Privacy Cookie Policy

Privacy Policy

For the purposes of this text, “website” refers to https://www.luxuryhomesolution.it/, iincluding all its pages, sections, and subsections.
User refers to any individual who visits the website, uses its services, communicates, or even simply accesses and/or views one or more pages of the aforementioned website.
For further definitions, such as that of personal data or others, please refer to the text of the aforementioned GDPR.
Please read this Privacy Policy carefully and thoroughly, as it applies whenever you access this website and/or browse it and/or use its services, regardless of the data processed. Therefore, by accessing the website, you consent to the Privacy Policy described herein. For any further information regarding data processing, you can contact the Data Controller at the email address indicated in point 1 of this Privacy Policy.

1. DATA CONTROLLER

• Sara Cecchinato
• VAT number IT5110950283
• E-mail: sara@luxuryhomesolution.it

For details regarding the Data Controller’s personal information, you may send a written request to the above email address.

2. TYPE OF DATA COLLECTED

• Browsing data: This refers to the set of data whose transmission is implicit in the use of Internet communication protocols. They are acquired, without any human intervention, autonomously by the computer systems and software procedures used to operate the website. This category includes, for example, the IP addresses or domain names of the devices used during navigation, the URI addresses of the resources requested, the date, date, and time of the request, the method used to submit the request to the server, the size and type of file obtained in response, the numerical code indicating the status of the response given to the server, and other parameters relating to the User’s operating system and IT environment.
  This data, which is necessary for the use of web services, is also processed for the purpose of obtaining statistical information on the use of the services and checking the correct functioning of the services offered.
• Data provided by the user: This refers to the set of data collected when the User sends a message to the email address referred to in Article 1 or makes contact by telephone or any other means, including via WhatsApp using the relevant support form, in order to receive information or commercial offers, request clarification, or for other reasons. This also includes commenting on articles on the website, leaving your name and email address. In this case, the voluntary sending of messages to the contact addresses, as well as the completion and submission of the forms therein, entails the acquisition of the sender’s contact details and all personal data included by the user in the communications and/or requested by the completion of the relevant form: all data provided will be processed in order to fulfill the User’s request.
  This also applies when using the appointment scheduling tool provided by Calendly LLC, implemented on this website, through which you are connected to the Data Controller’s Calendly appointment account. After selecting the appointment, confirming it, and entering your contact details and requests, you will receive a confirmation email from Calendly. Further information about Calendly and data protection is available at https://calendly.com/privacy.
• Data collected through cookies: This refers to the information contained in cookies, which is sent back to the servers when the user returns to visit the site. Cookies are text files that the servers of the sites visited can store in the memory of the devices used by the user: in this regard, please refer to the Cookie Policy on the website.
• Newsletter subscription data: This refers to the data entered by the user to subscribe to the Newsletter, in which the first name, last name, and email address are requested via a specific form. In this case, the data is useful and preparatory for the purpose of receiving updates and commercial communications. Depending on the case, this marketing activity may be carried out through third-party service providers such as: Mailchimp https://www.intuit.com/privacy/statement/, in relation to which the Data Controller has undertaken to collect and maintain all necessary permissions and valid consents required to legally transfer the data and to allow such data to be legally collected, processed, and shared by Mailchimp for the purpose of providing the Service.
• Purchase, billing, and payment details: This data is collected in order to allow the order to be placed and the products and/or services on the website to be purchased. The Data Controller receives the information directly from the user via the registration and payment form.
  In particular, the following data is collected:
  – identification data, personal data and, more generally, personal details such as name, surname, place and date of
  birth, residence, domicile, email address and telephone numbers, which are also useful for any shipments;
  – data relating to payment and billing methods, as well as administrative, accounting and tax data.
• Review data: This refers to data entered by users to review purchased products and/or services, for which the user’s first name, last name, and email address are requested via a specific form. In this case, the data is useful and necessary for the purpose of publishing the review.
  If reviews are published on Google as indicated at https://support.google.com/maps/answer/6230175?hl=en, the rules of that service apply.

All the information mentioned above is provided solely for the purposes related to this website and not for any other websites that may be accessed via links. Therefore, the Data Controller shall not be held liable for any personal data processed independently by the provider of the platform connected via links.

