Cusatino Estate
Privacy notice
Processing of data collected through the forms on this site, under Regulation (EU) 2016/679.
Data controller
Davide Anzalonec/o C.da Cusatino, snc, 93017 San Cataldo (CL)info@cusatino.itWho processes your data
The data controller is the natural person named above. There is no company behind this site: the property is privately owned and the sale is handled directly by the ownership.
Other family members take part in handling enquiries and appointments. They are not joint controllers: they act as persons authorised to process data under the controller’s authority and on the controller’s instructions, pursuant to art. 29 of the Regulation and art. 2-quaterdecies of the Italian Data Protection Code. If you have a complaint or a request about your data, the controller is your point of contact.
No data protection officer has been appointed: this processing does not fall within the cases in which art. 37 makes one mandatory.
What data we collect
Only what you enter yourself into the forms on this site. No data is collected without your knowledge while you browse.
- Contact details: full name, company or organisation if you give one, email address, telephone number.
- Enquiry details: type of party, units of interest, any notes you write, the page you wrote from and the language of the site.
- Consents: which boxes you ticked, when, and against which version of this notice. They are recorded together with the enquiry because they are what makes keeping everything else lawful.
- Cookie preferences: the choice you make in the panel, with a random identifier that cannot be traced back to you, the moment it was made, and the version of this notice. They are described in full in the cookie policy.
- IP address: the server receiving the forms records it with the enquiry as an anti-abuse measure, and it is deleted together with the enquiry. The consent register does not keep it.
Why we process it, on what basis and for how long
Each purpose has its own legal basis and its own retention period. They are kept apart deliberately: where purposes are lumped together, consent to one ends up covering another, and consent of that kind is not valid.
| Purpose | Legal basis | Retention |
|---|---|---|
| Answering your dossier or appointment request and sending you the documentation | Steps taken at your request prior to entering into a contract — art. 6(1)(b) | Twenty-four months from the last contact. If the enquiry leads to a negotiation or a contract, the statutory periods for contractual records apply. |
| Calling you back, if you asked us to, within the time slot you gave | Your consent, given by ticking the call-back box on the form — art. 6(1)(a) | The number and the time slot follow the enquiry they belong to. Without that box we do not call you, even if you left a number. |
| Sending you updates about the sale: newly available units, changes in terms | Your consent, given by ticking the second box on the form — art. 6(1)(a) | Until you withdraw consent, and in any case no longer than until the sale of the estate is completed. |
| Cookies and statistics or marketing tools | Your consent, given in the panel — art. 6(1)(a) and art. 122 of the Italian Data Protection Code | The choice lasts six months, after which you are asked again. Proof of consent stays in the register for five years: it is what demonstrates that consent was given, which is an obligation on the controller. |
| Defending a legal claim, where necessary | The controller’s legitimate interest in establishing or defending a legal claim — art. 6(1)(f) | For the duration of the dispute and for the subsequent time limits for appeal. |
Who we share it with
The data is accessible to the controller and to the persons the controller has authorised. It is not transferred, sold or disclosed to third parties for their own purposes.
Some providers process it on the controller’s behalf, as processors, under a contract pursuant to art. 28 of the Regulation:
- Hosting and email provider: OVH SAS, established in France, with processing on servers within the European Union. The relationship is governed by the OVHcloud Data Processing Agreement, which serves as the agreement required by art. 28 and can be read at ovhcloud.com/legal/data-processing-agreement.
- No other tool receives the enquiries: they are stored in a file on the hosting server and notified by email. No third-party CRM or management system is in use.
- None at present: the sale is handled directly by the controller. If at a later stage an agency, a surveyor or an adviser becomes involved, they will be appointed as processors before receiving any data, and this notice will be updated. The notary is involved only at completion and does not receive enquiries sent through this site.
- Public authorities, where disclosure is required by law or requested in the course of proceedings.
Transfers outside the European Union
Today no personal data is transferred outside the European Economic Area. The site is hosted on European servers, the email service is European, and no statistics or marketing tool is installed.
If tools for measuring advertising campaigns are activated in future — for instance a pixel from a United States platform — that processing will involve a transfer outside the EU. It will happen only after your consent in the cookie panel. Before activating it we will update this notice to state the tool, the destination country and the safeguard relied upon, and your consent will be asked for again.
How we decide, and what we do not do
We do not carry out profiling, no automated decision-making is applied to your enquiry, and we do not send marketing to people who have not asked for it. The person who reads your enquiry and decides how to reply is a human being.
Providing data is optional: no data is required in order to browse this site. Without a name, an email address and the first consent, however, we cannot reply to you or send you the dossier.
Your rights
You may at any time request access to your data, its rectification or erasure, restriction of processing, its receipt in a machine-readable format, and object to processing based on legitimate interest (arts. 15–22 of the Regulation).
You may withdraw your consents at any time, and withdrawing one does not affect the others: you can withdraw consent to marketing updates and still receive a reply to your enquiry. Withdrawal does not affect the lawfulness of processing carried out beforehand. Cookie consent is withdrawn in one click from the link at the foot of every page; the others by writing to the controller’s address.
To exercise these rights, write to the controller’s email address given at the top of this page. A reply follows within one month; if the request is complex that period may be extended, and you will be told if it is.
If you believe the processing of your data infringes the Regulation, you may lodge a complaint with the Italian Data Protection Authority (Piazza Venezia 11, 00187 Rome — garanteprivacy.it) or with the supervisory authority of the country where you live or work. You may also apply to the courts.
Cookies and external resources
This site uses no profiling cookies and embeds no analytics tools. The typefaces are hosted on this same domain: no request goes out to any external service that could record your IP address while you read.
There is one exception, and it does not start on its own: on the estate page, the satellite background of the lot map comes from an external service. The imagery is loaded only if you ask for it by pressing the button next to the map, which says what that involves beforehand. The lot perimeters and everything else on the map are ours and work without it.
The full list of what is stored on your device, with the purpose and duration of each item, is in the cookie policy.
Changes to this notice
This notice carries a version number. If the purposes, the tools or the recipients change, the version is raised and your cookie consent is asked for again: a choice made against a text that no longer exists does not hold.
Version 1.0 of this notice.