Privacy Policy

1. What data we collect

We may process identification and contact data such as name, surname, email address, phone number, message contents and information relating to the property or request submitted.

During ordinary browsing, technical data may also be processed, including IP address, user agent, application logs, session data and information required for website security.

2. Purposes and legal bases

• Responding to requests sent through website forms: performance of pre-contractual steps requested by the data subject.
• Managing commercial contacts relating to rentals, sales or owner services: pre-contractual steps and legitimate organisational interest.
• Ensuring website security, spam prevention and technical operation: legitimate interest of the controller.
• Complying with legal obligations, authority requests or defence of legal claims: legal obligation and legitimate interest.
• Enabling measurement or conversion tools only after consent, where present and configured.

3. Whether providing data is mandatory

Providing the fields marked as mandatory in the forms is necessary to submit a request and receive a reply. If the data is not provided, we may be unable to process the enquiry.

Consent for cookies or optional tools is voluntary and can be changed at any time from the Cookie preferences page.

4. Processing methods and retention

Data is processed using electronic tools and suitable organisational measures designed to reduce the risk of unauthorised access, loss or unlawful use.

Requests received through forms are stored for as long as needed to manage the contact and for an additional period consistent with administrative, organisational or legal protection needs.

• General information and commercial enquiries: generally up to 24 months, unless a further relationship or different obligations apply.
• Technical and security logs: for the time strictly necessary for control and infrastructure protection purposes.
• Data needed for legal compliance: for the periods required by applicable law.

5. Data recipients

Data may be processed by authorised personnel of the controller and by technical providers supporting hosting, email, maintenance, anti-spam protection and website management, appointed where required as processors.

Data is not publicly disclosed. It may be communicated to parties legally entitled to receive it under law or authority request.

6. Transfers outside the EEA

Some technical providers or third-party tools used by the website may involve transfers of data outside the European Economic Area. In such cases, processing is carried out with appropriate safeguards under Articles 44 and following of the GDPR.

7. Your rights

• Access to personal data and information about the processing.
• Rectification of inaccurate data or completion of incomplete data.
• Erasure, where the conditions of Article 17 GDPR are met.
• Restriction of processing in the cases provided by Article 18 GDPR.
• Objection to processing based on legitimate interest.
• Data portability where applicable.
• Withdrawal of consent, without affecting prior lawful processing.
• Complaint to the competent data protection authority.

8. How to exercise your rights

You can write to info@treehouseitalia.it describing your request and providing a contact reference for the reply. TreeHouse Italia will respond within the timeframe required by applicable law.