3. MANDATORY OR OPTIONAL PROVISION OF PERSONAL DATA

In cases where the nature of the provision is to be defined as mandatory, the relevant text field in the form on this website will be expressly indicated as such, including through the use of symbols or graphic signs.

If, in the presence of such fields marked as mandatory, the User does not provide the requested information, it will be objectively impossible for the Data Controller to manage the pre-contractual/contractual relationship and communication/purchase/sale.

In summary, failure to provide the data in question will prevent the establishment of the relationship.

4. PURPOSE OF THE PROCESSING AND RELATED LEGAL BASIS

The data are processed, subject to explicit consent pursuant to Art. 6, letter a, GDPR, for the following purposes:  

• Marketing, profiling, and commercial promotion, sending information, updates, and news about products, services, and promotions via all digital and/or paper communication tools. At any time, the User has the right to revoke their consent to receive promotional information by communicating their intention in writing to the email address referred to in Article 1, or by following the procedure activated via the link at the bottom of the communications received by email, which allows them to cancel their subscription.

• Publish reviews of products and/or services previously purchased by the user.

At any time, the User has the right to revoke their consent to the publication of the review uploaded to the website by communicating their intention in writing to the email address referred to in Article 1.

The data is processed, without prior express consent pursuant to Article 6, letters b, c, f, GDPR, for the following purposes: 

1. to allow the User to join the community and receive paper and/or digital communications on the legal basis of contractual fulfillment;
2. fulfilling orders, processing payments, shipping products and/or providing services, providing the resulting customer assistance and support activities on the legal basis of the execution of pre-contractual and contractual measures, adopted at the customer’s request;
3. comply with all legal, tax, accounting, and administrative obligations;
4. provide information on products or services similar to those already purchased and measure the degree of satisfaction with the products or services purchased. At any time, the User has the right to revoke the consent given, by communicating this in writing to the email address referred to in Article 1, or by following the procedure that can be activated via the link in the communications received by email, which allows the User to cancel their registration;
5. fulfill the User’s requests and inquiries and respond to questions and issues raised through the contact tools at their disposal. The legal basis is the legitimate interest of the Data Controller in providing customer service, in addition to information on products and services, the development of new products and/or services, the implementation of existing ones, and the general achievement of a higher degree of efficiency;
6. to implement an adequate defense in the appropriate judicial and extrajudicial forums in the event of any dispute with the User.

At any time, the User has the right to revoke the consent given, by communicating this in writing to the email address referred to in Article 1.

All data collected is processed solely for purposes related to this website and not for other websites that may be accessed via links or social buttons on this website. Therefore, the Data Controller shall not be held responsible for the processing of data carried out independently by the owners of platforms connected via links and/or social buttons. . Please note that this website is autonomous and independent from the websites and/or platforms referred to by the aforementioned links and/or social buttons.

5. METHOD OF PROCESSING

The data is processed by the Data Controller using electronic and telematic methods, without prejudice to the possibility of processing it in paper form.

The processing of personal data may include any type of operation, including collection, recording, modification, storage, organization, consultation, processing, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction. In any case, data is collected and processed for specific, explicit, and legitimate purposes, and used in terms compatible with the purposes indicated in point 4. All this is done by adopting security measures that are as appropriate as possible in order to minimize the risks associated with such activities and, in particular, where deletion or destruction are not part of the processing, in order to avoid such eventualities, as well as to prevent unauthorized access or processing that is not permitted and/or does not comply with the purposes.

6. PLACE OF PROCESSING

The data is processed at the Data Controller’s headquarters and on the hosting servers, which are considered third parties with respect to the Data Controller and are not under its direct control.

7. RETENTION PERIOD

The data is processed for the time necessary to fulfill the service requested by the User, coinciding with the achievement of the purposes for which it was collected, and in any case, no later than 10 years from that date.
At the end of the retention period, the data will be deleted.
For marketing purposes only, this period is reduced to 24 months from the last interaction and in any case never exceeds 10 years.

