Privacy Policy

1. Data controller

TriesteVillas srl · Via Milano 5, 34132 Trieste (TS), Italia · C.F./P.IVA 01235580329 · Email richieste@triesteaffitti.com · PEC milou@pec.emailc.it

2. Data we process

Contact details you voluntarily provide through the forms (name, email, phone, any message and the property of interest) and technical browsing data (e.g. IP address, browser type) collected via technical cookies required for the site to work.

3. Purposes and legal basis

We process the data to respond to your requests and manage the relationship (pre-contractual measures and your consent) and to comply with legal obligations. Providing data is optional, but without contact details we cannot follow up on your request.

3a. Client area: signing in with Google

You can also enter the client area with your Google account instead of an email and password. If you choose to, after you agree in Google's window we receive from Google, which handles your Google account data under its own privacy policy, your first and last name, your email address, Google's confirmation that it has verified it and the identifier of your Google account (a code that does not change). We do not receive your Google password, and we do not keep your profile photo or any other data from your Google account. We use these data to create your client-area account, or to link it to the one you already have with the same email, and to recognise you when you sign in again; as with signing up with email and password, the account and your contact details enter the agency's management system, which uses them to follow up your requests (sections 3 and 6). The legal basis is your request to use the client area (Art. 6(1)(b) GDPR). Marketing communications and profiling stay off: you can switch them on yourself in your profile. The link with Google lasts as long as the account: if you delete the account in your client-area profile (“Delete your account”), we delete the link with it, and your contact details follow the periods in section 5. You can also remove the access in your Google account settings, on the linked apps page (myaccount.google.com/linkedapps): Google stops signing you in to our site, but the data we already have remain until you delete the account or ask us to delete them or to unlink Google, by writing to richieste@triesteaffitti.com (section 8).

4. “Send to a friend” feature

If you use the feature to share a property with another person, you confirm you have their consent to receive the message. We use the recipient's address only to send that single referral.

4a. The “Request this apartment” form

If you use “Request this apartment” on a listing, besides your contact details and the language you would like us to use you give us, as simple statements and without documents: the move-in date and length you need, the type of contract, how many people will live in the home (children only as a number), how they are related and any pets, who will sign the contract, the occupation and the employer, institution or university, the household's net monthly income as a band, the guarantees you can offer, whether you have an Italian tax code, for a temporary contract the category of the reason (never health data) and, if you wish, the names of the other adults and a few lines introducing yourselves. If you give us the names of other people, you confirm that you have told them about this notice. We use these data to call you back, to assess the request with you and to present a summary of it to the owner of the home (length, occupants, occupation, income band, guarantees, category of the reason for a temporary contract); the legal basis is the pre-contractual steps you ask us to take (Art. 6(1)(b) GDPR). The owner receives the summary as an independent controller, only to decide whether to proceed: the owner decides, no decision is automated and we do not calculate reliability or solvency scores. We do not ask for identity documents or proof of income in this form: we will ask for them later, only if needed and through a secure channel, with payslips redacted, never on WhatsApp. We keep the request for as long as it takes to assess it with the owner; if a contract follows, the data stay in the tenancy file for our legal obligations (section 5); if not, you can ask us to delete it at any time (section 8).

5. Processing and retention

Data is processed with electronic tools and appropriate security measures, and kept for as long as needed to handle the request and for subsequent legal obligations, after which it is deleted or anonymised.

6. Recipients and processors

Data may be handled by our authorised staff and by suppliers acting as data processors for the site's technical services (notably the agency's management system for contacts and accounts, which still relies on Airtable for some functions not yet migrated, Vercel for hosting and an email provider for sending emails). Data is not disseminated.

7. Non-EU transfers

Some suppliers may process data outside the European Union; where this happens, the transfer is based on appropriate safeguards (e.g. the European Commission's standard contractual clauses).

8. Your rights

You may at any time exercise the rights of access, rectification, erasure, restriction, objection and portability, and withdraw consent, by writing to richieste@triesteaffitti.com. You also have the right to lodge a complaint with the Italian Data Protection Authority.

9. Cookies

The site uses technical cookies required for operation and, only with your consent, Google Analytics 4 statistics cookies (Google Ireland Ltd) to understand how the site is used. Google’s tag loads on every visit in consent mode (Consent Mode v2), with analytics storage denied: until you choose it sets no statistics cookie, but it may send Google cookieless signals without identifiers, which Google uses for aggregate estimates. You can change your mind at any time via the “Cookie preferences” link at the bottom of every page. No advertising. Third-party services (e.g. maps, video) may set their own cookies when you activate their content. The technical cookie "contatore_no" (12 months) is set only if you ask not to be counted in the visit statistics, and it stores that choice.

