Information on the processing of personal data pursuant to art. 13 of regulation (eu) 2016/679 ("GDPR")

Data controller

JARVES S.R.L. - Corso Garibaldi 95 - 20121 Milan

Why is your personal data processed and what condition makes the processing lawful? Is the provision of data compulsory?

1. Real estate brokerage services
Responding to enquiries about properties to rent or buy and organising property visits.
The legal basis legitimising the processing of personal data is the performance of the contract.
The provision of data is compulsory for the achievement of the purposes listed above; therefore, refusal to provide the data does not allow the data controller to respond to the request or to organise a visit to the property.
For the duration of use of services and, after termination, for 12 months.

2. Fulfilment of contractual and legal obligations
Fulfilment of contractual obligations (proposals, lease contracts, preliminary purchase-sale contracts).
Consent is the legal basis that legitimises processing.
The legal basis applicable to the processing of personal data is the performance of the contract. Fulfilment of accounting or tax obligations (customer list; VAT-relevant transactions).
The legal basis for processing personal data is the fulfilment of a legal obligation. The provision of data is compulsory for the achievement of the purposes listed above; therefore, refusal to provide data does not allow the data controller to fulfil its contractual and legal obligations.
For the duration of use of services and, after termination, for 10 years.
For the retention periods provided for by the individual and specific laws applicable in relation to the processing carried out for such purposes.

3. Marketing
Sending by JARVES S.R.L. of commercial or advertising communications including on events, services, updates by both traditional (paper mail, telephone calls) and automated (e-mail and newsletter) methods.
Consent is the legal basis that legitimises processing.
It is understood that consent to the processing of data for the above-mentioned purpose is purely optional; therefore, in the event of refusal to processing, the data will only be processed for the purposes indicated in sections 1 and 2.
For a maximum period of 24 months after collection, unless consent is revoked.

After the above-mentioned retention periods, the personal data will be destroyed, erased or made anonymous, in accordance with the technical erasure and backup procedures.

Categories of data processed

The data being processed are the data requested when you applied to use our services as well as those that may be collected later.

Personal data (name and surname).

Contact data (mobile phone number, landline phone number, e-mail address);

Data recipients

The data may be processed only by employees of the company functions authorized to process them as they are assigned to achieve the above purposes. These employees have received appropriate operational instructions in this regard.

Data may be disclosed within the scope of the purposes stated to:

• contractors for the management of building variants;
• professional and consultancy firms;
• public bodies for the fulfilment of accounting and tax obligations.

The data may be processed by external parties expressly appointed as data processors and in particular:

• companies offering commercial management services;
• companies offering administrative services;
• companies offering IT services and/or software development and maintenance services.
• companies offering mailing and newsletters services

The list of data recipients is constantly updated and can be obtained easily and free of charge by sending a written communication to the data controller at the above addresses or an e-mail to privacy@jarves.com.

Data transfer outside the EU

Data are NOT transferred to non-EU countries.

Rights of the data subject

You may request from the Data Controller access to your personal data, their rectification or erasure, integration of incomplete personal data, processing limitation in the cases provided for by Article 18 GDPR as well as the objection to processing in cases of legitimate interest of the Data Controller.
You also, for those cases where processing is based on consent or contract and is carried out by automated methods, have the right to exercise the right to data portability, i.e., to receive in a structured, commonly used and machine-readable format your personal data and, if technically feasible, to transmit them to another data controller without impediment. You may at any time lodge a complaint with the Data Protection Authority, as well as have recourse to the other protection methods provided by the applicable legislation.
You have the right to withdraw your consent at any time for marketing purposes, as well as to object to the processing of your data for marketing purposes, including direct marketing. Without prejudice to the possibility for the concerned party, who prefers to be contacted for the above mentioned purpose exclusively through traditional methods, to state his/her opposition only to the receipt of communications through automated methods.

These rights may be exercised by sending a written communication to the Data Controller at the above address or an e-mail to privacy@jarves.com.