Privacy Policy

Data Controller

The Data Controller, pursuant to applicable laws, is the website administrator, TRULLI & DIMORE IMMOBILIARE SRLS, who can be contacted through the Contact section of the website.

Legal Basis for Processing

This website processes personal data mainly on the basis of users’ consent. Consent is given through the banner displayed at the bottom of the page, or by using and browsing the website, which constitutes conclusive behaviour.

By using or browsing the website, visitors and users accept this Privacy Policy and consent to the processing of their personal data according to the methods and purposes described below, including any disclosure to third parties where necessary for the provision of a service. Additional consent for specific purposes may be collected through contact forms or service request forms.

Providing data and giving consent to its collection and processing is optional. Users may refuse consent and may withdraw consent already given at any time, through the banner at the bottom of the page, the browser cookie settings, or the Contact section. However, refusing consent may make it impossible to provide certain services and may affect the browsing experience.

Data processed for website security, abuse and spam prevention, as well as aggregated traffic analysis data, are processed on the basis of the legitimate interest of the Data Controller in protecting the website and its users. In these cases, users always have the right to object to the processing of their data, as described in the “User Rights” section.

Purposes of Processing

The data collected by the website are processed for purposes connected with, instrumental to and necessary for the provision of the service, as well as for the following purposes.

Statistics and Analytics

Data and information are collected exclusively in aggregated and anonymous form in order to verify the proper functioning of the website. None of this information is linked to the individual user and it does not allow the user to be identified in any way. Consent is not required.

Security

Data and information are collected to protect the security of the website, including anti-spam filters, firewalls and virus detection systems, and to protect users by preventing or detecting fraud or abuse against the website.

These data are recorded automatically and may include personal data, such as IP addresses, which may be used, in accordance with applicable laws, to block attempts to damage the website, harm other users, or carry out unlawful or harmful activities.

Such data are never used to identify or profile users and are periodically deleted. Consent is not required.

Ancillary Activities

Data may be disclosed to third parties that perform functions necessary or instrumental to the operation of the service, such as comment boxes, or that carry out technical, logistical or other activities on our behalf.

Service providers have access only to the personal data necessary to perform their tasks. They undertake not to use the data for other purposes and are required to process personal data in accordance with applicable legislation.

Data Collected

This website collects user data in two ways: automatically and voluntarily.

Data Collected Automatically

While users browse the website, the following information may be collected and stored in the server log files of the website hosting provider:

IP address; browser type; parameters of the device used to connect to the website; name of the Internet Service Provider (ISP); date and time of the visit; referring and exit pages; and, where applicable, the number of clicks.

These data are used for statistical and analytical purposes exclusively in aggregated form. The IP address is used solely for security purposes and is not cross-referenced with any other data.

Data Provided Voluntarily

The website may collect additional data when users voluntarily use services such as comments, communication tools, contact forms or comment boxes. These data are used exclusively to provide the requested service.

The data collected may include name and email address.

Place of Processing

Data are processed at the Data Controller’s registered office and at the data centre of the web hosting provider Aruba. Aruba acts as Data Processor, processing data on behalf of the Data Controller. Aruba is located within the European Economic Area and operates in compliance with European regulations.

Data Retention Period

The data collected by the website during its operation are retained only for the time strictly necessary to carry out the activities described. Once this period has expired, the data will be deleted or anonymised, unless further retention is required for other lawful purposes.

Data such as IP addresses used for website security purposes are retained for 30 days. Analytics data are retained in aggregated form for 24 months.

Transfer of Data to Third Parties

The data collected by the website are generally not disclosed to third parties, except in specific cases: when requested by judicial authorities and only in the cases provided for by law; when necessary to provide a specific service requested by the user; or for security checks and website optimisation activities.

Transfer of Data Outside the European Union

This website may share some collected data with services located outside the European Union, in particular with Google, Facebook and Microsoft (LinkedIn), through social plugins and Google Analytics.

Such transfers are authorised on the basis of specific decisions by the European Union and the Italian Data Protection Authority. The companies mentioned above guarantee compliance with the applicable data protection requirements.

Security Measures

We process visitor and user data lawfully and fairly, adopting appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data.

We are committed to protecting the security of personal data during transmission by using Secure Sockets Layer (SSL) software, which encrypts information in transit.

Processing is carried out using IT and telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, certain categories of persons involved in the organisation of the website, as well as external parties such as technical service providers and hosting providers, may have access to the data where necessary.

Cookies

This website uses cookies, which are text files stored on the user’s device or which allow access to information stored on the user’s device. Cookies make it possible to store information about visitor preferences, verify the correct functioning of the website, improve its features, customise page content according to the browser used, simplify browsing procedures such as login or language settings, and analyse the use of the website by visitors.

Technical Cookies

Technical cookies are used solely to transmit an electronic communication, to ensure the correct display of the website and to allow navigation within it. They also make it possible to distinguish between connected users in order to provide a requested service to the correct user, for example login functions, and to ensure website security.