8. DISCLOSURE OF PERSONAL DATA

Data processing is carried out by the Data Controller and by personnel appointed by the Data Controller to perform tasks relating to the proper management of contractual and marketing relationships with customers, potential customers, and suppliers.

The data controller undertakes not to disclose personal data, except with the prior consent of the User, to persons other than the data controller’s employees and/or professionals, collaborators, and third parties (natural or legal persons) who perform activities on behalf of the data controller and who need to know such data for the sole purpose of carrying out the requested activities.

In particular, the data may be disclosed to:

• individuals who need access to data within the limits strictly necessary to achieve purposes ancillary to the contractual relationship;
• individuals and companies that collaborate with the Data Controller, within the limits necessary to perform their professional duties, including, in particular, bookkeeping or the completion of legal procedures.

In this regard, these parties will act as Data Processors.

The aforementioned parties, duly appointed pursuant to Article 28 of the GDPR, will process the data in full compliance with this Privacy Policy and current legislation: the list of these parties is available upon written request by the data subject, including by email to the address indicated in point 1, to be addressed to the Data Controller.

By virtue of national and European legal provisions and/or those of the competent authorities, The data may also be communicated or made available to public or private entities indicated by them, within the limits and for the purposes specified therein. Only strictly necessary information will be provided to the aforementioned entities.

9. RIGHTS OF THE DATA SUBJECT

The data subject has the right to receive accurate information about the processing of their data, as established by Articles 12 et seq. of the GDPR.

At any time, pursuant to Articles 15 et seq. of the GDPR, the data subject has the right to exercise their rights of access to data, relating to  rectification, erasure, or restriction of processing; requesting and obtaining information and clarification regarding the purposes and aims of the processing, the categories of personal data, the recipients to whom the data have been disclosed, and the relevant retention period. For further information on the rights of the data subject, please refer to Articles 15-22 of the GDPR.

The right to revoke consent previously given is always recognized and may be exercised by sending an email to the address specified in point 1, addressed to the Data Controller.

We also note the right under the law to lodge a complaint with the supervisory authority, the Italian Data Protection Authority, as provided for in Article 77 of the GDPR, or to take appropriate legal action pursuant to Article 79 of the same text.

All of the above rights, with the exception of complaints to the supervisory authority and the courts, may be exercised by sending a specific request to the email address indicated in Article 1.

With particular reference to erasure, you have the right to request the erasure of your personal data, which will be erased upon request, except in cases where there are circumstances that prevent this under the law, such as the existence of a contract or the existence of debt/credit relationships. Similarly, data cannot be erased in cases where there are retention obligations.

It should also be noted that, pursuant to Article 23 of the GDPR, and only under certain circumstances, EU Member States have the right to restrict certain rights of data subjects. We reserve the right to exercise this right, always in compliance with the relevant EU and national legislation, in exceptional cases where this is provided for.

10. LINKS AND SOCIAL BUTTONS

Everything contained in this policy is intended to apply solely to the website on which it is posted.

It is in no way valid for other sites and/or platforms in any way connected to this site and accessible by the User via links and social buttons.

Social buttons are links on the web page that display social network icons to facilitate sharing and interaction on a specific social network chosen by the user.

The data processing carried out by these external parties is independent of that carried out on this website, and we therefore ask you to refer to their respective privacy policies, which can be consulted free of charge at the following links:

• Facebook: https://facebook.com/about/privacy
• Instagram: https://help.instagram.com/519522125107875
• YouTube: https://policies.google.com/privacy?hl=en
• TikTok: https://www.tiktok.com/legal/page/eea/privacy-policy/en

11. TRANSFER OF PERSONAL DATA

Personal data will not be transferred outside the European Union. Any transfer to countries outside the European Union, where necessary and previously authorized by the User, will be carried out in accordance with Articles 44 et seq. of the GDPR, i.e., ensuring the best measures for the protection of such data.

12. MINORS

Minors under the age of 16 are not required to provide any personal information or data without the consent of their parents or legal guardians.

13. UPDATES AND CHANGES

In the future, the Data Controller reserves the right to modify and/or update, in whole or in part, this document, also in consideration of possible regulatory changes on the subject matter in question. Users are advised to consult the page regularly to view any updates.

This document was last updated on July 9, 2025.