Privacy notice

Version 1.0-draftIn force from [—]Last updated [—]The Italian version prevails

01Who processes your data

In brief

The data controller is MUNDIDA S.r.l., which operates EasyCasa. You can write to us at any time at the address indicated below.

To complete — legalFull legal name, registered office, VAT number, REA, PEC, privacy e-mail address, and any DPO with contact details (mandatory if appointed under Art. 37 GDPR).

02What data we collect

In brief

We collect what you give us — name, contact details, the messages you send — and some technical data generated by using the site. We do not collect special-category data (health, political opinions, sexual orientation) and we do not want it: if you write it in a message, we ask you to remove it.

Category	Examples	From
Identifiers	First name, last name, e-mail, phone	from you
Content	Information requests, viewing notes	from you
Listings	Property address, photos, documents	from you
Consents	Consent log with date and version	generated
Technical	IP address, device, pages visited	generated
Financial verification	Status, indicative band, expiry	Banks4All, with your consent

Full text

To complete — legalDetailed list of categories under Art. 13 GDPR, indicating mandatory and optional data and the consequences of refusal.

03Why and on what legal basis

In brief

Most processing is to let you use the service you asked for: in those cases we do not ask for consent, because the basis is the contract. We only ask for consent where it is truly needed — for marketing and for sharing the financial verification with the owner — and you can withdraw it at any time.

Purpose	Legal basis
Manage your account and contact requests	Art. 6.1.b — contract
Book and manage viewings	Art. 6.1.b — contract
Site security and abuse prevention	Art. 6.1.f — legitimate interest
Tax and anti-money-laundering obligations	Art. 6.1.c — legal obligation
Share financial verification with the owner	Art. 6.1.a — consent
Commercial communications	Art. 6.1.a — consent

Full text

To complete — legalConfirmation of legal bases, description of legitimate interest and the related balancing test, references to anti-money-laundering rules applicable to mediation activities.

04Who we share it with

In brief

With property owners for whom you submit a request — that is the point of the service. With providers who help us make it work, bound by contract. With authorities, if the law requires it. We do not sell your data and we do not hand it to agency networks.

Full text

To complete — legalList of recipient categories, qualification of each as processor under Art. 28 or independent controller, and treatment of the intragroup relationship with Banks4All.

05How long we keep it

In brief

For as long as needed, then we delete it automatically. Some data is kept longer because the law requires it — in that case we cannot erase it on request, and we tell you clearly instead of pretending we did.

To complete — legalTable of retention periods by category, with the legal basis for each mandatory retention. Periods must match those implemented in the automatic purge job.

06Transfers outside the EU

In brief

Your data stays in the European Union. If a provider were to process it elsewhere, we state that here with the safeguards applied.

To complete — legalReview of every sub-processor. If transfers exist, indicate country, safeguards under Arts. 44–49, and how to obtain a copy.

07Your rights

In brief

You can see what data we hold, correct it, download it, request erasure, object to certain processing, and withdraw consents. Most of this you can do yourself, immediately, without writing to us.

Right	Where
Access and copy of data	My data
Rectification	My data
Erasure	My data
Withdrawal of consents	My data
Objection, restriction, portability	by writing to us
Complaint	Garante privacy

08How to exercise them

In brief

From the My data page for almost everything, or by writing to the address indicated. We reply within one month. If you think something is wrong, you can contact the Italian Data Protection Authority (Garante) without contacting us first.

To complete — legalDedicated e-mail address, identity-verification method for the requester, and full contact details of the Garante.

09Changes to this notice

In brief

If we change something substantial we will tell you; we will not merely update the date. Previous versions remain available so you can see what changed and when.

Want to see what we hold about you?

No need to write to us. Sign in and find everything — data, consents, export and erasure — on one page.

Go to My data