Privacy Policy

Real estate FortedeiMarmiVillas Information regarding the handling of personal data

Information regarding the handling of personal data EU Regulation 2016/679

Dear sir/madam,
We hereby inform you that the EU Regulation 2016/679 ("Informative report on the Processing of personal data") covers a person's rights regarding the handling of personal details.
Your details will be treated in accordance with the above regulation, in a correct and open manner, which protects your privacy and rights.
Therefore, in compliance with the EU Regulation 2016/679, we hereby provide you with the following information:

1) Data source.

The necessary data for the performance of the contractual relationship between the Parties, as well as the data otherwise acquired as part of this activity, are collected by the Agency directly from the Data Subject and / or through third parties, as well as obtained by consulting some external databases public and private..

 

2) Availability of the Informative.

The Agency provides the possibility to consult this information: a) every time it collects the personal data of the Customers; b) every time an explicit request is made to the Controller; c) through the web consultation by accessing the home page of the site https://www.fortedeimarmivillas.com.

 

3) Purposes of data processing.

The Agency for its own institutional purposes, connected or instrumental to the activity, processes your data for the following purposes:

a) purposes connected to the obligations established by laws, regulations and community legislation as well as by provisions issued by Authorities legitimated by the law or by supervisory and/or control organs;

b) contractual purposes, connected and instrumental to the establishment and management of relationships with customers, such as for example the acquisition of preliminary information to the possible conclusion of a contract;

c) promotion of services of the Agency through the sending of advertising material, and any other form of electronic communication (sending of e-mails, text messages, mms, publication on social networks);

d) communication and/or transfer of data to third parties for the promotion and/or sale of products and services, using traditional and / or automated methods.

With reference to the purposes referred to in points c), d), we inform you that, at any time, you will be free to revoke the consent expressed according to the methods specified in this statement.

 

4) Nature of the provision of data.

You have the right to know that the provision of data may be compulsory or optional, as well as having consequences in the event of a refusal.

In this regard, it is specified that:

a) the conferment of your consent for the purposes referred to in points a) and b) of point 3 is mandatory in so far as provided by law or to follow up obligations of a contractual nature (as indicated in Article 6, paragraph 1, letter b) of the Rules). The refusal of your consent for the purposes indicated in letter b) of point 3) will not, therefore, allow the Agency to carry out the task conferred by you or to reach the conclusion of the contract of which you are a part;

b) the refusal to process the Data for the purposes referred to in subparagraphs c), d) of point 3 is, on the other hand, optional, will not entail any detrimental consequence and may be revoked by you at any time, limited to the purposes related to the sending of advertising material, carrying out market research or commercial communication, through telephone contacts or any other form of electronic communication (sending e-mails, text messages, mms, whatsapp, publication on websites, social networks, etc.), performed directly by the Agency.

 

5) Particular data.

Article. 9 of the Regulations defines particular data, the ones suitable to reveal racial and ethnic origin, political opinions, religious or philosophical beliefs or union membership, as well as genetic and biometric data, data related to health or sexual life or to the sexual orientation of the person. It is possible that the Agency will be in possession of particular data in relation to the specific operations requested by the interested party. In this case, the interested party has the right to express a specific consent to the processing of their sensitive data and the Agency may use them exclusively to the extent necessary to perform the services and operations required.

 

6) Data Retention.

The Data will be kept for the time necessary to manage the contractual relationship and fulfill legal obligations, with particular reference also to the anti-money laundering legislation. The Data are always treated in full compliance with the principle of proportionality of the processing (Article 5, paragraph 1, letter c) of the Rules), according to which all Personal Data and the various modalities of their processing must be relevant and not exceeding the aims pursued, so as to ensure adequate security and confidentiality, also to prevent unauthorized access or use of personal data and equipment used for processing, as well as lawful and correct processing.

 

7) Data retention times.

By virtue of the provisions of art. 13, paragraph 2, lett. a) of the Regulations, indications are given below regarding the retention times of the Data according to the different purposes of the processing:

• with reference to letters a) and b) of point 3, the Data are kept for the period necessary to manage the contract and comply with legal obligations;

• with reference to letters c), d), of point 3, storage times are set in 10 years.

 

8) Methods of data processing.