Some technical cookies are deleted when the browser is closed, while others have a longer duration, such as the cookie used to store the user’s consent to the use of cookies, which lasts for one year. Consent is not required for these cookies.

Analytics Cookies

Analytics cookies are used directly by the website operator to collect information, in aggregated form, on the number of users and how they visit the website. These cookies are treated as technical cookies when the service is anonymised.

Profiling and Marketing Cookies

Profiling and marketing cookies are used exclusively by third parties other than the owner of this website to collect information on user behaviour while browsing, as well as interests and consumer habits, including for the purpose of providing personalised advertising.

By clicking “OK” on the banner displayed on the first visit to the website, or by continuing to browse the website, the visitor expressly consents to the use of cookies and similar technologies, including the storage of such cookies on their device for the purposes described above.

Disabling Cookies

Users may refuse the use of cookies and may withdraw consent already given at any time. Since cookies are linked to the browser used, they can be disabled directly from the browser, thereby refusing or withdrawing consent to the use of cookies.

Disabling cookies may prevent the correct use of certain website functions. In particular, services provided by third parties may not be accessible, and the following may not be displayed: YouTube videos or other video sharing services, social network buttons, and Google Maps.

Instructions for disabling cookies are available on the support pages of the main browsers: Mozilla Firefox, Microsoft Internet Explorer, Microsoft Edge, Google Chrome, Opera and Apple Safari.

Third-Party Cookies

This website also acts as an intermediary for third-party cookies, such as social network buttons, which are used to provide additional services and features to visitors, simplify use of the website, or provide personalised advertising.

This website has no control over cookies that are entirely managed by third parties and has no access to the information collected through such cookies. Information regarding the use, purposes and disabling of these cookies is provided directly by the relevant third parties.

Please note that user tracking generally does not involve identification of the user, unless the user is already registered with the service and logged in. In such cases, it is understood that the user has already given consent directly to the third party when registering for the relevant service.

Google Inc.

For information on the use and processing of data by Google, users are invited to consult Google’s Privacy Policy and the information on how Google uses data when users access partner websites or applications.

Google Analytics

Google Analytics is used to analyse how users interact with the website, compile reports on website activity and user behaviour, verify how often users visit the website, how the website is found, and which pages are most frequently visited.

The information collected is combined with information collected from other websites in order to create a comparative overview of website use compared with other websites in the same category.

The data collected may include browser identifiers, date and time of interaction with the website, referring page and IP address. The place of data processing is the European Union, as the service is anonymised.

The data collected do not allow users to be personally identified and are not cross-referenced with other information relating to the same individuals. They are processed in aggregated and anonymised form. Under a specific Data Processing Agreement, Google Inc., as Data Processor, is prohibited from combining such data with data obtained from other services.

Users may selectively disable Google Analytics data collection by installing the opt-out browser add-on provided by Google.

YouTube

YouTube is a video sharing platform owned by Google. Cookies are set when accessing pages containing embedded videos and when playing videos. These cookies do not allow the user to be identified unless the user is already logged into their Google account.

For the videos on this website, the “enhanced privacy mode” option has been enabled, so that YouTube does not store information about visitors unless they voluntarily play the video.

The data collected may include the number and behaviour of service users, IP address, information linking visits to the website with the Google account of users who are already logged in, and video display preferences. The place of data processing is the United States.

Social Network Plugins

This website also includes plugins and/or buttons that allow users to easily share content on their favourite social networks.

When users visit a page of this website that contains a plugin, the browser connects directly to the servers of the social network from which the plugin is loaded. That server may track the user’s visit to this website and, where applicable, associate it with the user’s social network account, particularly if the user is logged in at the time of the visit or has recently browsed websites containing social plugins.

If users do not want the social network to record data relating to their visit to this website, they should log out of their social network account and, where appropriate, delete the cookies installed by the social network in their browser.

This website uses plugins with advanced privacy protection features, which do not send cookies or access cookies already present in the user’s browser when the page is opened, but only after the user clicks on the plugin.

The collection and use of information by these third parties are governed by their respective privacy policies, which users are invited to consult.

The social plugins used may include Facebook, Twitter, LinkedIn and Google+.

User Rights

Pursuant to Regulation (EU) 2016/679 (GDPR), users may exercise the following rights, within the limits and according to the procedures provided by applicable law:

The right to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them for the purposes of sending advertising material, direct sales, market research or commercial communications.

The right to request confirmation of the existence of personal data concerning them, also known as the right of access.

The right to know the origin of the data, receive it in an intelligible form, and obtain information regarding the logic, methods and purposes of processing.

The right to request the update, rectification, integration, erasure, anonymisation or blocking of data processed unlawfully, including data that are no longer necessary for the purposes for which they were collected.

Where processing is based on consent, the right to receive the data provided to the Data Controller in a structured, commonly used and machine-readable format.

The right to lodge a complaint with the supervisory authority, namely the Italian Data Protection Authority.

Users may also exercise all other rights granted to them by applicable legislation.

Requests must be addressed to the Data Controller.

Updates

This Privacy Policy was last updated on 29 November 2018.