Signature villas in a Mediterranean oasis

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Data Controller For the purposes of this information notice, the data controller is Gabetti Agency S.p.A., headquartered in Milan, Via Bernardo Quaranta no. 40, registered with the Milan Companies Register under number (hereinafter referred to as the "Data Controller"). The Data Controller is a real estate brokerage company.

Data Collected The personal data collected by the Data Controller may include: name, surname, residence and/or domicile address, tax code and/or VAT number, landline and/or mobile phone number, email, and social network account (hereinafter referred to as the "Data").

Purposes and Legal Basis of Processing The Data will be processed for the following purposes:

• to fulfill your requests for information;
• to execute the assignment given and comply with the related legal obligations;
• to send communications of a commercial, promotional, and advertising nature via traditional mail, telephone, SMS, email, instant messaging, including social networks, concerning the services and products provided by the Data Controller and/or companies indirectly or directly controlling, controlled by, under common control with, or affiliated with the Data Controller;
• to send communications of a commercial, promotional, and advertising nature via traditional mail, telephone, SMS, email, instant messaging, including social networks, concerning the services and products provided by companies operating in sectors such as short-term rental, real estate mediation, condominium administration, credit mediation, insurance and insurance brokerage, auctions and real estate executions, insolvency proceedings, property management and maintenance, energy, furnishings, education and training, leasing, IT, marketing, and communication.

The legal basis for the processing under point a) is the legitimate interest of the Data Controller to respond to the requests of the data subjects to provide its services and provide information about them. This interest has been balanced against that of the data subjects and is deemed compatible with their reasonable expectations, as it is reasonable to assume that they wish to receive responses to their requests submitted to the Data Controller.

The legal basis for the processing under point b) is the execution of the contract resulting from the assignment signed by the data subject, as well as the fulfillment of legal obligations.

The legal basis for the processing under points c) and d) is your consent. Consent may be validly given and revoked for one or more of the aforementioned processing purposes. The consent given can be revoked at any time using similar methods to those provided for its provision, without affecting the lawfulness of the processing based on the consent before its revocation.

The processing of personal data for the purposes mentioned in points a) and b) is mandatory and necessary to fulfill your requests for information and/or to execute the assignment given and comply with the related legal obligations. Any partial or total refusal to provide the Data for these purposes will result in the impossibility for the Data Controller to carry out the aforementioned activities.

The processing of personal data for the purposes mentioned in points c) and d) is optional. Any partial or total refusal to process the Data for these purposes will result in the impossibility for the Data Controller to carry out the related activities.

Processing Methods The Data Controller and the entities it relies on process the Data using paper and electronic or automated tools stored on servers and/or archives located within the European Union according to methods strictly related to the purposes themselves and in any case in a way that guarantees the security and confidentiality of the Data.

Data Communication (Recipients) The Data will be processed by the Data Controller and the entities it designates and may be communicated to third parties only if necessary for the execution of the activities mentioned in Article 3 above. Third-party recipients of the Data may process them, depending on the case, as autonomous data controllers or as data processors duly appointed.

The complete list of data processors is kept at the Data Controller's headquarters and can be consulted upon request to be sent to the contacts indicated in Article 8 below.

Data Disclosure The Data will not be disclosed.

Data Retention Period The Data will be processed for the time strictly necessary to achieve the purposes for which they were collected; specifically, for the purpose mentioned in point a) of Article 3, the Data will be retained for a maximum period of 12 months from the date of collection for that purpose; for the purpose mentioned in point b) of Article 3, the Data will be retained for the entire duration of the assignment given and for the limitation period provided for by applicable legal provisions; for the purposes mentioned in points c) and d) of Article 3, the Data will be retained for a maximum period of 24 months from their collection for those purposes.

Data Subject's Rights and Contact Details You have the right at any time to: (I) obtain confirmation of whether or not personal data concerning you exist; (II) know the purposes of the processing, the methods, the recipients of such Data, and the retention period; (III) obtain the rectification or erasure and, where applicable, the restriction of processing; (IV) object to the processing; (V) where applicable, receive in a structured, commonly used, and machine-readable format the Data concerning you provided to the Data Controller and transmit such data to another data controller without hindrance from the Data Controller; (VI) lodge a complaint with the data protection supervisory authority; (VII) select the methods by which you wish to be contacted for the purposes mentioned in points c) and d) of Article 3 above, and in particular, indicate whether you wish to be contacted via traditional methods (postal mail, telephone with operator), automated methods (email, SMS, telephone without operator, etc.), or both categories.

The above rights may be exercised at any time by simple request to the Data Controller to be sent: via email to the addresses: privacy@gabettigroup.com or by writing to the Data Controller at the following addresses: Via Bernardo Quaranta no. 40, 20139 Milan, addressed to the Legal Corporate and Contracts Department.