I, MAGALETTA MASSIMO, born in Castiglione del Lago on 02/02/1974 and residing, for the purposes herein, at the real estate mediation company DIAMANTE GROUP - Diamante srls, located in Castiglione del Lago, Via Firenze n.11, telephone 075.951113, email address: info@diamantegroup.it, certified email address: diamante@pecditta.com (hereinafter referred to as the "Agency"), represented by the same, and acting as the "Data Controller" (hereinafter referred to as the "Controller") of Your personal data (hereinafter, collectively, also "Data"), of which You are the "Data Subject," in accordance with EU Regulation 2016/679 (hereinafter referred to as the "Regulation"), and which the Agency has acquired through the assignment of the mediation mandate, provides the following information so that You can give specific, unequivocal, informed, free, and conscious consent to the Processing of Data, which may also occur through computer and/or telematic means.
The data necessary for the performance of the contractual relationship between the Parties, as well as data otherwise acquired in the context of such activity, are collected by the Agency directly from the Data Subject and/or through third parties, as well as obtained by consulting certain external public and private databases.
The Agency provides the opportunity to consult this notice: a) each time it collects personal data from Customers; b) whenever a specific request is made to the Controller; c) through web consultation by accessing the homepage of the website www.diamantegroup.it.
For its institutional purposes, connected or instrumental to the activity, the Agency processes Your data for the following purposes:
a) purposes related to obligations provided for by laws, regulations, and EU legislation, as well as provisions issued by Authorities authorized by law or by supervisory and/or control bodies;
b) contractual purposes, connected and instrumental to the establishment and management of relationships with customers, such as the acquisition of preliminary information for the eventual conclusion of a contract;
c) assessment of the satisfaction level regarding the quality of services, carried out directly by the Agency or through the work of specialized companies through personal or telephone interviews, interactive questionnaires, market surveys;
d) promotion of products and services of the Agency through the sending of advertising material, telephone contracts, and any other form of electronic communication (sending emails, SMS, MMS, publication on social networks);
e) communication and/or transfer of data to third parties for the promotion and/or sale of products and services, through traditional and/or automated methods.
With regard to the purposes referred to in points c), d), and e), please be informed that, at any time, you will be free to revoke the consent given in the manner specified in this notice.
You have the right to know that the provision of data may be mandatory or optional, and may have consequences in case of refusal.
In this regard, I specify that:
a) the provision of Your consent for the purposes referred to in letters a) and b) of point 3 is mandatory as it is required by law or to fulfill contractual obligations (as indicated by art. 6, paragraph 1, letters b and c) of the Regulation). The refusal of Your consent for the purposes indicated in letter b) of point 3) will therefore not allow the Agency to carry out the mandate entrusted to it by You or to conclude the contract of which You are a part;
b) the refusal to process Data for the purposes referred to in letters c), d), e) of point 3 is, instead, optional, will not entail any prejudicial consequences, and may be revoked by You at any time, limited to the purposes related to the sending of advertising material, assessment of the satisfaction level regarding the quality of services, performance of market research or commercial communication, through telephone contacts or any other form of electronic communication (sending emails, SMS, MMS, WhatsApp, publication on websites, social networks, etc.), carried out directly by the Agency or through the work of specialized companies through personal or telephone interviews, interactive questionnaires.
Art. 9 of the Regulation defines as special those data capable of revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership, as well as genetic and biometric data, data concerning health or sex life or sexual orientation of the person. The Agency may obtain special data in relation to specific operations requested by the Data Subject. In this case, the Data Subject has the option to express specific consent to the processing of their sensitive data, and the Agency may use them exclusively to the extent necessary to perform the services and operations requested.
The Data will be kept for the time necessary to manage the contractual relationship and comply with legal obligations, with particular reference to anti-money laundering legislation. The Data are always processed in full compliance with the principle of proportionality of the processing (art. 5, paragraph 1, letter c) of the Regulation), according to which all personal data and the various methods of their processing must be relevant and not exceeding the purposes pursued, in order to ensure adequate security and confidentiality, also to prevent unauthorized access or use of personal data and the equipment used for processing, as well as lawful and correct processing.
In accordance with art. 13, paragraph 2, letter a) of the Regulation, the following indications are provided regarding the data retention periods based on the different purposes of processing:
• with reference to letters a) and b) of point 3 the Data are kept for the period necessary to manage the contract and fulfill legal obligations;
• with reference to letters c), d), e), of point 3, the retention periods are set at 10 years.
With regard to the purposes indicated in point 3, personal data may also be processed by a "Processor", i.e., the natural person or company, even external to the Agency, to whom specific and defined tasks of management and control of data processing may be entrusted, and by one or more "Authorized Parties", who will carry out the material processing or use of the Data based on the instructions received from the Controller or Processor (subjects who, if not expressly indicated in this notice, are to be considered not yet designated, and not necessarily to be designated if the processing is occasional, and whose data will be provided to You in case of their designation).
