your personal data for profiling purposes.

6. International Transfers and Data Security

• International Transfers: As we are based in Luxembourg (EEA), but work with global partners, your data may be transferred outside the EEA. We ensure a similar degree of protection is afforded to it by implementing safeguards required by GDPR, such as Standard Contractual Clauses (SCCs).
• Data Security: We implement appropriate physical, electronic, and procedural security measures to ensure the confidentiality of your information. However, you acknowledge that we are not liable for how third-party Apartment Providers or Real Estate Agencies use the information provided to them.

7. Data Retention and Your Legal Rights
 
• Data Retention: We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying any legal, accounting, or reporting requirements.
• Your Rights: Under GDPR, you have the right to access, rectify, erase, or object to the processing of your personal data. Where processing is based on consent (e.g., AI profiling), you have the right to withdraw that consent at any time.

Retention of prospect data. We retain business contact data used for B2B outreach for no longer than 24 months from our last contact with you, after which it is deleted unless we have an ongoing business relationship with you or another lawful reason to keep it. Where you ask us to stop contacting you, or you opt out, we keep a minimal record of your email address on a suppression list so that we do not contact you again. We keep this suppression record even after deleting your other data, on the basis of our legitimate interest in honouring your objection. Your right to object to direct marketing. You have the right to object at any time to our processing of your personal data for direct marketing, including any related profiling. This right is absolute: if you object, we will stop using your personal data for that purpose without exception. You can object by using the unsubscribe option in any of our emails or by contacting us at support@staysco.com. We action objection and deletion requests within 48 hours.

Cookies Policy

What are Cookies?

Cookies are small text files placed on your computer or mobile device when you visit a website.

How We Use Cookies

We use cookies to ensure the website functions correctly and to improve your experience. These cookies fall into the following categories:

• Strictly Necessary Cookies: Essential for you to log into your Dashboard, use the forms, and securely process your requests.
• Performance Cookies: Used to analyze site performance and understand how users interact with our platform.
• Functionality Cookies: Used to remember your choices (like language) and provide enhanced, personalized features.
• Targeting/Advertising Cookies: Used to deliver relevant content and track campaign effectiveness.

Your Choices Regarding Cookies

You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or refuse cookies, please note that some parts of the website, including the Dashboard functionality, may become inaccessible or not function properly.

8. Contact Details

If you have any questions about this privacy notice or our data practices, please contact us by email at support@staysco.com.