Notice for website users

Art. 13 – GDPR (EU/2016/679)

Dear User, pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data (GDPR), we inform you that the data you provide may be processed in accordance with the following.

DATA CONTROLLER
The Data Controller is ASTALEGALE.NET S.p.A., VAT No. 11761551008, with registered headquarters and administrative offices at Piazza Risorgimento 1, Carate Brianza (MB) - 20841, Italy. It can be contacted by email at info@astalegale.net, or by phone on the number 0362 90761.

DATA PROTECTION OFFICER (DPO)
The Data Controller has appointed as its data protection officer the company RP Advisor S.r.l., VAT No. 09694750960, with registered headquarters at Via Padre Masciadri, 2H - 22066 Mariano Comense (CO), Italy; telephone number: 031 2250748; email address: dpo@astalegale.net

PROCESSING
Dear user, this website shall collect any personal data that you may enter in the different areas indicated below:

1. "Log in/Register" Section

The data you enter in the form for accessing/registering for the Reserved Area for users will be processed as follows:

PURPOSE Accessing the Reserved Area and managing the personal account of the Reserved Area.
Creation of a personal account for access to the Reserved Area.
Management of user searches and preferences.
Potential participation in movable property auctions.
Signing up to receive notifications of listings matching your searches.
Signing up to receive information and commercial material about Astalegale.net's services.
LEGAL BASIS Art. 6, para. 1 point a) of the GDPR: the data subject has specifically and voluntarily elected to create a personal user account.
Art. 6, para. 1 point a) of the GDPR: the user has specifically and voluntarily asked to receive notifications of listings matching their searches.
Art. 6, para. 1 point a) of the GDPR: the user has granted their consent to receiving information and commercial material about Astalegale.net’s services.
DURATION OF DATA STORAGE The data provided will be stored:
Until you request the deletion of your personal account.
Until you request the deactivation of the personalised listings notification service.
Until you request the deactivation of the service for the receipt of information and commercial material about Astalegale.net’s services.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
Persons to whom access to the data is granted by law, regulations or EU legislation.
Persons handling real estate sales.
NATURE OF PERSONAL DATA PROVISION The provision of Data Subjects’ personal data is optional; however, if they fail to provide such data, Astalegale.net will not be able to provide the services indicated above.

2. “Contact Us” page

The data you send via the contact form will be processed as follows:

PURPOSE To deal with requests.
LEGAL BASIS Art. 6, para. 1 point a) of the GDPR: the data subject has specifically and voluntarily elected to send their personal data through the contact forms present on the website, which entails the acquisition of contact details for the sender which are necessary to reply, as well as all the personal data included in the messages.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to fulfil your request, and for no longer than 6 months in any case.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION The provision of Data Subjects’ personal data is optional; however, if they fail to provide such data, Astalegale.net will not be able to deal with their requests.

3. "Contact Details"

The data you send via the contact details indicated on the website will be processed as follows:

PURPOSE To deal with your requests and provide you with assistance.
LEGAL BASIS Art. 6, para. 1 point a) of the GDPR: the data subject has specifically and voluntarily elected to send their personal data through the contact details present on the website, which entails the acquisition of contact details for the sender which are necessary to reply, as well as all the personal data included in the messages.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to fulfil your request, and for no longer than 6 months in any case.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION The provision of Data Subjects’ personal data is optional; however, if they fail to provide such data, Astalegale.net will not be able to provide the services indicated above.

4. “Training courses” page

The data you enter in the forms will be processed as follows:

PURPOSE To enable you to enrol in our training courses and for activities connected with the performance of the service requested, as well as for the subsequent management of the relationship arising out of it.
To send you information relating to products and services similar to those being sold (so-called soft spam).
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party.
Art. 6, para. 1 point c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to organise, manage and deliver the training courses, and thereafter for the related formalities or legal obligations.
The data provided will be stored until the data subject requests the cessation of the soft spam, but for no longer than 24 months after termination of the contract in any case.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

5. Access to the Online Auction – Real Estate Sales – Public sales

The data you enter in the form used to access the portal for real estate sales - public sales via online auction will be processed as follows:

PURPOSE To enable professionals and participants to access the portal for participation in online real estate auctions - public sales.
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
DURATION OF DATA STORAGE The data provided will be stored for the entire duration of the contract, and thereafter for the related formalities or legal obligations.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

6. Access to the SpazioAste Real Estate Auction Portal (immobiliare.spazioaste.it)

The data you enter in the form for the creation of a personal user account and in the access form will be processed as follows:

PURPOSE Creation and management of a personal user account;
Access to the personal area of the website to enable use of the services relating to participation in the Online Real Estate Sales held through the SpazioAste Real Estate platform (immobiliare.spazioaste.it).
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party, or for steps at the request of the data subject prior to entering into a contract.
DURATION OF DATA STORAGE The data provided will be stored for the entire duration of the contract, and thereafter for the related formalities or legal obligations.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

7. “Access to the Online Auction – Movable Property Sales”

The data you enter in the form used to access the portal for movable property sales via online auction will be processed as follows:

