Dear Sir or Madam
Subject: Information pursuant to Article 13 of Legislative Decree no. 196 of 30 June 2003 regarding the protection of personal data and to Article 13 of EU regulation 679/2016 General Data Protection Regulation (GDPR)
Pursuant to and for the effects of the legislation cited in the subject, our Estate Agency would like to inform you in advance, though this notification, on the use of your personal data and your rights by notifying you of the following:
The data controller is Marcolongo Genny, “Agency Marine Land s.a.s. di Marcolongo Genny & C.”, with registered office in Caorle, street Firenze, 32. The updated list of those responsible for data processing with their related areas of competence is available upon request in the office.
For the purposes of the carrying out property brokering activities and to satisfy customer requests for services, we use certain data relating to the party in question. This can be identifying data, contact information (address, landline, mobile number, fax number, email address), data relating to property, client’s financial data, land registry documents and property deeds and data relating to the composition of their household.
This data will be provided by the party in question and collected by our staff or associates, including by computer or electronically, for the purpose of being able carry out property brokering activities, to implement a contractually agreed service or operation and to monitor the progress of contractual relationships and their incumbent risks.
Please note that the provision of this data is obligatory in the sense that we will not otherwise be able to perform, either wholly or in part, the above cited mandate and that your data may also be collected by other entities. Therefore, some information may need to be communicated by you or third parties by legal requirement (for example, pursuant to anti-money laundering legislation).
Your identifying data will also be processed to fulfil obligations under applicable state laws, EU regulations or standards, or by provisions prescribed by authorities or by those permitted by law and by controlling or supervisory bodies. This processing does not require the consent of the person in question.
Information relating to your property, including images of it, will also be subject to processing for commercial and promotional purposes aimed at the proper execution of the mandate given and can therefore be subject to distribution through their publication on websites, social networks and/or the controller’s printed publications, following your express consent.
Your email address may be used by the controller to send you marketing information regarding similar products or services to those provided pursuant to and for the effects of paragraph 4 of Article 130 of Legislative Decree 196/2003. You can oppose the processing of your data in this way at any time. Your objection will have no effect on the performance of the primary purpose of carrying out property brokering activity.
Your data will be made available to our internal administrative staff and to our external associates, the list of which is available from our registered office, and will also be communicated to our service providers, computer service companies, outsourcing companies, consultants and freelancers, insurance companies, credit recovery companies, fraud monitoring companies, authorities and/or supporting agencies, companies or bodies appointed by us for specific processing purposes, the list of whom is available to clients from our registered office.
Additionally, your data may be communicated to technicians, for all property inspections of interest to you to be carried out, at the land registry and/or other institutions, bodies or registries.
Certain Personal Data will be transferred to recipients who may be situated outside of the European Economic Area. The data controller ensures that the electronic and paper processing of your Personal Data by recipients shall comply with the applicable legislation. Transfer of data is, in fact, based alternatively on an adequacy decision or Standard Model Clauses approved by the European Commission. Further information and copies of these agreements are available from the Data Controller
All Personal Data provided will be processed in compliance with the principles of legality, propriety, appropriateness and proportionality only in the methods, including computerised or electronically, strictly necessary to pursue the objectives described above.
In all cases, Personal Data will be stored for a period of time no greater than that strictly necessary for the fulfilment of the purposes specified. Personal Data that is not necessary to the established purposes will be deleted or anonymised. It is stressed that the computer systems used for the handling of the data collected are originally configured to minimise the use of Data.
Finally, you are reminded that in the role of the concerned party, you have the rights referred to in Article 7 of the Privacy Code and Article 15 GDPR, specifically the rights to:
1) obtain the confirmation of the existence or not of any personal data regarding him/her, even though not yet registered, and their communication in intelligible form;
2) obtain specification: a) of the origins of the Personal Data; b) of the purposes and methods of processing; d) of the logic used in the event of it being processed with the assistance of electronic tools; d) of the identifying details of the data controller, the persons in charge, and their designated representative, pursuant to Article 5, paragraph 2 of the Privacy Code and Article 3, paragraph 1 GDPR; e) the persons and categories of persons to whom personal data may be communicated or who may become aware of it as appointed representatives within the national territory, persons in charge or appointees;
3) To obtain: a) the update, correction or, if interested, addition to the data; b) the deletion, transformation into an anonymous form or blocking of the data processed in violation of the law, including that which does not require to be retained as regards the purpose for which it has been collected or subsequently processed; c) proof that the operations referred to in letters a) and b) are known, as also regards their content, to those to whom data was communicated or distributed, except when this fulfilment is impossible or involves the use of means that are not manifestly proportional to the protected right;
4) to oppose, in full or in part: a) for legitimate reasons to the processing of Personal Data regarding you, even if it is relevant to the purpose for which it was collected; b) to the processing of Personal Data concerning you for the purpose of sending advertising materials, direct selling, completing market research or commercial communications using automated calling systems with no operator intervention, email and/or using traditional marketing methods using the telephone and/or printed mail.
Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right to rectification, right to erasure, right to the restriction of processing, right to data portability and the right to object), as well as the right to lodge a complaint with the Supervisory Authority.
The Data Controller can be contacted by e-mail: firstname.lastname@example.org