Information on the processing of personal data (Articles 6, 7, 13 and 14, EU Regulation 679/2016 GDPR)

The European Regulation No. 679/2016 GDPR, applicable in all Member States, recognises the protection of personal data processed by third parties as an expression of respect for human dignity and the fundamental rights and freedoms of the individual.
On the basis of the provisions of the aforementioned Regulation, we wish to inform you that your data will be processed by us in full compliance with the principles of lawfulness, correctness, relevance, proportionality and transparency and the protection of the confidentiality of your data and rights in accordance with the provisions of the aforementioned law.
We also wish to inform you that for the establishment and/or performance of existing contractual relationships and for the fulfilment of specific legal obligations, we need to acquire your personal data, or will need to acquire them at a later date, without the need for your further consent, which is implicit in the conclusion of the contract/agreement between the parties and/or assignment of the task in question. For the processing of your data for purposes other than those referred to in the contract/agreement between the parties or connected with the fulfilment of legal obligations to which the Data Controller is bound, there is an obligation, pursuant to Article 7 of EU Regulation 679/2016, to request and obtain, in writing, your informed consent. Said consent is to be considered freely given by the data subject without it being in any way connected to the performance of the contractual relationship between the parties, nor can it be a reason for the termination of said contract or failure to perform the obligations provided for therein or connected thereto.
Therefore, in accordance with the provisions of the European and internal regulations in force, we provide you with the following information.

1. Personal data subject to processing
For the purpose of carrying out the activity referred to in the assignment/contract between the parties, and in order to fulfil your request for services, we have to use some of your personal data. This includes identification data, contact details (address, landline telephone number, mobile phone number, fax number, e-mail address), any data relating to your real estate assets, data relating to your economic capacity, land registry certificates and real estate certificates.

2. Purpose, legal basis and obligatory or optional nature of processing
The purposes of the processing to which your data are destined are related to the performance of contractual and pre-contractual relationships existing between the parties, for the fulfilment of legal regulations and obligations to which the Data Controller is subject and for the pursuit of legitimate interests of the Data Controller or of third parties, where previously authorised.
Please note that the provision of such data is compulsory in the sense that, otherwise, we would not be able to fulfil, in whole or in part, the aforementioned mandate, and that your data may also be collected from other parties.
The further purpose of the processing for which your data is intended is:
- Promotional activities
- Advertising
- Customer satisfaction surveys
- Marketing (market analysis and surveys)

3. Data controller
The data controller is: LEAD SRL, with registered office in Rome (RM), Via Properzio 5, tax code 15462671007, VAT number 15462671007.
Possible data processors will be appointed, when the data controller entrusts external tasks for the performance of which it is necessary to share your data, from among those who offer sufficient guarantees to implement adequate technical and organisational measures so that the processing meets the requirements of the Regulation and guarantees the protection of the rights of the data subject, and after the data processor has signed a contract/addendum to the professional assignment containing the requirements and specifications of the processing itself.

4. Recipients of personal data
Your data will be made available to our internal administrative staff, specifically appointed for this purpose, and to our external collaborators, appointed for this purpose as Data Processors for the specific processing in question, the list of which is available at our offices.
Said data will also be communicated to our service providers, such as IT service companies, outsourcing companies, consultants and freelance professionals, agencies and/or patronages, companies or entities appointed by us as Data Processors for the specific processing and whose list is available at our offices. In addition to this, for the sole purpose of being able to best fulfil the mandate you have given us, we inform you that your data may also be communicated to other Agencies with which we have collaboration agreements in place.

5. Data transfers
As some of your Personal Data are transferred to Recipients that may be located outside the European Economic Area, the Controller ensures that the electronic and paper processing of your Personal Data by the Recipients is carried out in compliance with the Applicable Legislation. 

6. Modalities of data processing and storage
The processing and storage of the data will be carried out with the aid of automated computerised and/or paper means and tools, such as to allow you access to your personal data in our possession, according to the most suitable methods for guaranteeing its integrity, updating, security and confidentiality, also protecting it from unauthorised and/or unlawful processing as well as from loss, destruction or accidental damage.
Without prejudice to disclosures that are made in compliance with legal obligations, the data may be disclosed to external parties who perform specific tasks on behalf of the writer subject to their express commitment to the protection of your personal data in accordance with the provisions of this Information Notice and the rules on the Data Processor set out in Articles 28 et seq. of EU Regulation 679/2016 GDPR, as well as the applicable legal provisions.

7. Duration of processing
The data processing will take place for the entire duration of the relationship established between the parties and, after the conclusion of the existing relationship/contract, in order to comply with legal obligations of a civil and fiscal nature applicable to the existing relationship, as well as any other legal fulfilment/obligation to which the Data Controller is bound.

8. Rights of the data subject
At any time you may exercise, by written request, against the Data Controller identified above, all the rights recognised by the applicable European and domestic legislation and in particular by Articles 13, 14, 15 to 22 and 34 of the European Regulation and by the national legislation in force, and in particular
a) the right to obtain confirmation of the existence or otherwise of data concerning you, even if not yet registered, and their communication in intelligible form.the right to obtain free access to and/or copy of your personal data undergoing processing with an indication of all aspects relevant to the processing provided for by the Eu. Reg.
b) the right to obtain, free of charge, the updating, rectification of inaccurate data, restriction of processing or, where interested, integration of the data
c) the right to object, in whole or in part, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection for legitimate reasons, or to withdraw, in whole or in part, his/her consent where necessary
d) the right to lodge a complaint with a supervisory authority (Data Protection Authority) or judicial authority;

9. Rights of the data subject
The full list of the data subject's rights is available in hard copy at the Data Controller's Head Office or by email upon written request by the same.