Privacy Policy

1. Data Controller

The Data Controller responsible for the processing of personal data is:

2. Personal Data We Collect

Through this website, we may collect the following categories of personal data:

• Name and surname;
• Email address;
• Phone number or WhatsApp contact;
• Information submitted through the contact form;
• Accommodation preferences, such as interest in single or double rooms;
• Technical browsing data, such as IP address, browser type, device information and website usage data.

3. Purpose of Processing

Personal data is processed for the following purposes:

• To respond to requests submitted through the contact form;
• To provide information about rooms, availability, visits and accommodation options;
• To communicate with users via email, phone or WhatsApp;
• To manage pre-booking or information requests;
• To improve the website and ensure its technical security;
• To comply with legal obligations where applicable.

4. Legal Basis for Processing

The legal bases for processing personal data may include:

• The user’s request prior to entering into a possible accommodation agreement;
• The legitimate interest of the Data Controller in responding to enquiries and protecting the website;
• Compliance with legal obligations;
• User consent where required, for example for certain cookies or optional communications.

5. Contact Form

When users complete the contact form, the information provided is used only to handle the request and communicate with the user. Users should not submit unnecessary sensitive information through the form.

6. WhatsApp Communication

If users contact us through WhatsApp, their phone number, profile information and message content may be processed by WhatsApp according to its own terms and privacy policy. Users should use WhatsApp only if they agree with the processing carried out by that platform.

7. Google Maps

This website may include Google Maps to show the location of Tower Student House. When users interact with the map, Google may collect technical and location-related data according to its own privacy policy and settings.

8. Hosting and Technical Services

The website may be hosted and technically managed by external service providers. These providers may process technical data only to the extent necessary to operate, secure and maintain the website.

9. Cookies

This website may use technical cookies necessary for its operation. It may also use third-party services, such as embedded maps, which may place cookies or similar technologies on the user’s device.

Where legally required, non-essential cookies will be used only after the user has provided consent through the cookie banner or browser settings.

10. Newsletter

This website does not currently operate a newsletter service. If a newsletter is introduced in the future, users will be informed and consent will be requested where required.

11. Data Retention

Personal data is retained only for the time necessary to handle the user’s request and for any period required by applicable law. Contact requests are normally retained for a reasonable period necessary to manage the relationship and follow-up communications.

12. Data Sharing

Personal data may be shared with:

• Technical providers involved in website hosting and maintenance;
• Communication service providers, including email and messaging services;
• Professional advisors or authorities where required by law;
• Third-party platforms used voluntarily by the user, such as WhatsApp or Google Maps.

Personal data is not sold to third parties.

13. International Transfers

Some third-party services used by the website may process data outside the European Economic Area. In such cases, the transfer will take place according to the safeguards required by applicable data protection laws.

14. Security Measures

The Data Controller adopts reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no online transmission or storage system can be guaranteed to be completely secure.

15. User Rights

Under applicable data protection law, users may have the right to:

• Access their personal data;
• Request correction of inaccurate data;
• Request deletion of data where applicable;
• Request restriction of processing;
• Object to processing;
• Request data portability where applicable;
• Withdraw consent at any time, where processing is based on consent;
• Lodge a complaint with the competent Data Protection Authority.

16. How to Exercise Your Rights

Users may exercise their rights by contacting the Data Controller using the contact details provided below. The request should include enough information to identify the user and the nature of the request.

17. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in the website, services or legal requirements. The updated version will be published on this page.

18. Last Updated

Last updated: July 2026.