Privacy notice on the processing of personal data

1. Data controller Art. 13(1)(a)

Sai Quanto — Via Corteccia 28, Firenze — VAT no. 07527560481.
Contact for any matter relating to personal data: info@saiquanto.it.

2. Data protection officer Art. 13(1)(b)

No data protection officer (DPO) has been appointed: none of the cases provided for in Article 37 of the Regulation applies. For any request, contact the controller directly, at the address given above.

3. Data processed, purposes and legal basis Art. 13(1)(c)

↻Rotate your phone to see the whole table

We ask you not to write in your messages any data that is not needed to reply, and in particular no information about health, or about the family or financial circumstances of other people (special categories, Art. 9 of the Regulation).

4. Providing your data Art. 13(2)(e)

No data is required by law or by contract: you write to us if you wish, and you decide what to write. The only essential piece of data is the email address you write from, because without it we can neither reply nor send the weekly update. The other information we suggest you include only helps us give you a more precise answer: not providing it has no consequences.

5. Recipients of the data Art. 13(1)(e)

The data is not disclosed, not sold and not passed to third parties for commercial purposes. The site collects nothing: there are no forms, and no data collection service receives what you write to us. Only the following may come to know it:

• Aruba S.p.A., provider of the mailbox info@saiquanto.it, on whose servers messages are received and stored — provider's privacy notice.
• Cloudflare, Inc., provider of the infrastructure on which the site is published, which processes only the technical connection data of those who visit the pages — provider's privacy notice. Cloudflare neither sees nor receives the content of the messages you send us: those travel by email, outside this site.

6. Transfers outside the European Economic Area Art. 13(1)(f)

The content of messages does not leave the European Union. The mailbox info@saiquanto.it is hosted by an Italian provider, on servers in Italy: what you write to us arrives there and stays there.

The only processing that involves a transfer to the United States concerns the technical connection data of those who visit the site, handled by Cloudflare. In its own notice, Cloudflare states that it adheres to the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on July 10, 2023: the transfer takes place on that basis (Art. 45 of the Regulation).

7. Retention period Art. 13(2)(a)

• Subscription to the weekly update: for as long as you remain subscribed. After you unsubscribe we keep only what is needed to prove that we did so.
• Valuation requests and proposals: 24 months from the last contact, after which the message is deleted. The only exceptions are cases in which the request gives rise to a relationship that requires different retention times, or in which retention is necessary to establish, exercise or defend a legal claim in court.
• Technical connection data: for the periods set by the infrastructure provider in its own notice.

You can ask for deletion even before these terms, at any time, by writing to info@saiquanto.it.

8. Rights of the data subject Arts. 15–22, 13(2)(b)–(d)

You can at any time ask for access to your data, its rectification or erasure, restriction of processing and portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before the withdrawal.

To exercise these rights — including withdrawing consent and being removed from the list — a message to info@saiquanto.it is enough. We reply within one month, as provided by Art. 12(3).

If you believe the processing violates the Regulation, you have the right to lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (Piazza Venezia 11, 00187 Rome — garanteprivacy.it), or with the supervisory authority of the State where you habitually reside.

9. Automated decision-making Art. 13(2)(f)

There is no automated decision-making and no profiling of any kind. Replies to requests are written by a person.

10. Cookies and tracking tools

The site installs no cookies, neither technical nor third-party, and uses no analytics tools, pixels or identifiers of any kind. For this reason no consent banner appears: there is nothing to consent to. Fonts are served from this same domain and generate no requests to outside servers. The pages contain no forms, and the only JavaScript present is ours, hosted on this domain: it makes tables and charts readable and doesn't record, measure or transmit anything. There is nothing on this site that can collect data unless you decide to write an email.

11. Property data published on the site

The numbers published on the observatory's pages are statistical aggregates — medians and counts by neighborhood — calculated on public real estate listings. They contain no personal data, don't identify sellers, owners or agencies, and don't report individual listings, addresses or contact details. How they are built is explained on the Methodology page.

12. Changes to this notice

This notice may be updated if the services used or the purposes of the processing change. The version in force is always the one published at this address, with the date of the last update shown at the top. Changes affecting processing based on consent are communicated to subscribers before they take effect.