1. Data controller
Turin Loft & Apartments S.r.l.
Italian tax and VAT number 11710190015
Corso Filippo Turati 11, 10128 Turin, Italy
Email: info@mole27.it
Telephone: +39 346 577 4574
Mole27 is located at Corso San Maurizio 27/a, 10124 Turin. Italian National Identification Code: IT001272B4A6FWKV0F.
2. Personal data we process
Depending on how you use the website, we may process:
- identity and contact details such as name, email, telephone and company;
- details of your accommodation request, including dates, duration, frequency, number of guests and message content;
- technical browsing data, including IP address, request date and time, requested page, browser and operating system, and security or error logs.
We do not ask for special categories of personal data. Please do not include health data or other sensitive information that is not necessary in your message.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Answer requests for information, availability or proposals for corporate, recurring and extended stays. | Steps taken at the data subject’s request before entering into a contract and, where applicable, contract performance (Article 6(1)(b) GDPR). |
| Manage bookings, accommodation, operational communications and administrative or tax obligations once a relationship begins. | Contract performance and legal obligations (Articles 6(1)(b) and 6(1)(c) GDPR). |
| Protect the website, prevent misuse, maintain security and availability, and establish or defend legal claims. | The controller’s legitimate interests (Article 6(1)(f) GDPR). |
The website does not use form data for newsletters or marketing and does not carry out solely automated decision-making or profiling.
4. Contact form, email, phone and WhatsApp
The corporate and extended-stay form prepares a message in the email application on your device. Details typed into the form are not sent to the website server; they reach Mole27 only when you choose to send the email.
Email is the only required field. All other fields are optional. Without valid contact details, we may be unable to reply. You can also contact us by telephone or WhatsApp.
The processing required to answer your request relies on the pre-contractual steps you ask us to take, not on consent. Submitting the request confirms that you have read this notice.
5. Short bookings, map and external links
For short stays, the website links to Booking.com. Mole27 does not collect payment details or complete bookings directly on this website. The home page embeds a map provided by the OpenStreetMap Foundation: when the map loads, the browser connects directly to the provider’s servers, which may receive technical data such as the IP address, browser type and request information. Links to Booking.com, WhatsApp and Google Maps instead open external services, which process data under their own notices and, where applicable, as independent controllers:
- OpenStreetMap Foundation privacy information
- Booking.com privacy information
- WhatsApp privacy information
- Google privacy information
6. Recipients and international transfers
Personal data may be handled by authorised staff and, where necessary, by service providers supporting hosting, email, IT assistance, administration and professional advice. Depending on their role, they act as processors or independent controllers. Data may also be disclosed to public authorities where required by law.
We do not sell personal data. Where a provider processes data outside the European Economic Area, transfers take place using the safeguards required by the GDPR, where applicable.
7. Retention
Requests are kept for as long as needed to handle and answer them, and afterwards only for organisational needs, legal obligations or the protection of rights. If a request leads to a stay or contract, administrative and accounting information is retained for the periods required by applicable law. Technical logs are kept only as long as necessary for security, diagnostics and service operation.
8. Optional data, third-party data and security
Providing optional data is voluntary. If you share another person’s details, you confirm that you are authorised and have informed them. We use technical and organisational measures proportionate to risk to limit loss, unauthorised access or misuse, while no Internet-connected system can be considered completely risk-free.
9. Your rights
Where provided by the GDPR, you may request access, correction, erasure, restriction, portability or object to processing. You may also withdraw any consent without affecting earlier lawful processing. To exercise your rights, email info@mole27.it. We may ask for information needed to verify your identity.
You also have the right to lodge a complaint with the Italian Data Protection Authority or your local supervisory authority.
10. Children and updates
Booking and enquiry services are intended for adults. We may update this notice to reflect changes in law, technology or services; the date above identifies the latest version.