Pursuant to Legislative Decree 196/2003 and Regulation (EU) 2016/679 (hereinafter “Regulation”), this page describes the
methods for processing the personal data of users who visit the website accessible electronically at
the following address: https://www.arcadiaimmobiliare.it.
We inform users that, following consultation of this site, data relating to identified or identifiable persons may be processed.
This information does not apply to other sites, pages, or online services accessible via hyperlinks
that may be published on the site.
Identity of the Data Controller
The data controller is Sft Immobiliare srl, with registered office in Bari (BA), Viale J.M. Escrivà no. 28, (Email:
info@arcadiaimmobiliare.it, PEC: sftimmobiliare@pec.it, Tel.: +39 0805041523).
Data source and type of data collected
1) Data provided by the User
The Data Controller collects personal data provided by users:
when sending a message using the contact channels and/or contact forms on the website. The optional and voluntary sending
of messages to contact addresses, as well as the completion and submission of forms on the
site, involves the acquisition of the sender’s contact information necessary to provide a response, as well as all personal data
included in the communications.
2) Browsing data
The Data Controller collects data relating to the user’s use of the website.
The computer systems and software procedures used to operate this website acquire, during their
normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes the IP addresses or domain names of the computers and terminals used by users,
the URI/URL (Uniform Resource Identifier/Locator) addresses of the requested resources, the time of the request, the
method used to submit the request to the server, the size of the file obtained in response, the numerical code
indicating the status of the response from the server, and other parameters relating to the user’s operating system and IT environment.
This data, necessary for the use of web services, is also processed for the following purposes:
• Obtain statistical information on the use of the services (most visited pages, number of visitors per time slot or day, geographical areas of origin, etc.);
• Verify the correct functioning of the services offered.
Browsing data is not retained for more than seven days and is deleted immediately after its aggregation
(except where judicial authorities require it to investigate criminal offenses).
3) Cookies and other tracking systems
In order to make its services as efficient and easy to use as possible, this Site uses cookies.
Therefore, when you visit the Site, a minimal amount of information is inserted into your device, such as
small text files called “cookies,” which are stored in your web browser’s directory. There are several
types of cookies, but essentially the primary purpose of a cookie is to make the Site function more efficiently and
to enable certain features.
For more information on the cookies used by this website, you can view the cookie policy at the following
link.
Purpose of the processing
Depending on the type of processing to be carried out, the Data Controller uses the data collected and/or provided
by the User for the following purposes:
1) respond to any communications, requests for information and/or services from users by
sending a message using the addresses and/or contact forms on the site;
2) manage and control risks, prevent potential fraud, insolvency, or default; prevent and manage potential
disputes, and take legal action if necessary.
Legal basis for processing
With reference to the purposes indicated in the previous paragraph, the legal basis for processing is, with respect to the following points:
1) the need to perform a contract to which the data subject is a party or pre-contractual measures taken at the data subject’s request;
2) the need to pursue the data controller’s legitimate interests (in particular with regard to the
prevention of fraud and insolvency).
Data Recipients
The personal data processed by the Data Controller is not disseminated, meaning it is not disclosed to unspecified parties, in
any form, including making it available or simply consulting it.
However, they may be disclosed to employees of the Data Controller, as they operate under the authority of the data controller. Based on their roles and work duties, these workers have been authorized
to process personal data, taking into account their respective skills and in accordance with the instructions
given to them by the Data Controller.
The Data Controller has engaged third-party service providers to operate the website, such as hosting providers, IT maintenance providers, and service providers that enable the integration of other functions into the website, which the user can use at their discretion.
These service providers, designated as data processors, are provided only with the personal data
necessary to provide the respective services and are not permitted to use or disclose the data subjects’ personal data
for other purposes without the data subject’s prior authorization.
Finally, the data may be disclosed to parties authorized to access it pursuant to laws, regulations, and
EU legislation.
Data Transfer
Under no circumstances does the Data Controller transfer personal data to third countries or international organizations.
Data Retention
The Data Controller retains and processes personal data for the time necessary to fulfill the indicated purposes.
Subsequently, personal data will be retained and not further processed for the period established by current
civil and tax regulations.
In the event of any dispute, the collected data will be retained for the entire duration of the dispute, until the deadline for filing appeals has expired.
It should also be noted that, in the event a user provides the Data Controller with unsolicited or unnecessary personal data
for the purpose of performing the requested service or providing a service strictly related to it, Sft
Immobiliare srl cannot be considered the data controller and will delete it as quickly
as possible.
Rights of the interested party
In relation to the data processed under this privacy policy, the data subject has the right at any time to:
• request access to their personal data and related information from the Data Controller (Article 15 of the GDPR); the
rectification of inaccurate data or the completion of incomplete data (Article 16 of the GDPR); the erasure of personal data
concerning them (when one of the conditions indicated in Article 16 of the GDPR applies). 17, paragraph 1 of the GDPR and in compliance with the
exceptions provided for in paragraph 3 of the same article); the restriction of the processing of your personal data (when
one of the circumstances indicated in art. 18, par. 1 of the GDPR);
• request and obtain from the Data Controller – in cases where the legal basis of the processing is the contract or consent,
and this is done by automated means – your personal data in a structured and machine-readable format
automatic device, also for the purpose of communicating such data to another data controller (so-called right to
data portability – Art. 20 of the GDPR);
• object at any time to the processing of your personal data in the event of particular situations that concern you (Article 21 of the GDPR);
• withdraw your consent at any time, limited to cases in which the processing is based on your consent
for one or more specific purposes. Processing based on consent and carried out before its withdrawal
remains lawful (Article 7, paragraph 3, of the GDPR).
The appropriate request is submitted by contacting the Data Controller via certified email at sftimmobiliare@pec.it, email at
info@arcadiaimmobiliare.it, or registered mail to Bari (BA), Viale J.M. Escrivà n. 28.
If the data subject believes that the processing of his or her data violates the provisions of the Regulation,
he or she may lodge a complaint with a supervisory authority (Italian Data Protection Authority –
www.garanteprivacy.it), as provided for by art. 77 of the GDPR, or take legal action (Article 79 of the GDPR).
Refusal to provide data
If the Data Subject fails to provide the data identified as necessary for the performance of the requested service,
the Data Controller will not be able to proceed with the processing related to the management of the aforementioned service, nor with the
obligations that depend on it.
If the Data Subject does not consent to the processing of personal data for the activities that require it,
such processing will not take place for the same purposes, without this impacting the provision of other
services requested, nor those for which the Data Subject has already given consent. If the Data Subject has
given consent and subsequently withdraws it or objects to the processing, their data will no longer be processed
for such activities, without this having any detrimental consequences or effects for the Data Subject or for any other
requested services.
Automated decision-making processes
The Data Controller does not perform any processing involving automated decision-making processes on the data of natural persons.