This is an English translation provided for convenience. In case of discrepancy, the Italian version prevails.
Notice on the processing of personal data
Pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian law, this notice describes how the personal data of users visiting the website of the accommodation operated by MOONSTONE INVESTMENTS S.R.L. are processed.
1. Data controller
MOONSTONE INVESTMENTS S.R.L.
VAT no. IT01734350703 · Via San Giovanni in Golfo, 205/L – 86100 Campobasso (CB), Italy
Accommodation: Via Paolo Bassi 22, 20159 Milan (MI), Italy
Phone: +39 351 383 4845 · Email: moonapartments24@gmail.com
2. Data collected
The website has no registration or contact forms. The following may be processed:
- data that users voluntarily provide when writing to us by email, phone or WhatsApp (for example name, contact details and the content of the message);
- technical browsing data (IP address, browser, device, access logs) automatically recorded by the hosting provider;
- the user’s IP address, which is shared with Google only if the user chooses to display the Google Maps map.
The website does not directly collect payment or booking data.
3. Purposes and legal basis
| Purpose | Legal basis |
|---|---|
| Replying to requests sent by email, phone or WhatsApp | Art. 6.1.b GDPR |
| Handling pre-contractual communications about the stay | Art. 6.1.b GDPR |
| Ensuring the security and proper functioning of the website | Art. 6.1.f GDPR |
| Displaying the Google Maps map at the user’s request | Art. 6.1.a GDPR (consent) |
| Complying with any applicable legal obligations | Art. 6.1.c GDPR |
No marketing, profiling or newsletter activities are carried out.
4. Bookings and payments on an external platform
Important: bookings are NOT made on this website.
When the user selects the “Book” button, they are redirected to an external PMS (Property Management System), Bookpage, which handles availability, bookings, payments and the related contractual terms.
The PMS operator acts as an independent data controller for booking and payment activities. Its privacy notice, cookie policy, booking terms and cancellation policies can be consulted directly on the external platform at the time of booking.
MOONSTONE INVESTMENTS S.R.L. does not receive or directly process payment card data entered on the PMS.
5. Processing methods
Data are processed with electronic and organisational tools that ensure their security, integrity and confidentiality, using technical and organisational measures proportionate to the risk.
6. Data retention
| Type of data | Period |
|---|---|
| Requests by email, phone or WhatsApp | up to 24 months |
| Technical and security logs | up to 12 months |
| Data required for legal obligations | as required by law |
7. Disclosure of data
Data may only be disclosed to:
- IT and hosting service providers (Netlify, Inc., which hosts the website);
- Google (Google Maps, only if activated by the user);
- Meta Platforms (WhatsApp), only if the user chooses to contact us via WhatsApp;
- administrative or legal advisers, where necessary;
- public authorities where required by law.
Data are not published or sold for commercial purposes.
8. Transfers outside the EU
Netlify, Google and Meta may process data on servers located outside the European Economic Area, in particular in the United States. Such transfers take place on the basis of the safeguards provided for by Articles 44–49 GDPR, including the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses adopted by the European Commission.
9. Cookies
For information about cookies, see the Cookie policy.
10. Your rights
Users may exercise the rights of access, rectification, erasure, restriction, objection and portability under Articles 15–22 GDPR, and may withdraw any consent given at any time.
Requests should be sent to moonapartments24@gmail.com or by phone to +39 351 383 4845.
11. Complaints to the supervisory authority
Users have the right to lodge a complaint with the Italian Data Protection Authority, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it), if they believe the processing infringes the applicable law.