PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
Pursuant to Articles 12, 13 and 14 of Regulation (EU) 2016/679
Last updated: 16 July 2026
This Privacy Notice describes how Immobiliare-Italia.it collects, uses, stores and protects the personal data of users who browse the portal, property search services, submit enquiries concerning listings or contact the real estate agencies featured on the website.
This Privacy Notice is provided pursuant to Regulation (EU) 2016/679, hereinafter the "GDPR", and Italian Legislative Decree No. 196 of 30 June 2003, as amended by Legislative Decree No. 101/2018.
1. DATA CONTROLLER
The Data Controller for the processing of personal data carried out through the portal is:
Immobiliare-Italia.it di Spina Rosario
Via Palvotrisia, 82/A
19033 SP)
Italy
Italian Tax Code: SPNRSR70A04C351E
VAT number: 00587600453
Email:
[email protected](mailto:
[email protected])
The Data Controller may be contacted to request information concerning the processing of personal data or to exercise the rights provided for by the GDPR.
2. CHARACTERISTICS OF THE PORTAL
Immobiliare-Italia.it is a portal dedicated to the publication and consultation of real estate listings.
Listings, agency information and related content are entered, updated and transmitted by the real estate agencies and other professional operators featured on the portal, including through the GestionaleRe.it property management software.
Immobiliare-Italia.it provides the technical infrastructure required to:
* publish and browse real estate listings
* search for properties by location, type and characteristics
* view information about advertising agencies
* submit enquiries concerning properties
* forward property search, sale or valuation requests
* receive notifications about new properties matching the user's preferences, where this service has been activated by the user.
Immobiliare-Italia.it does not provide real estate brokerage services in relation to listings published by agencies and does not participate in negotiations that may take place between users, property owners, agencies or other professionals.
3. ROLE OF REAL ESTATE AGENCIES AND ADVERTISERS
When a user submits an enquiry concerning a listing, an agency or a specific property service, the data are disclosed to the agency or professional to whom the enquiry is addressed.
Immobiliare-Italia.it processes the data in order to receive, record and forward the enquiry to the selected recipient or to professionals relevant to the requested area and type of service.
After receiving the enquiry, the real estate agency or professional processes the data as an independent data controller for purposes including:
* responding to the user's enquiry
* proposing properties compatible with the stated requirements
* arranging viewings or appointments
* carrying out property valuations
* managing possible negotiations
* complying with professional, administrative and legal obligations
* establishing a possible contractual relationship with the data subject.
The recipient agency or professional is therefore responsible for its own Privacy Notice and for the subsequent methods used to process and retain the data.
The identity of the recipient agency is normally indicated on the property listing page, the agency profile page or the form used by the user.
4. PERSONAL DATA PROCESSED
Depending on the service used, Immobiliare-Italia.it may process the following categories of data.
4.1 Data provided directly by the user
The following data may be collected:
* first name and surname
* email address
* telephone number
* town or city, province, postal code and country
* content of the message
* property search preferences
* area or municipality of interest
* type of property sought
* price range
* property characteristics
* information concerning a property to be sold, rented or valued
* company name, where applicable
* data voluntarily included in free-text fields.
Users are requested not to include special categories of personal data, criminal offence data or information that is not necessary for the enquiry in free-text fields.
4.2 Browsing data
The IT systems and procedures used to operate the portal may automatically collect certain technical information, including:
* IP address
* date and time of the request
* page visited
* referring page address
* browser type
* operating system
* device used
* technical identifiers
* information concerning errors and website operation
* data relating to interactions with pages and forms.
These data are used to operate the website, ensure its security, identify anomalies and produce aggregated statistics.
4.3 Data concerning real estate agencies and professionals
The portal may publish and process professional and contact information supplied by participating agencies and operators, including:
* business or company name
* registered or business address
* VAT number and professional information
* names of agents or contact persons
* telephone numbers
* email addresses
* photographs, logos and professional information
* data contained in property listings.
The agency or professional providing such data warrants that it is authorised to and publish them on the portal.
4.4 Data contained in property listings
Listings may contain property information, photographs, floor plans, documents, descriptions, addresses or geographical details.
Where such content includes personal data relating to owners, occupants, employees, collaborators or other persons, the advertising agency is responsible for ensuring that such information has been lawfully collected, used and published.
5. PURPOSES AND LEGAL BASES OF PROCESSING
5.1 Browsing and operation of the portal
Technical data are processed to:
* make the website accessible
* display property listings and agency profiles
* carry out searches requested by the user
* ensure the stability, security and continuity of the service
* prevent unauthorised access, fraud, spam and unlawful activity
* manage technical errors and maintenance operations.
Legal basis: performance of the service requested by the user and the Data Controller's legitimate interest in maintaining the security and proper operation of the portal, pursuant to Article 6(1)(b) and (f) GDPR.
