Privacy Policy and Personal Data Protection

This information is provided, in respect of the users’ rights (hereinafter: “Users” or “User”) in relation to the provisions of EU Regulation 679/2016 (hereinafter the “Regulation”) and in particular of articles 13 (Information to be provided if personal data is collected from interested parties) and 14 (Information to be provided if personal data have not been obtained from the interested party).

This formulation refers to the acquisition of data of users who access the www.mabuc.it website and who release their personal data of their own volition, thus authorizing the subsequent processing of such data.

The site to which users access is in desktop and mobile version (hereinafter: “Site and App”) and contains third party applications to allow the users’ functionality, usability and navigability.

The website www.mabuc.it is owned by the company Immobiliare Oliva Srl, the owner of the processing of personal data (hereinafter: “owner”) and has the purpose of describing the methods for managing the site and app with reference to the processing of personal data once acquired, as well as allowing Site Users and App to know the purposes and methods of processing personal data.

The services offered by the Data Controller are aimed at people over the age of 18. Should the Data Controller become aware of the data processing of children under 18 years of age without valid parental consent or legal guardian, he reserves the right to unilaterally interrupt the use of the service offered as well as to cancel the acquired data.

Main services offered

– rental of furnished offices, meeting rooms / meetings / courses
– virtual offices and registered offices
– secretarial services

Principles applicable to the Processing of Personal Data

The Data Controller, pursuant to and for the purposes of the Regulation, announces that the aforementioned legislation provides for the protection of individuals with regard to the processing of personal data, and that this treatment will be based on principles of correctness, lawfulness, transparency and protection of confidentiality and the fundamental rights of those accessing the website.

Type of Users

In relation to the use of the Website and the App, Users can access the site www.mabuc.it anonymously, while for requests for offers, accession to campaigns, newsletters it is necessary to register before use.

Purpose, legal basis of the Treatment and Optional of the Contribution

The personal data provided by Users through the use of the Site and App, will be processed with their consent, for the purposes described below:

1. Provision of service for Users:
   1. In order to request an offer it is necessary for the User to register through the Site and App. The data necessary for Registration are limited to the provision of:
      • Name
      • Surname
      • Email
      • Phone/cell phone
      • Activity

2. Information, promotional and profiling activities:

In order to allow the User to obtain sector information such as news and curiosity, as well as advertising information, the User can join the information, promotional and profiling service to receive informational, promotional and marketing communications on the basis, in some cases, the activity carried out on the Site and App.

When sending a contact request, it will therefore be possible to select the two fields below, in order to receive promotional information or subscribe to the MABUC Newsletter:

2. 1. “I wish to receive information and promotional communications”
   2. “I would like to receive the mabuc.it News newsletter”

Methods of Processing and Storage of Personal Data

The Data Controller ensures that personal data is processed in full compliance with the Regulations, using manual, IT or telematic systems. Processing can also be carried out using automated tools to store, manage and transmit the data.

The data collected and processed will be protected with physical and logical methods that reduce to a minimum the risks of unauthorized access, dissemination, loss and destruction of data, pursuant to art. 25 (Data protection from planning and protection) and 32 (Data Security) of the Regulation.

The processing of data will last no longer than is necessary to meet the purposes for which it was collected.

According to the art. 7 (Conditions for consent) paragraph 3 (Right of revocation) of the Regulations, the interested party has the right to obtain the revocation of the consent to treatment at any time.

If a cancellation request is not received by the Owner, the personal data will be stored for a period not exceeding 10 (ten) years, with effect from the date of the last access to the Site and / or App by the User.

Recipients of Personal Data

The personal data collected may be processed by subjects or categories of subjects acting as Data Processing Managers pursuant to art. 28 (Data Processor) of the Regulations or who are authorized to process data pursuant to art. 29 (Treatment under the authority of the controller or controller) of the Regulation.

Furthermore, for some services, the data may be communicated to companies that collaborate or use the services of the Data Controller (for example individual proponents for information on real estate), with the sole intention of providing the services requested by the User. In these cases the companies are autonomous holders, therefore the Owner is not responsible for the processing of the data by the same. Furthermore, the Data Controller is not responsible for the content and compliance with the legislation on the protection of personal data by sites not managed by the Data Controller.

Apart from the aforementioned hypotheses, personal data will not be communicated except to subjects, entities and Authorities to whom communication is obligatory pursuant to laws or regulations.

Transfer of Data to a Third Country or an International Organization

The personal data collected through the Site and App, in particular those deriving from foreign access, may be transferred outside the national territory, only and exclusively for the execution of the services requested through the Website and the App and in compliance with the specific provisions of the Regulation.