In relation to the purposes indicated in point 3, Personal Data may also be processed by a "Manager", ie the natural person or company, even outside the Agency, which may be entrusted with specific and defined tasks of management and control of the processing of the data, and by one or more "Distributor (s)", who will process the data or use of the data on the basis of the instructions received from the Data Controller or the Data Processor (subjects that, if not expressly indicated in this statement, are not considered still designated, and not necessarily to be designated if the processing is occasional, and the data will be provided in the event of their designation).

Always in relation to the aforementioned purposes, the Data may be processed through manual, computerized and / or otherwise automated tools according to the logic strictly connected to the purposes of the processing and, in any case, in order to guarantee its security and confidentiality even in case of treatment through instruments of distance communication.

 

9) Transfer of data abroad.

The Data could be transferred to countries of the European Union and to third countries (that is not members of the European Union) exclusively for the purposes referred to in points a) and b) of point 3. In this case, the intention to the transfer of personal data must be communicated beforehand and authorized by you only if a level of data protection adequate to the European one is guaranteed.

 

10 Data Communication.

The Data, by virtue of the relationship established and in order to facilitate and allow the conclusion of the deal, may be communicated to: i) external collaborators; ii) other business agents in mediation (including companies) identified by the Controller, by virtue of the relationship established and in order to facilitate and allow the conclusion of the deal, may be communicated to: i) external collaborators; ii) other business agents in mediation (including companies) identified by the Controller in order to collaborate for the accomplishment of the assignment entrusted by the interested party; iii) banks and other subjects operating in the banking sector; iv) counterparties and their potential technicians and consultants; v) notaries for the purpose of preparing notarial deeds and / or related activities pertaining to the assignment conferred to the Controller; vi) companies and / or professionals who perform services for the completion of technical / land / building / town planning practices; vii) insurance for the conclusion of policies relating to the assignment conferred to the Controller; viii) websites for the purpose of real estate advertising; ix) Boards of arbitrators and, in general, all those public and private subjects to whom communication is necessary for the correct fulfillment of the purposes indicated in point 3); x) Supervisory / Control organs and other Authorities, for purposes connected to the obligations established by law (anti-usury law, anti-money laundering legislation) and / or by regulations, as well as by instructions issued by the same Authorities.

All subjects, belonging to the categories to which the Data may be communicated, will use the Data as "controllers" in accordance with the law or specific consent, independently, being unrelated to the original processing carried out at the Agency, or of "external managers". To know at any time the subjects, to which your data will be communicated, it is sufficient that you request the updated list by writing to the Data Controller at the headquarters of the Agency.

In the end, your data will be known by all employees and collaborators of the Agency, designated managers and / or in charge of processing, in relation to the performance of the duties and tasks assigned to each.

Data processed by the Agency will not be disseminated.

 

11) Rights of the interested party.

Within the limits and under the conditions set out in articles 15 - 23 of the Regulations, the Agency guarantees and recognizes the exercise of the following rights:

• the right to access personal data in their paper and / or electronic archives;

• the right to request correction, updating and cancellation, if incomplete or erroneous, and to oppose their processing for legitimate and specific reasons;

• the right to obtain the correction of inaccurate personal data without unjustified delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration;

• the right to obtain the cancellation of personal data concerning him without undue delay if one of the reasons set out in art. 17, paragraph 1 of the Rules;

• the right to obtain the limitation of processing when incurs one of the hypotheses referred to in art. 18, paragraph 1 of the Regulations;

• the right to portability of data within the limits and in the ways provided for by art. 20 of the Regulations.

You also have at any time the right to withdraw your consent to the processing of your data without prejudice in any way to the lawfulness of the processing based on consent given before the revocation, as well as to object to processing for marketing purposes at any time ( right of opposition).

You have the right to receive information relating to the action taken concerning one of the aforementioned requests or the effects arising from the exercise of one of the aforementioned rights, without unjustified delay and, in any case, no later than one month after receipt of the request; extendable if necessary for two months; you also have the right to lodge a complaint with a supervisory authority and to bring a judicial appeal.

Without prejudice to the case in which the processing of the Data violates the general principles laid down by the Regulations, the exercise of these rights must be relevant and justified and may not imply the revocation of the consent given or the request for cancellation of the Data provided by conclusion and execution of the contract referred to in point 3) letters a) and b), in so far as and as long as the data are necessary for this purpose.

