Privacy Policy

01

Data Controller

The party responsible for data processing on this website is:

Andrej Avi
Tuscany, Italy
Email: info@andrejavi-realestate.com
Phone: +39 378 092 1911

02

Collection and Processing of Personal Data

When you visit this website, technical data is automatically collected by our web server (so-called server log files). This includes:

• IP address of the requesting device
• Browser type and version
• Date and time of access
• Page visited and referrer URL

This data is used exclusively to ensure the smooth operation of the website and to improve our services. It is not possible to identify you personally from this data. The data is automatically deleted after 30 days.

When you contact us via the contact form, the following data is collected:

• First and last name
• Email address
• Phone number (optional)
• Your message

No registration or creation of a user account is required.

03

Legal Basis

The processing of your personal data is based on the following legal grounds under the GDPR:

• Art. 6(1)(b) GDPR — Pre-contractual measures: When you contact us via the contact form, we process your data to handle your enquiry as part of pre-contractual measures.
• Art. 6(1)(b) GDPR — Performance of a contract: Where data processing is necessary for the performance of an existing contractual relationship.
• Art. 6(1)(f) GDPR — Legitimate interest: The collection of server log files is necessary for the secure and stable operation of the website.
• Art. 6(1)(a) GDPR — Consent: Marketing cookies (Meta Pixel, Google Ads) are only processed after your explicit consent.

04

Contact Form

When you send us a message via the contact form, your details (name, email address, phone number, and message) are stored for the purpose of processing your enquiry and for any follow-up questions.

Your data is used exclusively to respond to your enquiry and is not shared with third parties. Retention periods: Contact enquiries without a contractual relationship are deleted after 2 years. Data within a contractual relationship is retained for the duration of the engagement plus 2 years. Statutory retention obligations (e.g. tax documentation: 10 years) remain unaffected.

You may revoke your consent to data processing at any time by sending an email to info@andrejavi-realestate.com.

05

Cookies

This website distinguishes between technically necessary and optional cookies:

Technically necessary cookies are used to store your language preference and cookie consent. These do not contain any personal data. Consent is not required for these cookies pursuant to Art. 6(1)(f) GDPR.

Marketing cookies are only loaded after your explicit consent via the cookie banner. These include cookies from Meta (Facebook Pixel) and Google (Google Ads). You may revoke your consent at any time via the cookie banner.

06

Third-Party Services

This website uses the following external services:

Plausible Analytics

We use Plausible Analytics (Plausible Insights OU, Estonia) for website usage analysis. Plausible does not collect any personal data, uses no cookies, and is fully GDPR-compliant. Only aggregated, anonymised usage data is recorded. More information: plausible.io/data-policy.

Meta Pixel (Facebook)

After your consent, the Meta Pixel (Meta Platforms, Inc., USA) is loaded to measure the effectiveness of advertising campaigns. Data such as page views and contact enquiries may be transmitted to Meta. The pixel is only activated after explicit consent via the cookie banner. More information: Meta Privacy Policy.

Google Ads and Google Consent Mode

After your consent, Google Ads tags are loaded (Google LLC, USA). We use Google Consent Mode v2, which means no data is transmitted to Google without your consent. Conversion tracking and remarketing are only activated after explicit consent. More information: Google Privacy Policy.

Cloudflare

This website is served via Cloudflare (Cloudflare, Inc., USA). Cloudflare acts as a Content Delivery Network (CDN) and processes technical connection data (IP address, browser type) for the purpose of delivering and securing the website. The legal basis is Art. 6(1)(f) GDPR. More information: Cloudflare Privacy Policy.

Fonts

All fonts used on this website are self-hosted. No connection to external font servers is established.

Resend (Email Delivery)

We use the Resend service (Resend, Inc., USA) to send contact form messages. The data entered in the form (name, email, message) is transmitted via the Resend API. More information: Resend Privacy Policy.

WhatsApp

This website contains a link to WhatsApp (Meta Platforms, Inc.). Clicking the link opens the WhatsApp application on your device. No automatic tracking by WhatsApp takes place on this website.

07

International Data Transfers

Some of the third-party providers listed above (Meta, Google, Cloudflare, Resend) are based in the United States. Data transfers are conducted on the basis of the EU-U.S. Data Privacy Framework (DPF), to which these companies are certified, supplemented by Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Plausible Analytics (Plausible Insights OÜ) is based in the EU (Estonia). No data transfer to third countries takes place.

08

Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR) — You have the right to obtain information about the personal data stored about you.
• Right to rectification (Art. 16 GDPR) — You may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR) — You may request the deletion of your personal data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR) — Under certain conditions, you may request the restriction of the processing of your data.
• Right to data portability (Art. 20 GDPR) — You have the right to receive your data in a commonly used, machine-readable format.
• Right to object (Art. 21 GDPR) — You may object to the processing of your data at any time.

To exercise your rights, please contact: info@andrejavi-realestate.com

You also have the right to lodge a complaint with a supervisory authority. The competent supervisory authority in Italy is the Garante per la protezione dei dati personali (www.garanteprivacy.it).

09

Data Security

This website uses SSL/TLS encryption for security purposes. You can recognise an encrypted connection by the browser address bar changing from "http://" to "https://" and a padlock icon being displayed.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties. We also employ appropriate technical and organisational measures to protect your data against loss, destruction, access, or disclosure by unauthorised persons.