5.2 Enquiries concerning listings and agencies
Data entered in forms available on property listing pages or agency profile pages are processed to:
* receive the enquiry
* identify the intended recipient
* forward it to the relevant agency or advertiser
* allow the recipient to contact the user
* technically document that the enquiry was forwarded.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.
The forwarding of data to the agency does not constitute disclosure for third-party promotional purposes. It is necessary in order to respond to the specific enquiry submitted by the user.
5.3 "Find a Property" service
When the user completes a property search form, the data may be forwarded to real estate agencies operating in the the preferences provided.
Before submission, the form must clearly state that the request may be forwarded to more than one relevant real estate agency.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.
The data are disclosed only to a reasonable number of agencies selected according to the area, property type and nature of the request.
5.4 "Sell a Property" service or valuation request
The data provided by the user are used to forward the request to real estate agencies or professionals operating in the area in which the property is located.
The information may include contact details, property location, type, size, condition, characteristics and other details required for the valuation or sale.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, pursuant to Article 6(1)(b) GDPR.
5.5 Notifications concerning new listings
Where the user voluntarily activates a notification service, the data and search preferences are used to send communications concerning new compatible listings.
Legal basis: the data subject's consent, pursuant to Article 6(1)(a) GDPR.
Consent to the notification service must be optional and separate from the submission of a standard property enquiry.
The user may deactivate the service at any time by using the link included in the communications received or by writing to
[email protected](mailto:
[email protected]).
Deactivation does not affect the lawfulness of processing carried out before consent was withdrawn.
5.6 Marketing communications from Immobiliare-Italia.it
The user's email address or telephone number may be used to send commercial, promotional or informational communications from Immobiliare-Italia.it only where specific consent has been obtained, except in the circumstances otherwise permitted by applicable law.
Legal basis: the data subject's consent, pursuant to Article 6(1)(a) GDPR and Article 130 of Italian Legislative Decree No. 196/2003.
Consent to marketing:
* is optional
* must be separate from the property enquiry
* does not affect the user's ability to contact an agency
* may be withdrawn at any time.
Immobiliare-Italia.it does not disclose data to third parties for their own promotional purposes unless the user has provided specific and separate consent to such disclosure.
5.7 Assistance and communication management
Data are processed to respond to questions, reports, support requests, complaints or communications sent to the Data Controller.
Legal basis: performance of the data subject's request, compliance with contractual obligations or the Data Controller's legitimate interest in managing communications, pursuant to Article 6(1)(b), (c) and (f) GDPR.
5.8 Compliance with legal obligations
Data may be processed to comply with obligations imposed by laws, regulations, instructions from public authorities, court orders or lawful requests from competent bodies.
Legal basis: compliance with a legal obligation, pursuant to Article 6(1)(c) GDPR.
5.9 Protection of rights and prevention of ab
Data may be used to:
* prevent fraudulent or unlawful of the portal
* establish responsibility in the event of cyberattacks
* protect the rights of the Data Controller, users and agencies
* manage complaints or disputes
* establish, exercise or defend legal claims in court or out of court.
Legal basis: the Data Controller's legitimate interest in protecting its rights, pursuant to Article 6(1)(f) GDPR.
5.10 Statistics and service improvement
The Data Controller may process aggregated or, where possible, anonymised data to analyse the operation of the portal, searches carried out, page performance and overall of the services.
Where non-essential analytics tools involving cookies or identifiers are used, processing takes place only after the user's consent has been obtained.
Legal basis: legitimate interest for strictly necessary and aggregated statistics, or consent for non-essential analytics tools.
6. MANDATORY OR OPTIONAL PROVISION OF DATA
Data marked as mandatory in the forms are necessary to submit and manage the enquiry.
Failure to provide such data may prevent:
* the enquiry from being sent to the agency
* the user from receiving a response
* the activation of a notification
* the of a specific service.
Data requested for promotional purposes or additional consent-based services are optional.
Refusal to provide marketing consent does not prevent the user from browsing listings or submitting enquiries to agencies.
7. PROCESSING METHODS AND SECURITY MEASURES
Processing is carried out mainly by electronic and telematic means, in accordance with the principles of lawfulness, fairness, transparency, data minimisation and purpose limitation.
The Data Controller adopts technical and organisational measures appropriate to the risk in order to protect data against:
* unauthorised access
* loss or destruction
* alteration
* unauthorised disclosure
* incompatible with the stated purposes
* cyberattacks and abusive activity.
Access to data is permitted only to persons who need it in order to carry out their assigned activities and who are authorised or bound by appropriate contractual and confidentiality obligations.
No IT system can guarantee absolute security. The Data Controller therefore maintains monitoring, updating, and incident-management procedures proportionate to the characteristics of the service.
