gnuranza.it

gnuranza.it

Privacy Policy

This page explains how personal data collected through the site, the contact form, the consent system, and any optional services enabled by the visitor is handled.

Data controller

gnuranza.it

Privacy contact

[email protected]

Last updated

March 28, 2026

Controller identity and contact details

The data controller is the contact identified on this page for the gnuranza.it website and for the property presentation, enquiry handling, and related digital tools.

Privacy requests can be sent to the address shown on this page. If the effective controller, representative, or DPO changes, this notice should be updated without undue delay.

Contact form and information requests

Data submitted through the form is processed to answer information requests, qualify interest in sale or rental, arrange possible viewings, manage follow-up contact, and document correspondence relating to the property.

The form collects name, email address, phone number, declared interest, message content, and the technical metadata strictly necessary for security, such as CSRF tokens, technical timestamps, and anti-abuse filters.

AI assistant and transparency on automated interaction

When the visitor uses the chatbot, they interact with an AI assistant intended only to provide general information about the property and the documentation made available by the controller. The chatbot does not make automated decisions that produce legal or similarly significant effects on the visitor.

The chatbot's replies may contain mistakes, omissions, or simplifications and should be verified before any economic, technical, or contractual decision is made. Visitors should not submit sensitive data, special-category data, or unnecessary personal information through the chatbot.

Cookies, preferences, and optional services

Cookie preferences are processed to respect the visitor's choices, block non-essential services until consent is granted, and keep a minimal technical record of the saved preference.

Optional functional and analytics services remain disabled by default until the visitor makes a valid choice, as described in the Cookie Policy.

Lawful bases

For the contact form, the lawful basis is normally the performance of pre-contractual steps requested by the data subject or, where necessary, the consent expressed through the form.

For preference management, security, minimal technical logging, and abuse prevention, the lawful basis may be the controller's legitimate interest in protecting the website and its systems.

Recipients and providers

Data may be processed by infrastructure and application providers that support hosting, reverse proxy or CDN services, server-side email forwarding, anti-abuse protections, optional widgets, and the technical operation of consent management.

The technical inventory of relevant services is listed in the Cookie Policy to reduce misalignment between code, banner settings, and legal documentation. When an optional service is disabled, its operational script or client-side connection is not loaded.

Transfers outside the EEA

If third-party services or technical infrastructure involve processing outside the European Economic Area, the controller must verify and document the lawful transfer mechanism, the applicable safeguards, and any supplementary measures that may be required.

Using providers on external domains or infrastructure does not automatically mean that all data is transferred outside the EEA, but the controller must still verify the actual data flow.

Retention

Requests received through the form are retained for the time necessary to handle the enquiry and any negotiations relating to the property, for a period proportionate to the stated purpose and the controller's defensive needs.

Technical consent records are retained for up to 180 days unless a longer period is strictly necessary for audit, security, or defence of rights. Security logs are minimized and stored only for the time needed to prevent abuse.

Data subject rights

The data subject may request access, rectification, erasure, restriction, objection, portability where applicable, and may lodge a complaint with the competent supervisory authority.

Privacy requests may be sent to the contact shown in this policy. Before answering a request, the controller may ask for minimal information needed to verify the requester's identity and protect third-party rights.

Content, AI, and intellectual-property disclaimer

Texts, photographs, videos, 3D assets, floor plans, layouts, code-driven visuals, and any other content published on this site remain protected by intellectual-property rights. Copying, scraping, editorial reuse, automated extraction, or republication, in whole or in part, is prohibited without prior written authorization.

The information published on the site and the chatbot replies are descriptive and informational only: they do not constitute a survey, irrevocable offer, contractual promise, or professional advice. Availability, measurements, features, energy performance, economic terms, and the property's legal or administrative status must be confirmed before any decision is made.

Relevant services and technologies

Relevant services and technologies

Technical inventory used to align configuration, banner behavior, pre-consent blocking, and legal documentation.

Site technical cookies and form protection

Necessary / technical

Session handling, CSRF tokens, rate limiting, consent preferences, and abuse prevention.

First-party, always active on the site domain.

Server-side locale and region resolution

Necessary / technical

Determine the initial language and whether the regional opt-out link should be shown.

Server-side only through reverse-proxy headers and Accept-Language.

Google SMTP relay

Necessary / technical

Server-side forwarding of messages submitted through the contact form.

Backend only, triggered when the user submits the form.

AnythingLLM embed

Functional

Optional conversational assistance for property-related questions.

Third-party script loaded client-side only after functional consent.

Elfsight WhatsApp Chat

Functional

Optional widget to open a WhatsApp contact flow through an external provider.

Third-party script loaded client-side only after functional consent.

Google tag / GA4

Analytics

Statistical measurement of visits and page views across the site.

Google tag loads on all pages with advanced Google Consent Mode: denied by default before choice, then updated automatically after consent.

Optional marketing or profiling

Marketing / profiling

Any future campaigns, remarketing, or profiling activities.

Currently inactive. Must only load after marketing consent.

Do not sell or share my personal information

Where applicable to your jurisdiction, use this link to read the regional notice and update your preferences.

Cookie preferences

Cookie and similar technology preferences

We use always-on technical cookies for security, session handling, consent storage, and the contact form. Chat, external widgets, and other non-essential tools are loaded only after your choice.