Privacy notice and personal data protection
This notice is provided pursuant to articles 13 and 14 of EU Regulation 679/2016 (the "Regulation") to the users (the "Users" or "User") of the website in desktop and mobile versions (the "Site") owned by Marco Cimarosti, Data Controller (the "Controller"). It describes how the Site is operated with reference to the processing of personal data and allows Users to know the purposes and methods of processing.
As specified in the General Terms, the Services offered by the Controller are intended for persons over 18 years of age. If the Controller becomes aware of processing data of minors under 18 without valid parental consent, it reserves the right to unilaterally interrupt the service and delete the data acquired.
Principles applicable to the processing of personal data
The Controller informs that the Regulation provides for the protection of natural persons with regard to the processing of personal data, and that such processing will be guided by the principles of fairness, lawfulness, transparency and protection of confidentiality and fundamental rights.
Types of Users
In relation to the use of the Site there is one type of User: Private Users. Private Users may anonymously access certain services (e.g. property search), while other services (e.g. automatic updates) require prior registration.
Purposes, legal basis and optional nature of provision
Personal data provided by Users through the use of the Site will be processed with their consent for the following purposes:
A) Provision of the service for Private Users
To provide services such as saving listings, saving searches and receiving automatic updates on new listings, the User must register on the Site. The data required for registration is limited to:
- First name
- Last name
- Email address
- Phone number
The User may, by accessing their personal section on the Site (the "User Profile"), provide additional personal data (e.g. date of birth, gender, residence) which will be collected by the Controller if voluntarily supplied.
B) Provision of Advertiser Contact and Search Forwarding services
To allow advertisers to provide the User with information on properties, the Advertiser Contact service allows the User to forward their personal data to real estate agencies, construction companies, other companies, professionals and private users who publish property listings.
To facilitate property searches, the Search Forwarding service allows the User's searches to be forwarded to relevant agencies and professionals operating in the area of interest.
The legal basis for processing under purposes A and B is article 6(a) of the Regulation (consent of the data subject). Provision of data is optional, but refusal will make it impossible for the Controller to fulfill the request or provide the relevant Service. Failure to provide registration data (A.I) will also make it impossible to provide the services under B.
Processing methods and retention
The Controller ensures that personal data is processed in full compliance with the Regulation through manual, IT or telematic systems. Processing may also be carried out through automated tools to store, manage and transmit the data.
The data collected and processed is protected with physical and logical methods that minimise risks of unauthorised access, disclosure, loss and destruction, pursuant to articles 25 and 32 of the Regulation.
Data processing will not last longer than necessary to fulfill the purposes for which the data was collected, such as storing search criteria, sending notifications, publishing listings and contacting professional operators.
Pursuant to article 7(3) of the Regulation, the data subject has the right to withdraw consent at any time. An anti-spam verification system is active on communications made through the contact forms made available to Users; data entered may be verified solely to detect illegal activities or content not compliant with the General Terms, but will not be processed or communicated for commercial or promotional purposes.
If the Controller does not receive a deletion request, personal data will be retained for a period not exceeding 10 (ten) years from the date of the User's last access to the Site.
Recipients of personal data
Personal data collected may be processed by entities or categories of entities acting as Data Processors pursuant to article 28 of the Regulation, or as authorised persons pursuant to article 29 of the Regulation.
For some Services, data may be communicated to companies that collaborate with or use the Controller's services (e.g. the individual property proponents; banks or credit intermediaries for mortgages and other financial services connected to property transactions), with the sole purpose of providing the Services requested by the User. In such cases the companies act as autonomous data controllers, and the Controller is not responsible for their processing.
Outside the cases mentioned above, personal data will not be communicated except to entities, bodies and authorities to which communication is mandatory by law or regulation.
Transfer of data to a third Country or international organisation
Personal data collected through the Site may be transferred outside Italy solely for the execution of the Services requested through the Site and in compliance with the specific provisions of the Regulation. Some personal data may be shared with recipients located outside the European Economic Area; the Controller ensures that such processing complies with the Regulation.
Collection of browsing data
The IT systems and procedures underlying the Site acquire, in their normal operation, certain personal data whose transmission is implicit in Internet protocols. Each time the User connects to the Site or requests content, access data is stored on the Controller's systems as tabular or linear data files. This category includes: IP addresses and domain names of the computers used; the request from the User's browser as URI addresses; the date and time of the request; the method used; the amount of data transmitted; the numerical code indicating the server response status; other parameters relating to the User's operating system and IT environment.
This data may be used by the Controller solely to obtain anonymous statistical information on the use of the Site, identify the most visited pages, provide more relevant content and verify correct operation. At the request of the Authorities, the data may be used to ascertain liability in the event of alleged IT crimes against the Site or its Users.
Data subject rights
Pursuant to articles 15 to 22 of the Regulation, the User has the right to:
- obtain confirmation of the existence of personal data concerning them, and information on the origin, purposes, methods, retention period, recipients and other elements of processing;
- file a complaint with a supervisory authority;
- obtain updating, rectification or, where appropriate, integration of the data;
- obtain restriction of processing;
- obtain data portability to another Controller;
- withdraw consent to processing;
- obtain confirmation that updates, rectifications and deletions have been notified to recipients of the data;
- object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them.
Data Controller and contacts
The Data Controller is Marco Cimarosti, in the person of his pro tempore legal representative. To exercise the rights above or to obtain the updated list of Data Processors, the User may contact the Controller at:
Marco Cimarosti
Corso Italia, 16 — 16035 Rapallo (GE), Italy
Email: info@maestrocasa.it
Changes
This Privacy Notice may be subject to changes. If substantial changes are made to the use of the User's data, the Controller will notify the User by publishing them prominently on the Site.