In exercising your rights, you may grant, in writing, a proxy or power of attorney to individuals, associations or organizations; may also be assisted by a trusted person. In order to guarantee the effective exercise of your rights, the Agency will adopt appropriate measures aimed at facilitating access to the Data, simplifying the procedures and reducing the time required to respond to your request.

Finally, it should be noted that you can lodge a complaint with the supervisory authority or with the Personal Data Protection Authority through the following means:

a) registered A / R addressed to the Guarantor for the protection of personal data, Piazza di Monte Citorio n. 121 00186 Rome;

b) e-mail to the address: garante@gpdp.it, or protocollo@pec.gpdp.it;

c) fax number: 06 / 69677.3785.

All related information on complaints proposed by the Interested party is available on the website of the Guarantor at www.garanteprivacy.it


We also add the new measures in force for the COVID - 19 emergency:


Dear Customer,
We wish to inform you that the EU Regulation 2016/679 ("Information on the processing of personal data") provides for the protection of people and other subjects regarding the processing of personal data.
According to the legislation indicated, this treatment will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Pursuant to EU Regulation 2016/679 and the prevention of contagion from Covid-19, and therefore related to this period of health emergency, so that you are made aware of the treatment, and can give, where necessary, a specific, unequivocal consent, informed, free and aware of the Processing itself which may also take place with IT and / or telematic tools, therefore, we provide you with the following information:

1) Data source.
The data necessary for the performance of the contractual relationship between the Parties, in particular for carrying out the mediation contract, are collected by the Agency directly from you, in the context of the obligation provided for by the current provisions concerning the measures for containment and management of the epidemiological emergency contained in particular in the shared protocol regulating measures to combat and contain the spread of the Covid-19 virus in the workplace signed between the government and the social partners on March 14, 2020.

2) Availability of the information.
The Agency provides you with the opportunity to consult this information whenever you deem it appropriate and / or make an explicit request to the Data Controller.

3) Purpose of data processing.
For its institutional purposes, connected or instrumental to the activity, the Agency processes your data for the purpose of preventing contagion from COVID - 19 in order to allow its access to the owner's premises and ensure the possibility of carrying out the service. contractual in compliance with applicable governmental and legislative provisions.

4) Nature of the provision of data.
You have the right to know that the provision of data can be mandatory or optional, as well as have consequences in the event of a refusal. In this regard, we specify that the granting of your consent for the purposes referred to in point 3, including the possible detection of body temperature at the entrance of the owner's premises, is mandatory as it is provided for by the regulations for the implementation of the protocols of anti-contagion security pursuant to art. art. 1, no. 7, lett. d) of the Prime Ministerial Decree of 11 March 2020 and subsequent provisions. The refusal of your consent for these purposes will therefore not allow the Owner to allow you access to the premises of the same. The Agency specifies that your Data will be processed in compliance with the "minimization" principle (art. 5, par.1, letter c of the EU Regulation), in compliance with the indications provided by the Office of the Privacy Guarantor with the FAQ published on 4.5.2020.

5) Particular data.
Article. 9 of the Regulation defines particular, among others, the data relating to health. Since the Data collected for the purposes referred to in point 3) falls into this category, the Agency will be able to use it only to the extent necessary to be able to perform the operations specified above.

6) Data retention.
The Data will be kept for the time necessary to manage the health emergency period, i.e. until the end of this period. The data are always treated in full compliance with the principle of proportionality of the treatment (art.5, paragraph 1, letter c) of the EU Regulation), according to which all personal data and the various methods of their treatment must be relevant and not exceeding the purposes pursued, in order to guarantee adequate security and confidentiality, also to prevent unauthorized access or use of personal data and equipment used for processing, as well as lawful and correct treatment.

7) Data retention times.
By virtue of the provisions of art. 13, paragraph 2, lett. a) of the Regulation, and in the face of the foregoing, the Data will be stored until the end of the state of emergency, after which it will automatically be destroyed.

 

8) Data processing methods.
In relation to the purposes indicated in point 3, the Personal Data may also be processed by a "Manager", ie the natural person or the company, also external to the Agency, to whom specific and defined management and control tasks of the treatment may be entrusted of the data, and by one or more "Appointee / s", who will process or materially use the Data on the basis of the instructions received from the Data Controller or from the Manager (subjects who, if not expressly indicated in this statement, are to be considered not still designated, and not necessarily to be designated if the treatment is occasional, and whose data will be provided to you in case of their designation). Always in relation to the aforementioned purposes, the Data may be processed through manual, IT and / or otherwise automated tools according to logic strictly connected to the purposes of the processing and, in any case, in order to guarantee its security and confidentiality even in the case of treatment through tools of remote communication.

