**Privacy Notice pursuant to EU Regulation 2016/679 (GDPR)**
This notice is provided by RE/MAX Aurea, as the Data Controller, pursuant to Article 13 of EU Regulation 2016/679 (hereinafter "GDPR"), regarding the processing of personal data of users interacting with the real estate agency's microsite.
1. **Data Controller**
The Data Controller is RE/MAX Aurea, with registered office at Via Giorgio Giorgis, 12, 00054, Fiumicino. VAT number: 10452401002. For any information related to the processing of personal data, you can contact the Data Controller at the email address: info@remaxaurea.it.
2. **Types of Data Collected**
RE/MAX Aurea collects and processes the following personal data:
- Browsing data: information automatically collected through the computer systems and software procedures used to operate the microsite, such as IP addresses, domain names of the computers used by users, URI (Uniform Resource Identifier) addresses of the requested resources, request time, method used to submit the request to the server, size of the file obtained in response, numerical code indicating the status of the server's response (successful, error, etc.), and other parameters related to the user's operating system and computer environment.
- Data voluntarily provided by the user: personal data entered by users through contact forms, information requests, newsletter subscriptions, or other interactions with the microsite, which may include name, surname, email address, phone number, and other identifying data.
3. **Purpose of Processing**
The personal data collected are processed for the following purposes:
- Providing the services requested by users and managing related communications; - Responding to users' information requests and contacts; - Conducting statistical analyses on aggregated and anonymous data to improve the microsite's functionality; - Complying with legal or regulatory obligations.
4. **Legal Basis**
The processing of personal data by RE/MAX Aurea is based on the following legal bases:
- Execution of a contract or pre-contractual measures (Art. 6, par. 1, lett. b) GDPR) for managing users' requests; - Consent of the data subject (Art. 6, par. 1, lett. a) GDPR) for marketing activities and sending newsletters; - Compliance with legal obligations (Art. 6, par. 1, lett. c) GDPR); - Legitimate interest of the Controller (Art. 6, par. 1, lett. f) GDPR) for site security and fraud prevention.
5. **Storage Methods**
Personal data are processed using both automated and non-automated tools, in compliance with the principles of necessity, minimization, and adequacy as provided by the GDPR. RE/MAX Aurea adopts appropriate technical and organizational security measures to prevent data loss, unlawful or incorrect use, and unauthorized access.
Data are retained for the time strictly necessary to achieve the purposes for which they were collected. Specifically, data collected for marketing purposes will be retained until the consent of the data subject is withdrawn.
6. **Data Subject Rights (Art. 15-22 GDPR)**
Users, as data subjects, have the right to exercise the rights provided by Articles 15-22 of the GDPR, including:
- Right of access: to obtain confirmation of whether or not personal data concerning them are being processed and, if so, to access the data; - Right to rectification: to obtain the rectification of inaccurate personal data concerning them without undue delay; - Right to erasure: to obtain the erasure of personal data concerning them without undue delay; - Right to restriction of processing: to obtain restriction of processing when the conditions provided by the GDPR are met; - Right to data portability: to receive personal data concerning them in a structured, commonly used, and machine-readable format and to transmit those data to another data controller; - Right to object: to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them.
To exercise these rights, data subjects can contact the Data Controller at the contact details provided in section 1.
7. **DPO and Contacts**
RE/MAX Aurea has not appointed a Data Protection Officer (DPO) as it does not fall within the mandatory cases provided by the GDPR. For any questions or requests regarding this notice or the processing of personal data, data subjects can contact the Data Controller at the email address: info@remaxaurea.it.
This privacy notice may be subject to changes and updates, so please consult it periodically.