8. RECIPIENTS OF PERSONAL DATA
Data may be disclosed, to the extent necessary, to the following categories of recipients:
* real estate agencies and professionals receiving enquiries
* hosting, server, cloud infrastructure and network service providers
* IT, maintenance and security service providers
* email and transactional communication service providers
* antispam and form protection providers
* administrative, tax, legal or technical consultants
* employees, collaborators and persons authorised by the Data Controller
* public authorities, law enforcement bodies or judicial authorities where required by law.
Providers that process data on behalf of the Data Controller are appointed, where necessary, as data processors pursuant to Article 28 GDPR.
An updated list of data processors may be requested by writing to
[email protected](mailto:
[email protected]).
9. GESTIONALERE.IT AND THE PUBLICATION OF LISTINGS
Real estate agencies may GestionaleRe.it to enter, update and export the following information to Immobiliare-Italia.it:
* property listings
* photographs and listing content
* professional contact details
* agency information
* data concerning agents or contact persons
* other content intended for publication.
The technical management of data flows between GestionaleRe.it and Immobiliare-Italia.it takes place within the contractual relationships established with participating agencies.
The agencies remain responsible for:
* the accuracy and updating of published data
* the existence of an appropriate legal basis for the of the data
* obtaining authorisation to publish photographs, floor plans and other content
* managing enquiries received from users
* complying with privacy obligations after receiving a contact request.
Immobiliare-Italia.it may carry out technical checks or remove content that is manifestly unlawful, irrelevant, inaccurate or contrary to the portal's terms of use.
10. TRANSFERS OUTSIDE THE EUROPEAN ECONOMIC AREA
Where possible, the Data Controller gives preference to providers that process data within the European Economic Area.
However, some IT, security, communication, mapping, video or analytics service providers may process data in countries outside the European Economic Area.
In such cases, transfers will take place in compliance with Articles 44 and following of the GDPR, on the basis of one of the safeguards provided for by applicable law, including:
* an adequacy decision adopted by the European Commission
* the EU-US Data Privacy Framework, where applicable
* Standard Contractual Clauses approved by the European Commission
* other safeguards provided for by the GDPR.
Information concerning the safeguards applied may be requested from the Data Controller.
11. RETENTION PERIODS
Data are retained for no longer than is necessary for the purposes for which they were collected.
Enquiries concerning listings and agencies
Data retained by Immobiliare-Italia.it to document the receipt and forwarding of an enquiry are normally kept for a maximum period of 24 months, unless further retention is required to manage disputes or protect legal rights.
The recipient agency independently determines its own retention period and must communicate it in its Privacy Notice.
"Find a Property", "Sell a Property" and property valuation services
Data are normally retained by the portal for a maximum period of 24 months from the date of the request, unless the request is renewed, a contractual relationship is established or further retention is required for legal defence.
Notifications concerning listings
Data are retained until the service is deactivated, consent is withdrawn or a prolonged period of inactivity has elapsed, and in any event for no longer than 24 months from the last relevant interaction, unless the user provides renewed confirmation.
Marketing
Data processed for promotional purposes are retained until consent is withdrawn and are subject to periodic review. As a general rule, consent and related data are not used for more than 24 months from the last significant interaction, unless consent is renewed.
Support requests
Communications are retained for the time necessary to handle the request and, as a general rule, for no longer than 24 months after the request has been closed, unless a dispute arises.
Technical and security logs
Logs are retained for the period strictly necessary for security, error diagnosis and the prevention of abuse, normally for no longer than 12 months, unless a security event or legal obligation requires longer retention.
Administrative and contractual data
Data required to comply with administrative, tax, accounting or contractual obligations are retained for the periods required by law, normally for up to 10 years.
At the end of the applicable periods, the data are deleted, anonymised or otherwise made no longer attributable to the data subject, unless further retention is required to protect a legal right.
12. COOKIES AND TRACKING TOOLS
Immobiliare-Italia.it may use:
* technical cookies
* cookies required for security
* cookies used to store preferences and settings
* statistical cookies or tools
* third-party cookies
* tools connected to maps, videos or external content
* advertising or campaign measurement tools, where applicable.
Technical and strictly necessary cookies are used without consent, within the limits permitted by law.
Statistical cookies that cannot be treated as technical cookies, advertising cookies, profiling tools and third-party content involving tracking are activated only after the user has provided consent through the preference management system.
The user may:
* accept all cookies
* reject non-essential cookies
* select individual categories
* subsequently change their preferences
* withdraw consent.
Detailed information concerning the cookies actually used, the providers, their duration and the methods available to withdraw consent is provided in the portal's Cookie Policy.
13. EXTERNAL CONTENT
Some pages may include maps, videos, fonts, buttons or other content supplied by external platforms.