Some personal data may be shared with recipients located outside the European Economic Area. The Data Controller ensures that the processing of personal data by these recipients takes place in compliance with the Regulations.

Navigation Data Collection

The computer systems and the technical and software procedures underlying the operation of the Site and App acquire, during their normal operation, some personal data whose transmission is implicit in the access and operation mechanisms and protocols in use on the Internet.

Each time the User connects to the Site and App and every time it calls or requests a content, the access data is stored in our systems, in the form of tabular or linear data files.

This category of data includes, for example, IP addresses, domain names of computers used by users who connect to the Site and App, the request by the User’s browser, in the form of URI notation (Uniform Resource Identifier), the date and time of the request to the server, the method used in submitting the request to the server, the amount of data transmitted, the numeric code indicating the status of the response given by the server and other parameters relating to the operating system and to the IT environment of the User.

This data may be used by the Data Controller for the sole purpose of obtaining anonymous statistical information on the use of the Site and App in order to identify the Users’ favorite pages and therefore provide more and more adequate contents and to check their correct functioning. At the request of the Authority, the data could be used to ascertain responsibility in case of hypothetical computer crimes against the Site and the App or its Users.

Information on Cookies, Search Engines and Location Data

Cookies are aimed at speeding up the analysis of Internet traffic, making it easier for Users to access the services offered by the Site and the App and providing useful and relevant advertising to visitors. With the use of cookies, no personal data is transmitted or acquired and no user tracking systems are used. If you do not want the information provided by him to be collected through the use of cookies, the User can perform a simple procedure present in his browser that allows you to refuse the function of cookies.

The information relating to the real estate proposals entered on the Site and App will be visible in the searches carried out in the internal search engine and could be made available to third party search engines as Site and App allow the indexing of their contents by third-party engines.

If the page you visited has already been removed from Site and App, it is possible that the cached copy remains in the search results for a few days. The search results are not managed by Site and App, but the user can signal the removal of the page and request the update of the cached copy directly to the search engine itself.

When using the Site and App with the active position detection function, the Site and App may collect and process information on the User’s current position. This data is processed anonymously, in a format that does not allow you to identify the User personally, and is used only to facilitate the use of certain Site functions and Location-based Apps. Location services can be activated or deactivated by the User at any time by accessing the settings of your device.

For more information, please see the Cookie Usage page.

Rights of the interested party

Pursuant to the articles from the 15th (Right of access of the interested party) to 22 (Automated decision-making relating to natural persons) of the Regulations, the User, as interested party, has the right to exercise specific rights regarding his Personal Data. In particular, the interested party has the right to obtain:

1. confirmation of the existence or not of personal data concerning him, even if not yet recorded, in a concise, transparent, intelligible and easily accessible form, with simple and clear language;

2. the indication:
   1. of the origin of personal data;
   2. of the purposes and methods of treatment;
   3. of the legitimate interests pursued by the Data Controller or by third parties;
   4. any recipients or any categories of recipients of personal data;
   5. any intention of the holder to transfer personal data to a third country or an international organization;
   6. of the period of storage of personal data;
   7. of the logic applied, as well as the importance and the expected consequences of this treatment for the interested party, in the case of processing carried out with the aid of electronic tools in the context of an automatic process of collection and / or profiling;
   8. of the identification data concerning the Data Controller, Data Processors, any designated Representative and the Data Protection Officer (so-called DPO);
   9. the subjects and categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or appointees;
3. the possibility of proposing a complaint to a supervisory authority;
4. updating, rectification or, when interested, integration of data;
5. the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those whose storage is not necessary in relation to the purposes for which the data was collected or subsequently processed;
6. the limitation to the processing;
7. the portability of personal data concerning him to another Data Controller;
8. revocation of the processing;
9. the attestation that the operations referred to in letters a) and b) have been brought to the attention, even with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible o involves a manifestly disproportionate use of resources with respect to the protected right;
10. the opposition, in whole or in part, for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection.

Data Controller and Data Protection Manager

To exercise the rights in the previous point, the interested party may at any time contact the Data Controller for any communications regarding the processing of their Personal Data, or to know the updated list of any Data Processors appointed by the Company, sending notice to contacts below: The Data Controller – Immobiliare Oliva Srl

Registered office: Via B. Cellini, 5 – 20129 Milan – Operating Office: Via Pavese 3 – 20089 Rozzano (MI) – info@immobiliareoliva.com