 

9) Transfer of data abroad.
The data could be transferred to countries of the European Union and to third countries (ie not belonging to the European Union) exclusively for the purposes referred to in point 3. In this case, the intention to transfer personal data must previously be communicated and authorized by you only if a level of data protection adequate to the European one is guaranteed.

 

10) Data communication.
The Data may be communicated, upon express request, to the Health Authority for the reconstruction of the supply chain of any "close contacts of a worker who has tested positive for COVID-19" within the limits and under the conditions laid down by current provisions. All subjects, belonging to the categories to which the Data may be communicated, will use the Data as "owners" pursuant to the law or specific consent, in full autonomy, being unrelated to the original treatment carried out at the Agency, or of "external managers". To know the subjects to whom your data will be communicated at any time, it is sufficient that you request the updated list by writing to the Data Controller at the headquarters of the Agency. Finally, your data will be known by all the employees and collaborators of the Agency designated responsible and / or in charge of the treatment, in relation to the performance of the tasks and duties assigned to each. The data processed by the Agency will not be disseminated.

 

11) Rights of the interested party.
Within the limits and under the conditions set out in articles 15 - 23 of the Regulation, the Agency guarantees and recognizes you the exercise of the following rights:
• the right to access personal data contained in its paper and / or electronic archives;
• the right to request their rectification, updating and cancellation if not in conflict with the law, if incomplete or incorrect, as well as to oppose their treatment for legitimate and specific reasons;
• the right to obtain the correction of inaccurate personal data without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, also by providing an additional declaration;
• the right to obtain the cancellation of personal data concerning him without undue delay if one of the reasons set out in art. 17, paragraph 1 of the Regulations;
• the right to obtain the limitation of treatment when one of the hypotheses referred to in art. 18, paragraph 1 of the Regulations;
• the right to data portability within the limits and in the ways provided for by art. 20 of the Regulation.
You also have the right at any time to withdraw consent to the processing of your data without affecting in any way the lawfulness of the treatment based on the consent given before the revocation, as well as to oppose the treatment for different purposes at any time from that indicated in point 3 (right of opposition). You have the right to receive information relating to the action taken regarding one of the aforementioned requests or the effects arising from the exercise of one of the aforementioned rights, without undue delay and, in any case, at the latest within one month of receiving the request itself, extendable, if necessary, for two months; it also has the right to lodge a complaint with a supervisory authority and to bring a judicial appeal. Except for the case in which the processing of the Data violates the general principles dictated by the Regulation, the exercise of these rights must be relevant and motivated and cannot involve the revocation of the consent given or the request for cancellation of the Data provided by you for the purposes referred to in point 3 insofar as and as long as the Data are necessary for the performance of the work or collaboration service. The rights in question may be exercised, also through a designated person, by submitting a request to the Data Controller at the following addresses: Via Versilia 133, Cap 55042 City Forte dei Marmi, tel. 0584 89832 phone 349 55 99 157, e-mail address: info@fortedeimarmivillas.com, pec address: fortedeimarmivillas@pec.it. In exercising your rights, you may grant, in writing, a proxy or power of attorney to natural persons, bodies, associations or bodies; he may also be assisted by a trusted person. To ensure the effective exercise of your rights, the Agency will take appropriate measures to facilitate access to data, simplify methods and reduce the time required to respond to your request. Finally, it should be noted that you can lodge a complaint with the supervisory authority or the Guarantor for the Protection of Personal Data through the following means: a) registered letter with return receipt addressed to the Guarantor for the protection of personal data, Piazza di Monte Citorio n. 121 00186 Rome; b) e-mail to the address: garante@gpdp.it, or protocol@pec.gpdp.it; c) fax to the number: 06 / 69677.3785. All the related information on the complaints you can propose is available on the Guarantor's website at www.garanteprivacy.it

You may also be interested in

Tuscany Villas luxury villas for rent and sale in Tuscany

Tuscany Villas offers luxury real estate to rent and for sale in Tuscany
more details