Where such services involve the transmission of data or the installation of non-essential cookies, they are loaded only after the user's consent has been obtained or through a solution that prevents their automatic activation.
Any processing carried out by the external provider remains subject to that provider's own Privacy Notice.
14. SPAM PROTECTION AND FORM SECURITY
The portal's forms may automated systems to distinguish legitimate requests from those submitted by automated programs or for abusive purposes.
Such systems may process technical data including IP address, browser information, submission date and time, referring page and the manner in which the user interacts with the form.
Legal basis: the Data Controller's legitimate interest in protecting the portal, users and agencies from spam, fraud and abuse.
Where the antispam system involves further tracking that is not strictly necessary, it is activated only after the user's consent has been obtained.
15. AUTOMATED DECISION-MAKING AND PROFILING
Immobiliare-Italia.it may data relating to property preferences to:
* select compatible listings
* order search results
* generate notifications concerning new properties
* identify agencies relevant to the requested area.
These activities are carried out solely to facilitate searches and the forwarding of enquiries.
The portal does not make decisions based solely on automated processing that produce legal effects concerning the user or similarly significantly affect the user within the meaning of Article 22 GDPR.
Any profiling for advertising or marketing purposes is carried out only with the user's prior consent, where applicable.
16. CHILDREN'S DATA
The services provided by Immobiliare-Italia.it are primarily intended for adults interested in buying, selling, renting or valuing property.
The portal is not intentionally intended to collect personal data concerning children.
Where the Data Controller becomes aware that a child's data have been collected without authorisation, it may take the necessary steps to delete the data or restrict their processing.
17. PERSONAL DATA CONCERNING THIRD PARTIES
A user who provides personal data concerning third parties, such as co-owners, family members or other persons interested in a property, must be authorised to do so and must provide those persons with the necessary information concerning the processing.
Users are requested to provide only the data strictly necessary to manage the enquiry.
18. RIGHTS OF THE DATA SUBJECT
The data subject may exercise the rights provided for by Articles 15 to 22 GDPR.
In particular, the data subject may request:
* confirmation as to whether or not personal data concerning them are being processed
* access to personal data
* correction of inaccurate data
* completion of incomplete data
* deletion of data where the applicable conditions are met
* restriction of processing
* data portability, where applicable
* objection to processing based on legitimate interest
* objection at any time to direct marketing
* withdrawal of consent
* information concerning the recipients to whom the data have been disclosed
* information concerning the safeguards used for international transfers
* not to be subject to a decision based solely on automated processing in the circumstances provided for by Article 22 GDPR.
The withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Where an enquiry has been forwarded to a real estate agency, the data subject must also contact that agency directly in relation to the subsequent processing carried out by it.
19. HOW TO EXERCISE RIGHTS
Requests relating to processing carried out by Immobiliare-Italia.it may be sent to:
[email protected](mailto:
[email protected])
The request must contain sufficient information to identify the data subject and the processing to which it relates.
The Data Controller may request further information or proof of identity where necessary to prevent unauthorised access to or deletion of data.
Requests are handled without undue delay and, as a general rule, within one month of receipt. This period may be extended in the circumstances provided for by the GDPR, taking into account the complexity and number of requests.
The exercise of rights is free of charge, except in the case of manifestly unfounded or excessive requests.
20. COMPLAINT TO THE SUPERVISORY AUTHORITY
A data subject who believes that their personal data are being processed in breach of applicable law may lodge a complaint with:
The Italian Data Protection Authority - Garante per la protezione dei dati personali
or with the competent supervisory authority in the Member State in which the data subject resides, works or in which the alleged infringement occurred.
The data subject's right to seek a judicial remedy remains unaffected.
21. LINKS TO EXTERNAL WEBSITES
The portal may contain links to real estate agency websites, social networks, video platforms, maps or other external services.
Immobiliare-Italia.it does not control the processing carried out independently by such parties.
Before using external services, users are invited to read the relevant Privacy Notices.
22. CHANGES TO THIS PRIVACY NOTICE
The Data Controller may update this Privacy Notice in order to reflect:
* changes in applicable law
* decisions or guidance issued by public authorities
* the introduction or removal of services
* technical or organisational changes to the portal
* changes to the service providers used.
The updated version will be published on this page together with the date of the latest revision.
Where changes significantly affect processing based on consent, the Data Controller will request renewed consent where required.
23. LEGAL REFERENCES
This Privacy Notice has been prepared primarily on the basis of:
* Regulation (EU) 2016/679
* Italian Legislative Decree No. 196 of 30 June 2003
* Italian Legislative Decree No. 101 of 10 August 2018
* Article 130 of Italian Legislative Decree No. 196/2003
* decisions and guidelines issued by the Italian Data Protection Authority
* applicable European legislation concerning cookies, electronic communications and international data transfers.