1. Header
Information on the processing of personal data – Website www.marucciaapuliaestates.com
Last updated: 14 October 2026
This notice describes how personal data of users who visit www.marucciaapuliaestates.com and use the online contact form are processed, pursuant to Regulation (EU) 2016/679 (“GDPR”) and applicable Italian data protection law.
2. Data controller
The data controller is:
MAE di Maruccia Simone
with registered office at Piazza San Michele, 36 - Castrignano del Capo (LE) 73040, Italy
VAT no. 05491870753
email: info@marucciaapuliaestates.com
tel.: +39 3791607040
For any request relating to the processing of personal data or to exercise the rights set out in section 13, you may contact the Controller at the addresses indicated above.
3. Types of data processed
3.1 Data voluntarily provided through the contact form
Through the contact form on the website, the user may send information or contact requests to the Studio.
In this context, the following personal data may be collected:
- first and last name;
- contact details (email address and/or phone number);
- any further personal data voluntarily entered by the user in the message text.
Users are invited not to include in the message information that goes beyond the purpose of the request (for example special/sensitive data).
3.2 Browsing data and technical data
The website automatically acquires certain technical browsing data (for example IP address, date and time of access, requested URLs, browser and device type), necessary for the operation of the website and to ensure the security of communications.
Such data are used solely for technical and security purposes, as further specified in section 4.
4. Purposes of processing
Personal data collected through the website are processed for the following purposes:
- a) managing and responding to requests sent by the user through the contact form;
- b) managing any subsequent contacts with the user in relation to the request sent (for example arranging an appointment, providing further clarifications or information on the Studio’s services);
- c) entering the data into the Studio’s management system/CRM for organisational and administrative purposes connected with handling requests and pre-contractual or contractual relationships;
- d) complying with legal obligations (for example of an administrative, accounting and tax nature) that may be connected with the relationship established with the user;
- e) ensuring the security of the website, the proper operation of online services and the protection of the Controller’s rights (for example in the event of abuse or unauthorised access attempts).
5. Legal basis for processing
For the purposes above, the legal basis for processing is as follows:
- for the purposes under letters a) and b): the performance of pre-contractual measures taken at the data subject’s request (Art. 6(1)(b) GDPR); and, where necessary, the Controller’s legitimate interest in managing and organising contacts received (Art. 6(1)(f) GDPR);
- for the purpose under letter c): the Controller’s legitimate interest in ensuring proper internal organisation and the management of relationships with users and prospective clients (Art. 6(1)(f) GDPR);
- for the purpose under letter d): compliance with a legal obligation to which the Controller is subject (Art. 6(1)(c) GDPR);
- for the purpose under letter e): the Controller’s legitimate interest in ensuring website security, preventing abuse and defending its rights (Art. 6(1)(f) GDPR).
At present, data collected through the website are not used for direct marketing or profiling purposes.
6. Methods of processing
Data are processed using IT and telematic tools and, where necessary, also on paper, in accordance with the principles of lawfulness, fairness, transparency, minimisation and security provided for by the GDPR.
Appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, loss, disclosure or misuse.
7. Provision of data
Providing data through the contact form is optional, but necessary in order to manage and respond to the request sent by the user.
Failure to provide the data marked as mandatory in the form (for example name, email/phone contact details, content of the request) may make it impossible for the Controller to provide a response.
8. Recipients of the data
Personal data may be processed, within the limits of their respective roles, by:
- staff and collaborators of the Studio, specifically authorised and instructed;
- IT and telematic service providers (for example website hosting providers, email service providers, any management system/CRM provider), appointed, where applicable, as processors pursuant to Art. 28 GDPR;
- consultants and professionals (for example accounting/tax consultants), within the limits necessary to perform their assignments;
- public authorities and parties entitled to request the data under legal provisions.
An up-to-date list of processors may be requested from the Controller at the contact details indicated in section 2.
9. Transfers of data to third countries
Processing connected with the management of the website and the contact form generally takes place within the European Economic Area (EEA).
If it becomes necessary to use providers established outside the EEA, the Controller will ensure that the transfer takes place in accordance with Articles 44 et seq. of the GDPR, for example on the basis of an adequacy decision of the European Commission or standard contractual clauses approved by the Commission.
10. Data retention period
Personal data collected through the contact form are retained for the time strictly necessary to manage and respond to the user’s request and, in any event, for no longer than 24 months from the last relevant contact, unless a contractual relationship is established.
In the event of a contractual relationship, the data will be retained for the entire duration of the relationship and, thereafter, for the time necessary to comply with legal obligations and for any exercise of rights in court by the Controller (for example for applicable limitation periods).
Technical browsing data are retained for the time necessary to ensure the operation and security of the website, without prejudice to any further retention where needed to establish liability in the event of cybercrime against the website or the Controller.
11. Promotional communications and marketing
The website does not currently provide for newsletter subscription or the sending of promotional or commercial communications using data collected from the contact form.
Data provided by the user will not be used for direct marketing or profiling purposes without first obtaining, where required, specific consent.
If newsletter services or other forms of commercial communication are activated in the future, the Controller will provide an updated notice and will request the user’s consent where necessary.
13. Rights of the data subject
The user, as data subject, may at any time exercise vis-à-vis the Controller the rights provided for by Articles 15–22 of the GDPR, and in particular:
- right of access to their personal data;
- right to rectification of inaccurate data or completion of incomplete data;
- right to erasure of data (“right to be forgotten”), in the cases provided for by law;
- right to restriction of processing;
- right to data portability, in the cases provided for by Art. 20 GDPR;
- right to object to processing based on the Controller’s legitimate interest;
- right to withdraw any consent given, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise such rights, the user may contact the Controller at the addresses indicated in section 2.
The user also has the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with another competent supervisory authority.
14. Updates to this notice
This notice may be subject to changes and updates, including as a result of regulatory, technological or operational changes to the website.
In the event of material changes, the Controller will provide notice via the website. Users are therefore invited to consult this page periodically.