Last updated: August 2026
Privacy Policy
Information provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 ("GDPR") to visitors of this website, to those who use the forms available on it — the contact form and the forms on the Properties page — and to clients who are granted access to the reserved "Project Tracker" area.
Data Controller
The Data Controller is CO.RE Immobiliare di Paolo Concetti, registered office at Via De Gasperi 38/16, 61022 Vallefoglia (PU), Italy, VAT no. 02851370417, reachable at info@coreimmobiliare.it.
Data collected
Through the form on the Contact page we collect: first and last name, email address, phone number (optional) and any message written by the user. The website does not collect any other personal data beyond what users voluntarily provide through the forms.
Through the forms on the Properties page we additionally collect: first name, last name, email address and phone number. The property proposal form also collects the type, floor area and location of the proposed property, the nature of the request (sale or valuation), any notes entered, and the files uploaded by the user, such as photographs, floor plans, land registry records and other documentation relating to the property. The search request form instead collects the requirements for the property sought: type of transaction, property type, area of interest, budget range, floor area, number of bedrooms, need for a garage or parking space, timeframe and any notes. Should the uploaded documents contain personal data relating to third parties, the user declares that they are entitled to disclose them: such data is processed solely to assess the proposal and is not used for any other purpose.
Clients granted access to the reserved "Project Tracker" area are associated with: identification and contact details (company name or full name, email address, telephone number, contact person, alternative contact, tax code or VAT number, address); access credentials, consisting of the email address and an encrypted password that the Controller is unable to read; information about the projects being followed (name, progress stages, dates, published updates); and the documents uploaded during the relationship, such as land registry records, floor plans, appraisals, permits and identity documents. The area also contains internal notes, visible only to the Controller and its collaborators, and a log of the operations carried out within it.
Purpose of processing
Data is processed solely to respond to contact requests and provide information about the real estate consulting services requested by the data subject.
The data and documents submitted through the forms on the Properties page are processed in order to assess the proposed property or estimate its value, to search for properties matching the requirements indicated by the data subject, and to contact them regarding a possible collaboration. They are not used for marketing purposes, nor disclosed or communicated to parties other than those listed in the "Recipients and data processors" section.
Data and documents held in the reserved area are processed in order to provide the advisory and project management services entrusted to the Controller, to allow clients to follow the progress of their own project, to store and share the documentation relating to the matter, and to comply with the legal obligations connected to the relationship. Clients receive a notification email when an update is published on their project: the message does not contain the content of the update, only an invitation to sign in to the reserved area.
Legal basis
Processing is based on the explicit consent of the data subject (Art. 6(1)(a) GDPR), given through the dedicated checkbox in the website forms, and on the performance of pre-contractual measures taken at the data subject's request (Art. 6(1)(b) GDPR).
For clients of the reserved area, processing is based on the performance of a contract to which the data subject is party (Art. 6(1)(b) GDPR) and, as regards the retention of documentation, on compliance with the legal obligations to which the Controller is subject (Art. 6(1)(c) GDPR).
Processing methods
Processing is carried out using IT tools, adopting technical and organizational security measures adequate to prevent unauthorized access, loss or disclosure of data.
Access to the reserved area is personal and password-protected: the data subject is required to change the password on first sign-in and to keep it secure. Data is stored in a database with controlled access, in which each user can read only the information concerning them; documents are kept in non-public storage and are made available solely through temporary links generated at the time of the request. Internal notes and documents not marked as shared are never visible to the client.
Recipients and data processors
To send emails generated by the contact form we use the provider Resend (Resend, Inc.), acting as data processor. Sending may involve a transfer of data to servers located in the United States; such transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of protection.
For the operation of the reserved area — database, authentication and document storage — we use the provider Supabase (Supabase, Inc.), acting as data processor. Data is hosted on servers located in the European Union (Ireland). Should the provider access the data from outside the European Economic Area for technical support purposes, such transfer takes place on the basis of Standard Contractual Clauses approved by the European Commission.
Retention period
Data collected through the website forms is retained for as long as necessary to handle the request and in any case no longer than 24 months from the last contact, unless otherwise required by law. Files attached to property proposals are retained for the same period and are deleted earlier upon the data subject's request.
Data and documents held in the reserved area are retained for the entire duration of the relationship and, after it ends, for ten years, in accordance with the statutory document retention obligations, in particular Article 2220 of the Italian Civil Code. Access to the reserved area is deactivated when the relationship ends. Data subjects remain free to request the erasure of data not subject to retention obligations.
Data subject rights
At any time you may exercise the rights provided by Articles 15-22 GDPR (access, rectification, erasure, restriction of processing, data portability, objection, withdrawal of consent) by writing to info@coreimmobiliare.it. You may also lodge a complaint with the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali, www.garanteprivacy.it) or your local supervisory authority.
Cookies
For information about the cookies used by this site, see our Cookie Policy.