10. Visit statistics without cookies

To know how many people visit our sites and which pages they read, we count page visits ourselves, without cookies and without needing your consent. For each page we record only the day, the page address (without parameters), the country, the type of device (computer, phone or tablet), whether it is the first page opened or a move within the site, the language of the page and, if you arrive from another site, its domain and the kind of source (for example a search engine or an email). We count a page only when there is a sign that a person is looking at it: a first gesture (tapping or clicking, moving the mouse, pressing a key, scrolling the page) or five seconds with the page visible on screen. The browser tells us so with a minimal request that contains no identifiers, as it does for every move from one page to another. In the same way we count, only as totals, clicks on the phone, WhatsApp and email buttons, the enquiries sent through the forms, page shares and the use of the assistant. Pages closed before a gesture or the five seconds, and everything reported by a browser that declares it is controlled by a program, are kept apart, only as totals, and do not enter the visit statistics. Of the page requests that reach the site's server we keep only the number, by country and type of device: it shows us how many come from automated programs. To estimate how many different visitors arrive in a day, the site computes a temporary code from your shortened IP address (without its last part) and your browser type, mixed with a random value that changes every day: the code is valid only for this site and that day, and at the end of the day it is deleted together with the random value, so that it can no longer be linked to anyone. The full IP address is never stored. We use this data only for aggregate statistics on the use of our sites: we do no profiling or advertising and we do not link it to the contact details you leave us. The legal basis is our legitimate interest in knowing how our sites are used (Art. 6(1)(f) GDPR); as first-party statistics treated like technical tools (Italian Data Protection Authority guidelines of 10 June 2021, section 7.2), no consent is required. The aggregate, anonymous counts are kept for 25 months. The data is processed on our behalf by Vercel Inc. (hosting, United States, under the Standard Contractual Clauses) and Neon Inc. (database, United Kingdom, a country covered by a European Commission adequacy decision). If your browser sends the Global Privacy Control signal, or if you use the link below to ask us not to count you, we do not compute the daily code and your pages remain only in the anonymous totals; the link stores your choice in a technical cookie for 12 months. The rights described in this notice still apply.

Don't count my visits · Count them again

11. The site's AI assistant

When it is active, the button at the bottom right opens an artificial-intelligence assistant, which says so up front. What you write to it is sent, digitally signed, to the management system (CRM) of TriesteVillas srl, where a model by Anthropic (Claude) drafts the answer from the listing data and the pages of this site. To answer, to check that the assistant does not get things wrong and to curb abuse, the CRM keeps the questions, the answers, the page and language you write from, the country, the IP address shortened (without its last part) and an encrypted fingerprint of the full address, used only to count questions; the team reads the conversations. The conversation also stays in the memory of this browser tab until you close it. After three answers the assistant offers to continue with a person from the team, through a letter with your name and an email or phone number: if you send it, a request is created in the CRM just as with the forms, with the questions you asked and what you wrote. The legal basis is your request (Art. 6(1)(b) GDPR) and, for the details you leave in the letter, the consent you give with the checkbox (Art. 6(1)(a)). Anthropic PBC (United States) processes the text on our behalf, with the safeguards in section 7: the transfer is based on the EU-U.S. adequacy decision (EU-U.S. Data Privacy Framework) if the provider participates in it, otherwise on the European Commission's standard contractual clauses (Art. 46 GDPR). Please do not write data that is not needed (identity documents, health or banking data): conversations without a name or contact detail are deleted 12 months after the last question; those that become a request follow the time limits of the request (section 5). The assistant decides nothing about you: who rents a home is decided by the owner and the team.

12. The emails we send you

Some of our emails contain personal links that recognise you without asking for a password: the page with your enquiry, the invitation to tell us how a viewing went and property proposals. When you open one of these links we record that you opened it and when and, where relevant, which property you looked at; for proposal pages we also record the IP address and the browser type, as proof and to recognise automated programs that open links on their own. We use this data to follow up on what you ask us (pre-contractual measures, Art. 6(1)(b) GDPR) and to understand which properties interest you (our legitimate interest, Art. 6(1)(f) GDPR); you may object to this at any time by writing to richieste@triestevillas.com. In our emails we do not insert images to find out whether you have opened them.

13. Changes

We may update this policy; the current version is always published on this page.