PRIVACY POLICY

ABITARE AGENCY S.R.L.
Legal Representative – Visponetti Mirco
Via Voghera 7, 20144 Milan (MI), Italy
VAT No. 10417320966

Information Notice on the Protection of Personal Data pursuant to Regulation (EU) 2016/679 (“GDPR”)

Regulation (EU) 2016/679 (“GDPR”) establishes rules to protect natural persons and other subjects with respect to the processing of personal data. Pursuant to this regulation, the processing of your personal data will be carried out in compliance with principles of fairness, lawfulness, transparency, and the protection of your privacy and your rights.
Abitare Agency S.r.l., with registered office in Via Voghera 7 – 20144 Milan (MI) (hereinafter, the “Company”), in its capacity as Data Controller, provides the following information pursuant to Article 13 of the GDPR:


Data Controller

The Data Controller is Abitare Agency S.r.l.
Email: info@abitareagency.it
Registered office: Via Voghera 7 – 20144 Milan (MI), VAT / Tax Code 10417320966.

The list of external Data Processors is available at the Company’s offices and may be requested by sending an email to info@abitareagency.it.


Purpose and Method of Data Processing

Your personal data is collected directly from you, both during registration on the website https://abitareagency.it/ and at the time of contract execution.
The data will be processed exclusively for purposes directly connected to and necessary for fulfilling obligations relating to the contractual relationship with the Company, specifically:

  • Inserting personal data into the Company’s internal databases;

  • Accounting and invoicing activities;

  • Management of payments and collections;

  • Fulfillment of civil and tax law obligations, as well as regulatory and EU requirements;

  • Sending commercial communications, only if you have provided your consent.

Data will be processed using both paper and electronic systems, by the Data Controller, Data Processors, and authorized personnel, adopting all necessary security measures to ensure confidentiality and integrity.


Legal Basis for Processing

Depending on the circumstances, the legal basis for processing may be:

  • The performance of a contract to which you are a party;

  • Compliance with legal obligations to which the Company is subject;

  • Your consent, in the case of commercial communications.

Providing your personal data is optional; however, failure to provide such data may make it impossible to establish the contractual relationship or fulfill legal or contractual obligations.


Data Communication and Transfers Outside the European Economic Area

Your personal data may be communicated, strictly within the scope of the purposes above, to:

  • Individuals or legal entities (legal, administrative, accounting, tax consultants, auditing firms, couriers, data processing centers, etc.) that provide services to the Company;

  • Banking institutions for managing payments and collections;

  • Factoring or debt recovery companies;

  • Employees and external collaborators operating under specific authorization;

  • Other real estate brokerage companies involved in the property sale or lease process, subject to your prior consent.

Any communication will be limited to data necessary for the stated purposes.
Your data will be stored in Italy. The Company does not transfer data outside the European Union.


Data Retention Period

Your personal data will be retained for the duration of the contractual relationship.
After the relationship ends, the Company will retain the data necessary to comply with contractual and legal obligations (including tax obligations).
Thereafter, the data will be retained no longer than the statutory limitation period necessary for the establishment, exercise, or defense of legal claims.


Rights of the Data Subject

At any time, you may exercise your rights under Articles 15–22 of the GDPR, including:

  • Right of access to your personal data;

  • Right to rectification;

  • Right to erasure (“right to be forgotten”);

  • Right to object to processing;

  • Right to restrict processing;

  • Right to data portability;

  • Right not to be subject to automated decision-making or profiling.

You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali) – Piazza Venezia 11, 00187 Rome (RM).

Requests to exercise these rights may be submitted to the Data Controller via registered letter, fax, or email using the contact details provided above.