top of page

INFORMATION ON THE PROCESSING OF PERSONAL DATA

art. 13 EU Regulation 2016/679 (GDPR)

 

This policy describes how we process users' personal data collected through this website https://www.elpiss.it/

 

1. WHO IS THE DATA CONTROLLER?

The data controller is Immobiliare LAMI Srl, VAT number and tax code 00182330126, with registered office in Busto Arsizio, Via Orrù no. 1.

For any need, you can contact us at elpiss2023@gmail.com

 

2. WHAT PERSONAL DATA WE PROCESS

The personal data collected through this website and which we process are:

1. data voluntarily communicated by filling out the contact form, such as:

  • identification and contact data such as name, surname, email, telephone number and any personal information included in the request

  • any special data included in the request For special needs (e.g. health data to verify accessibility to the facility

2. Browsing data , i.e., data collected by computer systems whose transmission is implicit in the use of internet communication protocols (e.g., IP address, domain name of the device used to connect to the site, the time of the site access request and the response received, etc.). This data is not collected to be associated with a specific individual, but by its very nature, it could allow you to be identified if processed and associated with data held by third parties (for example, to detect any crimes against the site).

3. Cookies and similar technologies (for any information on the use of cookies, you can consult the specific information available here).

​

3. WHY WE PROCESS DATA, ON WHAT LEGAL BASIS AND HOW LONG WE KEEP IT

PERSONAL DATA
PURPOSE
LEGAL BASIS
CONSERVATION
a) identification and contact data
a1) manage user requests (answer questions, quotes) a2) in case of booking, execute the contract and fulfill legal obligations (e.g. invoices, communications to the authorities) a3) ascertain, exercise or defend a right, including in court
a1) carry out pre-contractual measures arising from the user's request a2) execute a contract and fulfill legal obligations a3) legitimate interest in defense; fulfilling a legal obligation
until the request is handled and subsequent contacts are made In case of reservation: for the duration of the contract and then for 10 years for legal obligations (fiscal and civil)
b) any special data communicated voluntarily
b) manage user requests (e.g., check accessibility to the facility)
b) consent
for the time necessary to manage the request
c) navigation data
 c 1) allow access and navigation of the site c2) ascertain, exercise or defend a right, including in court c3) carry out any statistical analysis on aggregate or anonymous data, without identifying the user, to evaluate the functioning of the site
 c 1) carry out pre-contractual or contractual measures arising from access to the site c2) legitimate interest in defense; fulfill a legal obligation c3) legitimate interest
for the time necessary for the operation and security of the site
d) emails from customers or former customers
d) send commercial communications (e.g. promotions, news, reserved initiatives) relating to services similar to those already used
d) legitimate interest (art. 130 c. 4 Legislative Decree 196/2003)
up to the opposition
e) emails from potential customers who have requested information
e) send commercial communications (e.g. promotions, news, reserved initiatives)
e) consent
until consent is revoked

Providing personal data is optional but necessary to respond to the user's request.

For purposes a2) - a3) - c2), processing may be necessary to fulfill a legal obligation.

You may withdraw your consent to consent-based processing or object to commercial communications based on legitimate interest at any time by writing to elpiss2023@gmail.com

 

4. HOW WE PROCESS PERSONAL DATA

The data is processed using computer and paper-based tools , adopting appropriate security measures to prevent loss, illicit, or unauthorized use. The data is not used for automated decision-making processes.

 

5. TO WHOM WE MAY DISCLOSE PERSONAL DATA

The data may be disclosed only to those who need it for the purposes indicated in Article 3. This could include:

  • our internal staff authorized to process, trained and bound to confidentiality

  • professionals , consultants and suppliers of technical services (e.g. for IT management) and

  • public authorities as required by law or by a provision of the authority

These entities act as independent data controllers, data processors, or authorized persons.

For some services, we use suppliers (e.g., email , website hosting) who may be based in, or transfer data outside, the European Economic Area; the transfer is carried out in compliance with the law, based on adequacy decisions or other appropriate safeguards provided for by the GDPR.

Personal data will not be disclosed or published.

 

6. WHAT ARE THE RIGHTS OF THE INTERESTED PARTY?

You can write to the owner at any time by sending an email elpiss2023@gmail.com for:

  • request confirmation of the existence of personal data, limitation or opposition to the processing

  • access, rectify, delete data or obtain portability

  • withdraw consent at any time, without affecting the lawfulness of the previous processing.

You can lodge a complaint with the Italian Data Protection Authority.

 

 

[updated June 2026]

bottom of page