**Privacy Policy in accordance with Regulation (EU) 2016/679 (GDPR)**
This privacy policy is provided pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter "GDPR") for users of the RE/MAX Focus Immobiliare minisite. The protection of personal data is a priority for us, and we are committed to processing personal data in compliance with current regulations.
1. **Data Controller**
The data controller is RE/MAX Focus Immobiliare, with its registered office at Via Roma, 41, 47039, Savignano sul Rubicone. The company is registered with VAT number 04470720402. For any requests regarding the processing of personal data, you can contact the Data Controller via the email address of the DPO (Data Protection Officer), if available, at the following address: [insert DPO email if provided].
2. **Types of Data Collected**
While browsing and interacting with our minisite, we may collect various types of personal data, including:
- Contact data: name, surname, email address, phone number. - Browsing data: IP addresses, access times, location data, information about the device used for access. - Data related to real estate preferences and specific user requests.
We do not collect sensitive or special data unless voluntarily provided by the user.
3. **Purpose of Processing**
The personal data collected will be processed for the following purposes:
- Providing the services requested by users, such as managing inquiries about properties. - Improving the user experience on our minisite through statistical and market analysis. - Complying with legal and regulatory obligations. - Sending promotional communications and updates related to the services offered, subject to the user's explicit consent.
4. **Legal Basis**
The processing of personal data is based on the following legal grounds:
- Performance of a contract or pre-contractual measures at the request of the data subject (Art. 6, para. 1, letter b GDPR). - Explicit consent of the data subject for specific purposes (Art. 6, para. 1, letter a GDPR). - Compliance with legal obligations to which the Data Controller is subject (Art. 6, para. 1, letter c GDPR). - Legitimate interest of the Data Controller to ensure system security and improve services (Art. 6, para. 1, letter f GDPR).
5. **Storage Methods**
Personal data will be stored for the time strictly necessary to achieve the purposes for which they were collected and processed. Specifically, data collected for contractual purposes will be retained for the duration of the contractual relationship and for an additional period of 10 years, in compliance with tax and accounting regulations. Data collected for marketing purposes will be retained until the consent is withdrawn by the data subject.
6. **Rights of the Data Subject (Articles 15-22 GDPR)**
Data subjects have the right to exercise the following rights:
- Access personal data and confirm whether or not processing is ongoing. - Rectify inaccurate personal data or complete incomplete data. - Erase personal data in cases provided for by Article 17 GDPR. - Restrict processing in cases provided for by Article 18 GDPR. - Data portability, i.e., the right to receive personal data provided in a structured, commonly used, and machine-readable format. - Object to the processing of personal data for legitimate reasons. - Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise these rights, the data subject can contact the Data Controller at the contact details provided in this document.
7. **DPO and Contacts**
The Data Controller has appointed a Data Protection Officer (DPO) to ensure compliance with the GDPR. For any questions, information requests, or to exercise the rights described above, you can contact the DPO at the email address [insert DPO email if provided]. In the absence of a DPO, requests can be directed to the Data Controller at the email address indicated above.
This policy may be subject to changes. Therefore, it is advisable to consult it periodically to stay informed of any updates.