← Back to home
ITEN
Legal

Privacy Policy

Last updated: May 22, 2026

1Data Controller

The data controller is Roomer S.r.l., incorporated in Italy, reachable at: privacy@roomerapp.it.

This Privacy Policy describes how we collect, use and protect your personal data when you use the Roomer mobile application and website, in compliance with EU Regulation 2016/679 (GDPR) and applicable Italian law.

2Personal Data Collected

We collect the following categories of personal data:

  • Account data: first name, last name, email address, date of birth, profile photo.
  • Profile data: co-living preferences, habits (schedules, smoking, pets), lifestyle, city of interest.
  • Location data: city or area voluntarily provided for matching purposes (we do not collect real-time GPS location).
  • Usage data: in-app interactions, searches, profiles viewed, messages sent via the platform.
  • Technical data: IP address, device type, operating system, app version, device identifiers.
  • Communication data: messages exchanged with other users via in-app chat.

We do not collect special category data under Art. 9 GDPR (e.g., ethnic origin, political opinions, health data) unless you voluntarily share it in your profile.

3Purposes and Legal Basis

Your data is processed for the following purposes:

  • Matching service — calculating compatibility scores and showing compatible profiles. Legal basis: contract performance (Art. 6(1)(b) GDPR).
  • Account management — registration, authentication, customer support. Legal basis: contract performance.
  • Newsletter and promotional communications — only with your explicit consent. Legal basis: consent (Art. 6(1)(a) GDPR). You may withdraw consent at any time.
  • Security and fraud prevention — detecting abnormal behaviour and protecting users. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Legal obligations — compliance with regulatory, tax or judicial requirements. Legal basis: legal obligation (Art. 6(1)(c) GDPR).
  • Service improvement — aggregated, anonymised usage analysis to improve features. Legal basis: legitimate interest.

4Data Recipients

Your personal data may be shared with third parties strictly necessary for service delivery, acting as data processors:

  • Cloud infrastructure providers (e.g., hosting, databases) for secure data storage.
  • Analytics platforms to monitor app technical performance in aggregated form.
  • Email delivery services for transactional communications and newsletters (with your consent only).
  • Judicial or regulatory authorities when required by law.

We do not sell your personal data to third parties and do not share it for advertising purposes with entities outside the platform.

5International Transfers

Some of our technical service providers may process your data outside the European Economic Area (EEA). In such cases, transfer occurs exclusively to countries offering an adequate level of protection (European Commission adequacy decision) or subject to appropriate safeguards (e.g., Standard Contractual Clauses approved by the European Commission).

You may request information on the transfer mechanisms we use by contacting us at the address in the Contact section.

6Data Retention

Personal data is retained only as long as necessary for the purposes of collection:

  • Account and profile data: for the duration of the account and 12 months after deletion.
  • Chat data: for the duration of the conversation and 6 months after it ends.
  • Technical log data: 90 days from collection.
  • Newsletter data: until consent is withdrawn.
  • Tax / legal data: as required by applicable law (generally 10 years).

7Your Rights

As a data subject, you have the following rights under Arts. 15–22 GDPR:

  • Access — obtain confirmation of processing and a copy of your data.
  • Rectification — correct inaccurate or incomplete data.
  • Erasure — request deletion of your data ("right to be forgotten").
  • Restriction — restrict processing in certain cases.
  • Portability — receive your data in a structured, machine-readable format.
  • Objection — object to processing based on legitimate interest.
  • Withdrawal of consent — withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to privacy@roomerapp.it. You also have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).

8Cookies and Similar Technologies

The Roomer website uses technical cookies necessary for operation and, with your consent, analytical cookies to understand how the site is used.

Technical cookies (always active): required for navigation, authentication and site security. No consent required.

Analytical cookies (consent-based): we use anonymised analytics tools to improve the site. You can manage preferences via the cookie banner or your browser settings.

9Minors

Roomer is intended exclusively for people aged 18 or older. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it immediately.

10Contact

For any questions about this Privacy Policy or to exercise your rights, contact us:

This policy may be updated. We will notify you via the app or email of any material changes. The latest version is always available on this site.

Privacy Policy | Roomer