Also in relation to the purposes mentioned above, the Data may be processed through manual, computerized, and/or otherwise automated tools according to logic strictly related to the purposes of processing and, in any case, in such a way as to ensure their security and confidentiality, even in the case of processing through distance communication tools.
The Data may be transferred to countries of the European Union and to third countries (i.e., not members of the European Union) exclusively within the scope of the purposes referred to in letters a) and b) of point 3. In this case, the intention to transfer personal data must be communicated to You in advance and authorized by You only if an adequate level of data protection equivalent to that of the European Union is guaranteed.
The Data, by virtue of the established relationship and in order to facilitate and allow the conclusion of the transaction, may be communicated to: i) external collaborators; ii) other real estate agents (including companies) identified by the Controller in order to collaborate in carrying out the assignment entrusted by the Data Subject; iii) banks and other subjects operating in the banking sector; iv) counterparts and their possible technicians and consultants; v) notaries for the preparation of notarial deeds and/or related activities related to the assignment entrusted to the Controller; vi) companies and/or professionals providing services for the completion of technical/cadastral/building/urban planning practices; vii) insurance companies for the stipulation of policies related to the assignment entrusted to the Controller; viii) websites for real estate advertising purposes; ix) panels of arbitrators and, in general, all those public and private entities to which communication is necessary for the proper fulfillment of the purposes indicated in point 3); x) Supervisory/Control Authorities and other Authorities, for purposes related to obligations provided by law (usury law, anti-money laundering regulations) and/or regulations, as well as provisions issued by the same Authorities.
All subjects belonging to the categories to whom the Data may be communicated will use the Data as "controllers" under the law or specific consent, independently, being unrelated to the original processing carried out at the Agency, or as "external processors". To know at any time the subjects to whom Your data will be communicated, it is sufficient for You to request the updated list by writing to the Data Controller at the Agency's address.
Finally, Your Data will be known to all employees and collaborators of the Agency, designated as controllers and/or data processors, in relation to the performance of the duties and tasks assigned to each.
The Data processed by the Agency will not be disclosed.
Within the limits and conditions provided by articles 15 - 23 of the Regulation, the Agency guarantees and acknowledges Your exercise of the following rights:
• the right to access personal data held in its paper and/or electronic archives;
• the right to request rectification, updating, and erasure if incomplete or incorrect, as well as to object to their processing for legitimate and specific reasons;
• the right to obtain the rectification of inaccurate personal data without undue delay.
Considering the purposes of the processing, the Data Subject has the right to obtain the integration of incomplete personal data, also by providing a supplementary statement;
• the right to obtain the erasure of personal data concerning him without undue delay if one of the reasons listed in art. 17, paragraph 1 of the Regulation exists;
• the right to obtain the restriction of processing where one of the hypotheses referred to in art. 18, paragraph 1 of the Regulation occurs;
• the right to data portability within the limits and in the manner provided for by art. 20 of the Regulation.
Furthermore, You have the right at any time to revoke consent to the processing of Your data without affecting the lawfulness of processing based on consent before revocation, as well as to object at any time to processing for marketing purposes (right to object).
You have the right to receive information about the action taken regarding one of the above requests or the effects arising from the exercise of one of the aforementioned rights, without undue delay and, in any case, no later than one month from the receipt of the request itself, extendable, if necessary, by two months; You also have the right to lodge a complaint with a supervisory authority and to bring judicial proceedings.
Except where the processing of the Data violates the general principles laid down by the Regulation, the exercise of such rights must be relevant and motivated and cannot imply the revocation of the consent given or the request for the deletion of the Data provided by You for the conclusion and execution of the contract referred to in point 3) letters a) and b), to the extent and as long as the Data are necessary for this purpose.
The aforementioned rights may be exercised, also through a delegate, by requesting the Controller or Processor of the Data at the following addresses:
Via Firenze, 11 Cap 06061 Città Castiglione del Lago tel. 075.951113, email address: info@diamantegroup.it, certified email address: diamante@pecditta.com
In exercising the rights, You may provide, in writing, a delegation or proxy to individuals, associations or organizations; You may also be assisted by a trusted person. The Agency, to ensure the effective exercise of Your rights, will adopt appropriate measures to facilitate access to Data, simplify the procedures, and reduce the time to provide a response to Your request.
Finally, please note that You may lodge a complaint with the supervisory authority, namely the Italian Data Protection Authority, using the following means:
a) registered mail addressed to Garante per la protezione dei dati personali, Piazza di Monte Citorio n. 121 00186 Roma;
b) email to the address: garante@gpdp.it, or protocollo@pec.gpdp.it;
c) fax to the number: 06/69677.3785.
All relevant information about complaints that can be filed by the Data Subject is available on the website of the Authority at the address www.garanteprivacy.it
The Data Controller, pursuant to art. 24 of the Regulation is MAGALETTA MASSIMO. Data Processors are employees and collaborators.