PURPOSE To enable users and operators to access the portal for participation in online auctions of movable property.
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party, or for steps at the request of the data subject prior to entering into a contract.
DURATION OF DATA STORAGE The data provided will be stored until the completion of the auction, and thereafter for compliance with legal obligations.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

8. “Online Booking of Auction Rooms” Page

The data you enter in the form for access to “Enforcements Management” for Professionals will be processed as follows:

PURPOSE To access the “Enforcements Management” Reserved Area, which serves for the online publication of listings, the activation of online auctions, and the booking of the Auction Room.
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps prior to entering into a contract.
DURATION OF DATA STORAGE The data provided will be stored until you request the deletion of your personal account.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
Persons to whom access to the data is granted by law, regulations, or EU legislation.
Other parties duly registered within the reserved area of the portal.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

9. “Bid Bond Return Request” Page

The data you send via the form requesting the return of a bid bond will be processed as follows:

PURPOSE To enable users to submit a request for the return of the bid bond paid.
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party.
Art. 6, para. 1 point c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to fulfil your request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract as well as for compliance with a legal obligation.

10. “Manager's declaration pursuant to art. 10 of Italian Ministerial Decree 32/2015” Page

The data you send via the form will be processed as follows:

PURPOSE To request a declaration attesting that Astalegale.net has no conflict of interest with a given procedure.
LEGAL BASIS Art. 6, para. 1 point c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to fulfil your request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for compliance with a legal obligation.

11. “The Exercise of the Rights of Data Subjects” Page

The data you enter in the area dedicated to the exercise of the rights of data subjects and send to the email address will be processed as follows:

PURPOSE To follow up on your request regarding the exercise of a right pursuant to articles 15-22 of the GDPR.
LEGAL BASIS Art. 6, para. 1 point c) of the GDPR: processing is necessary for compliance with a legal obligation to which the controller is subject.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to fulfil your request, and thereafter in order to demonstrate compliance with that request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

12. “Code request and online auction activation form” Section

The data you send via the activation code request form for first access to the “Enforcements Management” Reserved Area, or via the access form, will be processed as follows:

PURPOSE To issue the activation code for access to the “Enforcements Management” Reserved Area of Astalegale.net.
To activate the online auction.
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party.
DURATION OF DATA STORAGE The data provided will be stored for as long as necessary to fulfil your request.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

13. “Request Certified Email Inbox” page

The data you send via the form to request a certified email inbox will be processed as follows:

PURPOSE To enable the purchase of a certified email inbox.
LEGAL BASIS Art. 6, para. 1 point b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is party, or in order to take steps at the request of the data subject prior to entering into a contract.
DURATION OF DATA STORAGE The data provided will be stored for the entire duration of the contract, and thereafter for the related formalities or legal obligations.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for the performance of a contract.

14. “Attend auction” Section

The data you enter in the form will be processed as follows:

PURPOSE To allow users to attend the online auction as a spectator, subject to approval by the receiver/auctioneer.
LEGAL BASIS Art. 6, para. 1 point a) of the GDPR: the data subject has specifically and voluntarily elected to send their personal data by filling out the form in question, requesting approval to attend the online auction as a spectator; this entails the acquisition of contact details for the sender which are necessary to reply, as well as all the personal data included in the messages.
DURATION OF DATA STORAGE The data provided will be stored until the conclusion of the online auction.
COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER Persons assigned responsibility for processing under the authority of the data controller.
Data processors designated by the data controller.
Receiver/Auctioneer of the online auction.
NATURE OF PERSONAL DATA PROVISION In order to achieve the purposes listed above, the communication of your personal data constitutes an essential prerequisite for fulfilling your request.

Any designated Data Processors will be bound to data security and confidentiality by means of a contract. An updated list of Data Processors can be requested from the Data Controller at any time.

RIGHTS OF THE DATA SUBJECT

In order to exercise your rights, as provided for in article 15 et seq. of the GDPR, you may send a request through the appropriate form provided on the website of ASTALEGALE.NET S.p.A., or contact the Data Controller or Data Protection Officer, who can both be contacted through the contact details indicated above, identifying yourself and specifying the nature of the request or the problem in question.

You may exercise the following rights with regard to your data: access, rectification, erasure, restriction, and the right to object to processing.

For processing subject to consent, the data subject shall have the right to withdraw his or her consent at any time. The withdrawal of consent shall not affect the lawfulness of processing carried out before the withdrawal of consent.

The exercise of some of the aforementioned rights could limit “Astalegale.net S.p.A.” in its processing of required data which are indispensable for the management of the relationship, making it impossible to provide the service.

You can exercise your rights by filling in the online form.

TRANSFER OF DATA TO THIRD COUNTRIES

Data processing will take place exclusively within the European Union.

RIGHT TO LODGE A COMPLAINT

If you believe that the processing of the data you have provided is in violation of legislation on the protection of personal data, you have the right to lodge a complaint with the Italian Data Protection Authority, with headquarters in Piazza Venezia 11 - 00186 Rome, Italy – Tel. 06.696771 - email: protocollo@gpdp.it.